[2026-08-04 23:42:23.0982882 UTC-04:00] [8200:8204] [fcmonitor 1249 info] (Time Zone: Eastern Standard Time) (Sun Jun 30 22:28:59 2024, 59s) 2026-08-04 23:42:23.090 type: 0x10f size: 512 memory: 0x0000000000000000 [2026-08-04 23:42:23.0992093 UTC-04:00] [8200:8204] [fcmonitor 78 debug] ems_serial FCTEMS8821002497 [2026-08-04 23:42:23.1007958 UTC-04:00] [8200:8204] [fcmonitor 85 debug] fct_serial FCT8000515779876 [2026-08-04 23:42:23.1009774 UTC-04:00] [8200:8204] [fcmonitor 94 debug] fct_uid 4EF5549DB1674A63BE848553987D4AEE [2026-08-04 23:42:23.1010145 UTC-04:00] [8200:8204] [fcmonitor 103 debug] vdom default [2026-08-04 23:42:23.1010269 UTC-04:00] [8200:8204] [fcmonitor 843 info] InitCryptAlg [2026-08-04 23:42:23.1017510 UTC-04:00] [8200:8204] [fcmonitor 41 info] before LoadSettings [2026-08-04 23:42:23.1018839 UTC-04:00] [8200:8204] [fcmonitor 45 info] folder C:\Users\%USERNAME%\Desktop\ [2026-08-04 23:42:23.1018927 UTC-04:00] [8200:8204] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-04 23:42:23.1109228 UTC-04:00] [8200:8204] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-04 23:42:23.1110001 UTC-04:00] [8200:8204] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 0 [2026-08-04 23:42:23.1110640 UTC-04:00] [8200:8204] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 0 [2026-08-04 23:42:23.1111281 UTC-04:00] [8200:8204] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 0 [2026-08-04 23:42:23.1111913 UTC-04:00] [8200:8204] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 0 [2026-08-04 23:42:23.1112513 UTC-04:00] [8200:8204] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 0 [2026-08-04 23:42:23.1112608 UTC-04:00] [8200:8204] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 done [2026-08-04 23:42:23.1112670 UTC-04:00] [8200:8204] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-04 23:42:23.1112779 UTC-04:00] [8200:8204] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-04 23:42:23.1112814 UTC-04:00] [8200:8204] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-04 23:42:23.1112844 UTC-04:00] [8200:8204] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-04 23:42:23.1112874 UTC-04:00] [8200:8204] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-04 23:42:23.1112908 UTC-04:00] [8200:8204] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-04 23:42:23.1113085 UTC-04:00] [8200:8204] [fcmonitor 16 debug] add session=0 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-04 23:42:23.1715366 UTC-04:00] [8200:8204] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-04 23:42:23.1793401 UTC-04:00] [8200:8204] [fcmonitor 228 info] parsed to C:\Users\cloughec\Desktop\ for session 1 [2026-08-04 23:42:23.1810469 UTC-04:00] [8200:8204] [fcmonitor 228 info] parsed to C:\Users\cloughec\Documents\ for session 1 [2026-08-04 23:42:23.1838129 UTC-04:00] [8200:8204] [fcmonitor 228 info] parsed to C:\Users\cloughec\Favorites\ for session 1 [2026-08-04 23:42:23.1874778 UTC-04:00] [8200:8204] [fcmonitor 228 info] parsed to C:\Users\cloughec\Music\ for session 1 [2026-08-04 23:42:23.1905558 UTC-04:00] [8200:8204] [fcmonitor 228 info] parsed to C:\Users\cloughec\Pictures\ for session 1 [2026-08-04 23:42:23.1923255 UTC-04:00] [8200:8204] [fcmonitor 228 info] parsed to C:\Users\cloughec\Videos\ for session 1 [2026-08-04 23:42:23.1923374 UTC-04:00] [8200:8204] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 done [2026-08-04 23:42:23.1923428 UTC-04:00] [8200:8204] [fcmonitor 435 info] add c:\users\cloughec\desktop\ [2026-08-04 23:42:23.1923467 UTC-04:00] [8200:8204] [fcmonitor 435 info] add c:\users\cloughec\documents\ [2026-08-04 23:42:23.1923496 UTC-04:00] [8200:8204] [fcmonitor 435 info] add c:\users\cloughec\favorites\ [2026-08-04 23:42:23.1923524 UTC-04:00] [8200:8204] [fcmonitor 435 info] add c:\users\cloughec\music\ [2026-08-04 23:42:23.1923553 UTC-04:00] [8200:8204] [fcmonitor 435 info] add c:\users\cloughec\pictures\ [2026-08-04 23:42:23.1923582 UTC-04:00] [8200:8204] [fcmonitor 435 info] add c:\users\cloughec\videos\ [2026-08-04 23:42:23.1923690 UTC-04:00] [8200:8204] [fcmonitor 16 debug] add session=1 ret=1 str=C:\Users\cloughec\Desktop\;C:\Users\cloughec\Documents\;C:\Users\cloughec\Favorites\;C:\Users\cloughec\Music\;C:\Users\cloughec\Pictures\;C:\Users\cloughec\Videos\ [2026-08-04 23:42:23.1923716 UTC-04:00] [8200:8204] [fcmonitor 52 debug] reload monitor folder for session 0 [2026-08-04 23:42:23.1923839 UTC-04:00] [8200:8204] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-04 23:42:23.1923867 UTC-04:00] [8200:8204] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-04 23:42:23.2519188 UTC-04:00] [8200:8204] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 189207912448 499455451136 189207912448 [2026-08-04 23:42:23.2519304 UTC-04:00] [8200:8204] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-04 23:42:23.5947200 UTC-04:00] [8200:8204] [fcmonitor 232 info] queue lock 0x3a0 cleanevent 0x3a4 [2026-08-04 23:42:23.5952650 UTC-04:00] [8200:8204] [fcmonitor 245 info] init succeed [2026-08-04 23:42:23.5952708 UTC-04:00] [8200:8204] [fcmonitor 438 info] reading cache [2026-08-04 23:42:23.7347909 UTC-04:00] [8200:8204] [fcmonitor 440 info] getting all proc [2026-08-04 23:42:23.8430032 UTC-04:00] [8200:8204] [fcmonitor 159 debug] getting all proc [2026-08-04 23:42:23.8460780 UTC-04:00] [8200:8204] [fcmonitor 192 warning] GetAllProcTree can't find module 4 System [2026-08-04 23:42:23.9485821 UTC-04:00] [8200:8204] [fcmonitor 192 warning] GetAllProcTree can't find module 100 Registry [2026-08-04 23:42:24.3518481 UTC-04:00] [8200:8204] [fcmonitor 192 warning] GetAllProcTree can't find module 2580 Memory Compression [2026-08-04 23:42:25.4828808 UTC-04:00] [8200:8204] [fcmonitor 192 warning] GetAllProcTree can't find module 8332 net.exe [2026-08-04 23:42:25.5611338 UTC-04:00] [8200:8204] [fcmonitor 192 warning] GetAllProcTree can't find module 8620 net1.exe [2026-08-04 23:42:25.5625133 UTC-04:00] [8200:8204] [fcmonitor 192 warning] GetAllProcTree can't find module 8664 conhost.exe [2026-08-04 23:42:26.5509761 UTC-04:00] [8200:8204] [fcmonitor 286 debug] getting all proc finished 140 0 [2026-08-04 23:42:26.5509834 UTC-04:00] [8200:8204] [fcmonitor 442 info] finish [2026-08-04 23:42:26.5510928 UTC-04:00] [8200:8204] [fcmonitor 267 info] heap p 0x000002B60FF4E310 [2026-08-04 23:42:26.5511414 UTC-04:00] [8200:8204] [fcmonitor 267 info] heap p 0x000002B60FF4E7C0 [2026-08-04 23:42:26.5511761 UTC-04:00] [8200:8204] [fcmonitor 267 info] heap p 0x000002B60FE999D0 [2026-08-04 23:42:26.5512128 UTC-04:00] [8200:8204] [fcmonitor 267 info] heap p 0x000002B60FE98880 [2026-08-04 23:42:26.5512483 UTC-04:00] [8200:8204] [fcmonitor 267 info] heap p 0x000002B60FE99220 [2026-08-04 23:42:26.5512848 UTC-04:00] [8200:8204] [fcmonitor 267 info] heap p 0x000002B60FE97A10 [2026-08-04 23:42:26.5513174 UTC-04:00] [8200:8204] [fcmonitor 267 info] heap p 0x000002B60FE97EE0 [2026-08-04 23:42:26.5513814 UTC-04:00] [8200:8204] [fcmonitor 267 info] heap p 0x000002B60FE98D50 [2026-08-04 23:42:26.5967555 UTC-04:00] [8200:9424] [fcmonitor 475 warning] session 1 not init [2026-08-04 23:42:26.5970943 UTC-04:00] [8200:9428] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-04 23:42:26.6019339 UTC-04:00] [8200:9432] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-04 23:42:26.6024267 UTC-04:00] [8200:9436] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-04 23:42:26.6025097 UTC-04:00] [8200:9440] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-04 23:42:26.6025973 UTC-04:00] [8200:9444] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-04 23:42:26.6026859 UTC-04:00] [8200:9448] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-04 23:42:26.6027671 UTC-04:00] [8200:9452] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-04 23:42:26.6028455 UTC-04:00] [8200:9456] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-04 23:42:26.6159979 UTC-04:00] [8200:9424] [fcmonitor 228 info] parsed to C:\Users\cloughec\Desktop\ for session 1 [2026-08-04 23:42:26.6179405 UTC-04:00] [8200:9424] [fcmonitor 228 info] parsed to C:\Users\cloughec\Documents\ for session 1 [2026-08-04 23:42:26.6197972 UTC-04:00] [8200:9424] [fcmonitor 228 info] parsed to C:\Users\cloughec\Favorites\ for session 1 [2026-08-04 23:42:26.6216864 UTC-04:00] [8200:9424] [fcmonitor 228 info] parsed to C:\Users\cloughec\Music\ for session 1 [2026-08-04 23:42:26.6237567 UTC-04:00] [8200:9424] [fcmonitor 228 info] parsed to C:\Users\cloughec\Pictures\ for session 1 [2026-08-04 23:42:26.6256693 UTC-04:00] [8200:9424] [fcmonitor 228 info] parsed to C:\Users\cloughec\Videos\ for session 1 [2026-08-04 23:42:26.6256848 UTC-04:00] [8200:9424] [fcmonitor 435 info] add c:\users\cloughec\desktop\ [2026-08-04 23:42:26.6256898 UTC-04:00] [8200:9424] [fcmonitor 435 info] add c:\users\cloughec\documents\ [2026-08-04 23:42:26.6256934 UTC-04:00] [8200:9424] [fcmonitor 435 info] add c:\users\cloughec\favorites\ [2026-08-04 23:42:26.6256967 UTC-04:00] [8200:9424] [fcmonitor 435 info] add c:\users\cloughec\music\ [2026-08-04 23:42:26.6256998 UTC-04:00] [8200:9424] [fcmonitor 435 info] add c:\users\cloughec\pictures\ [2026-08-04 23:42:26.6257031 UTC-04:00] [8200:9424] [fcmonitor 435 info] add c:\users\cloughec\videos\ [2026-08-04 23:42:28.9739722 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 9612 \??\C:\Windows\system32\igfxEM.exe [2026-08-04 23:42:28.9739847 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 9612 C:\Windows\system32\igfxEM.exe [2026-08-04 23:42:29.3631502 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 9640 \??\C:\Windows\system32\igfxHK.exe [2026-08-04 23:42:29.3631602 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 9640 C:\Windows\system32\igfxHK.exe [2026-08-04 23:42:29.5158517 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 9660 \??\C:\Windows\system32\igfxTray.exe [2026-08-04 23:42:29.5158608 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 9660 C:\Windows\system32\igfxTray.exe [2026-08-04 23:42:31.9094283 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 10040 \??\C:\Windows\system32\userinit.exe [2026-08-04 23:42:31.9094389 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 10040 C:\Windows\system32\userinit.exe [2026-08-04 23:42:33.2658974 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 10232 \??\C:\Windows\Explorer.EXE [2026-08-04 23:42:33.2659077 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 10232 C:\Windows\Explorer.EXE [2026-08-04 23:43:02.0017985 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 11584 \??\C:\Windows\system32\wlrmdr.exe [2026-08-04 23:43:02.0018252 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 11584 C:\Windows\system32\wlrmdr.exe [2026-08-04 23:43:11.5147314 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 1448 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-04 23:43:11.5147563 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 1448 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-04 23:43:12.4048784 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 11756 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-04 23:43:12.4048889 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 11756 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-04 23:43:13.4985871 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 11140 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.251.21\MicrosoftEdgeUpdateCore.exe [2026-08-04 23:43:13.4986107 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 11140 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.251.21\MicrosoftEdgeUpdateCore.exe [2026-08-04 23:43:14.1704404 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 2516 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-04 23:43:14.1704497 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 2516 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-04 23:43:15.0140825 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 9180 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-04 23:43:15.0140925 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 9180 C:\Windows\SysWOW64\runonce.exe [2026-08-04 23:43:15.1706579 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 10576 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-04 23:43:15.1706771 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 10576 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-04 23:43:16.1236836 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 10044 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-04 23:43:16.1236938 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 10044 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-04 23:43:18.4826137 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 11792 \??\C:\Windows\System32\cmd.exe [2026-08-04 23:43:18.4826245 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 11792 C:\Windows\System32\cmd.exe [2026-08-04 23:43:19.0856641 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 5828 \??\C:\Windows\System32\cmd.exe [2026-08-04 23:43:19.0856727 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 5828 C:\Windows\System32\cmd.exe [2026-08-04 23:43:19.2171243 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 12004 \SystemRoot\System32\Conhost.exe [2026-08-04 23:43:19.2171341 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 12004 \SystemRoot\System32\Conhost.exe [2026-08-04 23:43:19.2678448 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 2332 \SystemRoot\System32\Conhost.exe [2026-08-04 23:43:19.2678548 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 2332 \SystemRoot\System32\Conhost.exe [2026-08-04 23:43:19.3747777 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 3328 \??\C:\Windows\System32\cmd.exe [2026-08-04 23:43:19.3747871 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 3328 C:\Windows\System32\cmd.exe [2026-08-04 23:43:19.4357111 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 7980 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-04 23:43:19.4357206 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 7980 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-04 23:43:19.4698524 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 11136 \SystemRoot\System32\Conhost.exe [2026-08-04 23:43:19.4698624 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 11136 \SystemRoot\System32\Conhost.exe [2026-08-04 23:43:22.4158096 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 10440 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-04 23:43:22.4158210 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 10440 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-04 23:43:26.1287758 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 7508 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-04 23:43:26.1288009 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 7508 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-04 23:43:26.3019231 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 8240 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-04 23:43:26.3019321 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 8240 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-04 23:43:26.3036772 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 8304 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-04 23:43:26.3036850 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 8304 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-04 23:43:26.3059644 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 8308 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-04 23:43:26.3059736 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 8308 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-04 23:43:26.3074694 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 12020 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-04 23:43:26.3074778 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 12020 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-04 23:43:26.3092284 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 1832 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-04 23:43:26.3092370 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 1832 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-04 23:43:52.8866499 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 13060 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-04 23:43:52.8866732 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 13060 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-04 23:44:24.7315326 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 10604 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-04 23:44:24.7315559 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 10604 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-04 23:44:39.4402384 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 5392 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-04 23:44:39.4402627 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 5392 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-04 23:44:48.6597641 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 3044 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-04 23:44:48.6597824 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 3044 C:\IMC\MPS\IMCMobil.exe [2026-08-04 23:44:49.7404846 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 3736 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-04 23:44:49.7404935 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 3736 C:\IMC\MPS\iIMCMobl.exe [2026-08-04 23:45:12.6058177 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 7408 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-04 23:45:12.6058409 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 7408 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-04 23:45:22.9053402 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 8020 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-04 23:45:22.9053665 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 8020 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-04 23:45:48.5895336 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 8816 \??\C:\Windows\splwow64.exe [2026-08-04 23:45:48.5895564 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 8816 C:\Windows\splwow64.exe [2026-08-04 23:51:13.5385706 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 9036 \SystemRoot\System32\Conhost.exe [2026-08-04 23:51:13.5386147 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 9036 \SystemRoot\System32\Conhost.exe [2026-08-05 00:06:12.7914146 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 11360 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-05 00:06:12.7914508 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 11360 C:\IMC\RMS\TRAFFIC.EXE [2026-08-05 01:03:25.9107422 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 15052 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:25.9107978 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 15052 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:26.1149243 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 15216 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:26.1149366 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 15216 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:26.1179468 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 15224 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:26.1179562 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 15224 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:26.3125543 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 15312 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:26.3125652 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 15312 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:26.3141814 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 15340 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:26.3141908 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 15340 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:28.3162331 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 14236 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:28.3162441 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 14236 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:30.4990956 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 15504 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:30.4991066 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 15504 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:35.7653550 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 15732 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:35.7653795 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 15732 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:38.7363840 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 15852 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:38.7363965 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 15852 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:38.7794546 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 15880 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:38.7794660 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 15880 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:47.3842485 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 16144 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:47.3842769 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 16144 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:47.5825458 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 16224 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:47.5825567 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 16224 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:48.6663669 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 16316 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:48.6663927 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 16316 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:48.7100388 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 16348 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:48.7101669 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 16348 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:49.4813892 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 14644 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:49.4813993 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 14644 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:49.4991199 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 15408 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:03:49.4992030 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 15408 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:04:07.7660331 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 15836 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:04:07.7660565 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 15836 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:04:08.1978355 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 16080 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:04:08.1978464 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 16080 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:04:11.1019728 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 3176 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:04:11.1019826 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 3176 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:08:27.3013168 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 9380 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:08:27.3013545 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 9380 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 01:13:59.1142333 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 17052 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-05 01:13:59.1142710 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 17052 C:\IMC\RMS\TRAFFIC.EXE [2026-08-05 01:43:47.6925477 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 18180 \SystemRoot\System32\Conhost.exe [2026-08-05 01:43:47.6925855 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 18180 \SystemRoot\System32\Conhost.exe [2026-08-05 03:15:24.7235463 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 24032 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-05 03:15:24.7235845 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 24032 C:\IMC\RMS\TRAFFIC.EXE [2026-08-05 03:43:48.3123097 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 25692 \SystemRoot\System32\Conhost.exe [2026-08-05 03:43:48.3123456 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 25692 \SystemRoot\System32\Conhost.exe [2026-08-05 03:59:41.3073200 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 24068 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 03:59:41.3075473 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 24068 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 03:59:46.7534405 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 21848 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 03:59:46.7534669 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 21848 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 03:59:54.5220622 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 26752 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 03:59:54.5221100 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 26752 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 03:59:54.5740178 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 25676 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 03:59:54.5740330 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 25676 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:15.5355497 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31604 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:15.5355868 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31604 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:15.7555141 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31664 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:15.7555255 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31664 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:19.2602369 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 29988 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:19.2602528 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 29988 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:19.8104048 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31192 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:19.8104153 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31192 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:20.4887372 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31336 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:20.4887468 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31336 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:21.5719449 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31784 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:21.5719545 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31784 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:21.5840524 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31796 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:21.5840639 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31796 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:22.3901923 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32032 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:22.3902766 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32032 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:23.6303858 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32128 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:23.6304005 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32128 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:23.7852412 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32164 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:23.7852514 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32164 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:23.8036667 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32188 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:23.8036769 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32188 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.0297518 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32576 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.0300557 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32576 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.0320646 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32584 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.0320744 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32584 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.0336765 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32592 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.0336865 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32592 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.0654634 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32632 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.0654742 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32632 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.0668635 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32640 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.0668736 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32640 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.0697006 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32648 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.0697111 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32648 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.0709849 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32656 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.0709947 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32656 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.0733379 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32664 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.0733461 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32664 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.1126940 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32672 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.1127106 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32672 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.1145377 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32680 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.1145465 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32680 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.1171154 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32692 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.1171246 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32692 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.1193531 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32688 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.1193635 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32688 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.1206643 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32704 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.1206724 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32704 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.1218264 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32712 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.1218339 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32712 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.1228400 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32720 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:25.1228495 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32720 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:28.0102096 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33584 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:28.0102201 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33584 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:28.4546450 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33688 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:28.4546592 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33688 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:28.4568211 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33696 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:28.4568306 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33696 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:29.1191497 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33812 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:29.1191626 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33812 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:29.1206729 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33824 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:29.1206853 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33824 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:29.8417437 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 34048 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:29.8417538 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 34048 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:29.8438714 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 34068 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:29.8438881 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 34068 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:29.8476617 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 34076 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:29.8476699 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 34076 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:29.8493439 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 34084 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:29.8493532 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 34084 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:29.8709525 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 34108 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:29.8709634 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 34108 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:31.3934651 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 34440 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:31.3934776 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 34440 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:32.4289416 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 34520 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:32.4289520 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 34520 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:32.4710652 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 34548 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:32.4710762 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 34548 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:32.6993728 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 34620 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:32.6993887 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 34620 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:32.8777312 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 34692 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:32.8777419 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 34692 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:32.9088877 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 34716 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:32.9089030 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 34716 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:32.9595411 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 34764 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:32.9595513 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 34764 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:33.1237201 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33388 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:33.1238370 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33388 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:33.1819071 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33484 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:33.1819177 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33484 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:33.2822214 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32928 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:08:33.2822319 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32928 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:09:25.8344453 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32728 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:09:25.8344714 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32728 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:09:26.8989131 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33516 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:09:26.8989240 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33516 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:09:28.4827423 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31244 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:09:28.4827534 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31244 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:13:50.9024785 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 34208 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:13:50.9026378 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 34208 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:15:04.9125126 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 28692 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:15:04.9125906 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 28692 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:15:08.1046147 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 20504 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:15:08.1046263 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 20504 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:15:08.1495725 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31460 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:15:08.1495837 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31460 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:15:55.3595921 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33180 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:15:55.3596175 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33180 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:15:55.5802690 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 34132 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:15:55.5802793 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 34132 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:15:59.2792652 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33964 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:15:59.2792763 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33964 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:15:59.5478038 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33160 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:15:59.5478142 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33160 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:15:59.8278407 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32784 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:15:59.8278518 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32784 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:00.1410765 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 34508 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:00.1410889 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 34508 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:00.1426119 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33820 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:00.1426203 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33820 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:01.0431222 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33268 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:01.0431335 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33268 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:01.0655502 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32676 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:01.0655649 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32676 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:02.8326515 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 34084 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:02.8326621 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 34084 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.0113498 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33692 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.0113620 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33692 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.0148241 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32680 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.0148333 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32680 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.0183812 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31760 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.0183918 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31760 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.0209373 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31780 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.0209491 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31780 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.0220405 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32600 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.0220546 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32600 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.1128090 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32480 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.1128193 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32480 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.1143986 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32472 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.1144079 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32472 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.1158859 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31828 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.1158952 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31828 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.1182592 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31896 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.1182683 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31896 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.1354820 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33448 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.1354922 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33448 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.1370470 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31872 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.1370562 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31872 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.1616057 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32948 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.1616160 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32948 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.1780975 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32944 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.1781083 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32944 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.1794526 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33456 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:03.1794635 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33456 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:04.5310609 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33176 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:04.5310851 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33176 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:05.2596398 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31032 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:05.2596498 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31032 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:05.4560832 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31244 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:05.4560930 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31244 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:05.4572875 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 34324 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:05.4572961 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 34324 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:06.0290363 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 26736 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:06.0290470 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 26736 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:06.3734635 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 25504 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:06.3734730 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 25504 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:06.3796180 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31104 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:06.3796328 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31104 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:06.3824398 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 27592 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:06.3824502 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 27592 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:06.4422019 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31776 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:06.4422172 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31776 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:06.5078015 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32056 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:06.5078114 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32056 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:07.0422251 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31324 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:07.0422347 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31324 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:07.0717970 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33384 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:07.0718071 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33384 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:08.1493404 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 24316 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:08.1493502 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 24316 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:08.5691314 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31620 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:08.5691431 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31620 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:09.3879861 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32972 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:16:09.3879962 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32972 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 05:43:48.3987475 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 36724 \SystemRoot\System32\Conhost.exe [2026-08-05 05:43:48.3987992 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 36724 \SystemRoot\System32\Conhost.exe [2026-08-05 06:57:29.5108848 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 38680 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 06:57:29.5109213 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 38680 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 06:57:37.7492745 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33196 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 06:57:37.7492981 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33196 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 06:57:37.7935464 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 23868 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 06:57:37.7935578 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 23868 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 06:59:45.7213420 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32988 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 06:59:45.7213687 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32988 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 06:59:45.9254129 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33808 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 06:59:45.9254278 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33808 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 06:59:46.1004052 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 34572 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 06:59:46.1004150 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 34572 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 06:59:46.1115788 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31292 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 06:59:46.1115901 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31292 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 06:59:46.2536572 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 39716 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 06:59:46.2536675 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 39716 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 06:59:46.3449897 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33696 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 06:59:46.3449994 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33696 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 06:59:48.0837497 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32716 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-05 06:59:48.0837603 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32716 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-05 06:59:48.1128059 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31160 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-05 06:59:48.1128162 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31160 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-05 07:00:16.1163496 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 34552 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:00:16.1163793 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 34552 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:00:17.4681515 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32872 \??\C:\Windows\system32\LogonUI.exe [2026-08-05 07:00:17.4681620 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32872 C:\Windows\system32\LogonUI.exe [2026-08-05 07:00:22.1802950 UTC-04:00] [8200:9084] [fcmonitor 90 debug] session change reason=6 session=1 [2026-08-05 07:00:22.1803117 UTC-04:00] [8200:9084] [fcmonitor 117 debug] add reason=6 session=1 ret=1 [2026-08-05 07:00:22.5943261 UTC-04:00] [8200:9084] [fcmonitor 90 debug] session change reason=2 session=1 [2026-08-05 07:00:22.5943326 UTC-04:00] [8200:9084] [fcmonitor 117 debug] add reason=2 session=1 ret=1 [2026-08-05 07:00:22.7023296 UTC-04:00] [8200:9424] [fcmonitor 475 warning] session 2 not init [2026-08-05 07:00:22.7144173 UTC-04:00] [8200:9424] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-05 07:00:22.7145069 UTC-04:00] [8200:9424] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-05 07:00:22.7145822 UTC-04:00] [8200:9424] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-05 07:00:22.7146548 UTC-04:00] [8200:9424] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-05 07:00:22.7147277 UTC-04:00] [8200:9424] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-05 07:00:22.7147990 UTC-04:00] [8200:9424] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-05 07:00:22.7148159 UTC-04:00] [8200:9424] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-05 07:00:22.7148203 UTC-04:00] [8200:9424] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-05 07:00:22.7148229 UTC-04:00] [8200:9424] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-05 07:00:22.7148255 UTC-04:00] [8200:9424] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-05 07:00:22.7148279 UTC-04:00] [8200:9424] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-05 07:00:22.7148338 UTC-04:00] [8200:9424] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-05 07:00:24.2294405 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 12184 \??\C:\Windows\system32\LogonUI.exe [2026-08-05 07:00:24.2294628 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 12184 C:\Windows\system32\LogonUI.exe [2026-08-05 07:00:24.2304934 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 3420 \??\C:\Windows\system32\dwm.exe [2026-08-05 07:00:24.2305011 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 3420 C:\Windows\system32\dwm.exe [2026-08-05 07:00:24.3255020 UTC-04:00] [8200:9084] [fcmonitor 90 debug] session change reason=1 session=2 [2026-08-05 07:00:24.3256453 UTC-04:00] [8200:9084] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-05 07:00:24.3387008 UTC-04:00] [8200:9084] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-05 07:00:24.3388017 UTC-04:00] [8200:9084] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-05 07:00:24.3388772 UTC-04:00] [8200:9084] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-05 07:00:24.3389499 UTC-04:00] [8200:9084] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-05 07:00:24.3390220 UTC-04:00] [8200:9084] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-05 07:00:24.3390923 UTC-04:00] [8200:9084] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-05 07:00:24.3391021 UTC-04:00] [8200:9084] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-05 07:00:24.3391077 UTC-04:00] [8200:9084] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-05 07:00:24.3391121 UTC-04:00] [8200:9084] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-05 07:00:24.3391149 UTC-04:00] [8200:9084] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-05 07:00:24.3391177 UTC-04:00] [8200:9084] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-05 07:00:24.3391209 UTC-04:00] [8200:9084] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-05 07:00:24.3391257 UTC-04:00] [8200:9084] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-05 07:00:24.3391411 UTC-04:00] [8200:9084] [fcmonitor 16 debug] add session=2 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-05 07:00:24.3391558 UTC-04:00] [8200:9084] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-05 07:00:24.3391585 UTC-04:00] [8200:9084] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-05 07:00:24.3393224 UTC-04:00] [8200:9084] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 189129646080 499455451136 189129646080 [2026-08-05 07:00:24.3393292 UTC-04:00] [8200:9084] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-05 07:00:24.6351506 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 15192 \??\C:\Windows\system32\fontdrvhost.exe [2026-08-05 07:00:24.6351623 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 15192 C:\Windows\system32\fontdrvhost.exe [2026-08-05 07:42:23.1074895 UTC-04:00] [8200:9084] [fcmonitor 90 debug] session change reason=5 session=2 [2026-08-05 07:42:23.1076772 UTC-04:00] [8200:9084] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-05 07:42:23.1255013 UTC-04:00] [8200:9084] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Desktop\ for session 2 [2026-08-05 07:42:23.1279601 UTC-04:00] [8200:9084] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Documents\ for session 2 [2026-08-05 07:42:23.1300228 UTC-04:00] [8200:9084] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Favorites\ for session 2 [2026-08-05 07:42:23.1372125 UTC-04:00] [8200:9084] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Music\ for session 2 [2026-08-05 07:42:23.1390021 UTC-04:00] [8200:9084] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Pictures\ for session 2 [2026-08-05 07:42:23.1724167 UTC-04:00] [8200:9084] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Videos\ for session 2 [2026-08-05 07:42:23.1724340 UTC-04:00] [8200:9084] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-05 07:42:23.1724410 UTC-04:00] [8200:9084] [fcmonitor 435 info] add c:\users\haskinsh\desktop\ [2026-08-05 07:42:23.1724449 UTC-04:00] [8200:9084] [fcmonitor 435 info] add c:\users\haskinsh\documents\ [2026-08-05 07:42:23.1724475 UTC-04:00] [8200:9084] [fcmonitor 435 info] add c:\users\haskinsh\favorites\ [2026-08-05 07:42:23.1724498 UTC-04:00] [8200:9084] [fcmonitor 435 info] add c:\users\haskinsh\music\ [2026-08-05 07:42:23.1724521 UTC-04:00] [8200:9084] [fcmonitor 435 info] add c:\users\haskinsh\pictures\ [2026-08-05 07:42:23.1724545 UTC-04:00] [8200:9084] [fcmonitor 435 info] add c:\users\haskinsh\videos\ [2026-08-05 07:42:23.1724689 UTC-04:00] [8200:9084] [fcmonitor 16 debug] add session=2 ret=0 str=C:\Users\haskinsh\Desktop\;C:\Users\haskinsh\Documents\;C:\Users\haskinsh\Favorites\;C:\Users\haskinsh\Music\;C:\Users\haskinsh\Pictures\;C:\Users\haskinsh\Videos\ [2026-08-05 07:42:23.1724843 UTC-04:00] [8200:9084] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-05 07:42:23.1724881 UTC-04:00] [8200:9084] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-05 07:42:23.1727025 UTC-04:00] [8200:9084] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 189118283776 499455451136 189118283776 [2026-08-05 07:42:23.1727221 UTC-04:00] [8200:9084] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-05 07:42:24.2388248 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 10328 \SystemRoot\System32\Conhost.exe [2026-08-05 07:42:24.2388737 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 10328 \SystemRoot\System32\Conhost.exe [2026-08-05 07:42:25.3271527 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 15440 \??\C:\Windows\system32\igfxEM.exe [2026-08-05 07:42:25.3271628 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 15440 C:\Windows\system32\igfxEM.exe [2026-08-05 07:42:25.4926674 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 37180 \??\C:\Windows\system32\igfxHK.exe [2026-08-05 07:42:25.4926782 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 37180 C:\Windows\system32\igfxHK.exe [2026-08-05 07:42:25.5944402 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 7724 \??\C:\Windows\system32\igfxTray.exe [2026-08-05 07:42:25.5944504 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 7724 C:\Windows\system32\igfxTray.exe [2026-08-05 07:42:26.2766058 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33072 \??\C:\Windows\system32\userinit.exe [2026-08-05 07:42:26.2766172 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33072 C:\Windows\system32\userinit.exe [2026-08-05 07:42:26.3606962 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 40236 \??\C:\Windows\Explorer.EXE [2026-08-05 07:42:26.3607069 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 40236 C:\Windows\Explorer.EXE [2026-08-05 07:42:47.4711432 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 42672 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-05 07:42:47.4711708 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 42672 C:\IMC\MPS\IMCMobil.exe [2026-08-05 07:42:48.5799223 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 42820 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-05 07:42:48.5799328 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 42820 C:\IMC\MPS\iIMCMobl.exe [2026-08-05 07:42:51.7680084 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 39928 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 07:42:51.7680204 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 39928 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 07:42:53.8005450 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 23536 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 07:42:53.8005558 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 23536 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 07:42:53.8016734 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 9264 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-05 07:42:53.8016813 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 9264 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-05 07:42:55.5010233 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 42416 \??\C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-05 07:42:55.5010506 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 42416 C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-05 07:42:55.8437300 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 41712 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 07:42:55.8437410 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 41712 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 07:42:56.2210940 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 42728 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-05 07:42:56.2211080 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 42728 C:\Windows\SysWOW64\runonce.exe [2026-08-05 07:42:56.3125484 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 42832 \??\C:\Windows\system32\wlrmdr.exe [2026-08-05 07:42:56.3125589 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 42832 C:\Windows\system32\wlrmdr.exe [2026-08-05 07:42:56.7447437 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 34800 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-05 07:42:56.7447541 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 34800 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-05 07:42:57.0631940 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33588 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-05 07:42:57.0632048 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33588 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-05 07:42:57.9385132 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33272 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 07:42:57.9385286 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33272 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 07:42:59.9850487 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32864 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 07:42:59.9850591 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32864 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 07:43:00.3187771 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 31572 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-05 07:43:00.3187872 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 31572 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-05 07:43:01.0471525 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 39400 \??\C:\Windows\System32\cmd.exe [2026-08-05 07:43:01.0471623 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 39400 C:\Windows\System32\cmd.exe [2026-08-05 07:43:01.0709393 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 42880 \SystemRoot\System32\Conhost.exe [2026-08-05 07:43:01.0709495 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 42880 \SystemRoot\System32\Conhost.exe [2026-08-05 07:43:01.2190789 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 20736 \??\C:\Windows\System32\cmd.exe [2026-08-05 07:43:01.2190934 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 20736 C:\Windows\System32\cmd.exe [2026-08-05 07:43:01.2514897 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 42744 \SystemRoot\System32\Conhost.exe [2026-08-05 07:43:01.2515003 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 42744 \SystemRoot\System32\Conhost.exe [2026-08-05 07:43:01.6120304 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 9832 \??\C:\Windows\System32\cmd.exe [2026-08-05 07:43:01.6120401 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 9832 C:\Windows\System32\cmd.exe [2026-08-05 07:43:01.6154079 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 34256 \SystemRoot\System32\Conhost.exe [2026-08-05 07:43:01.6154167 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 34256 \SystemRoot\System32\Conhost.exe [2026-08-05 07:43:02.0313155 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32320 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 07:43:02.0313253 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32320 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 07:43:14.4774867 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33000 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-05 07:43:14.4775059 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33000 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-05 07:43:39.1110086 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 38108 \??\C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-05 07:43:39.1110339 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 38108 C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-05 07:43:44.2555457 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 42972 \??\C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-05 07:43:44.2555823 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 42972 C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-05 07:43:48.3946570 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 12360 \SystemRoot\System32\Conhost.exe [2026-08-05 07:43:48.3946679 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 12360 \SystemRoot\System32\Conhost.exe [2026-08-05 07:43:53.4850655 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 42280 \??\C:\Windows\splwow64.exe [2026-08-05 07:43:53.4850756 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 42280 C:\Windows\splwow64.exe [2026-08-05 07:43:59.3882154 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 42788 \??\C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\26.129.0706.0003\FileSyncConfig.exe [2026-08-05 07:43:59.3882392 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 42788 C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\26.129.0706.0003\FileSyncConfig.exe [2026-08-05 07:44:01.0332244 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 42964 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:01.0332358 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 42964 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:01.0953843 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 41636 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:01.0953954 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 41636 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:01.3325960 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 24876 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:01.3326093 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 24876 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:01.5564641 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 24448 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:01.5564788 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 24448 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:01.5593018 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 33424 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:01.5593121 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 33424 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:01.9136897 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 42460 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:01.9137049 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 42460 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:02.1608241 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 32936 \??\C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-05 07:44:02.1608348 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 32936 C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-05 07:44:02.2505161 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 40200 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:02.2505262 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 40200 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:02.2528317 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 38408 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:02.2528438 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 38408 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:02.4711137 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 42436 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:02.4711253 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 42436 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:02.7836621 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 38540 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:02.7836727 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 38540 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:05.8823741 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 43336 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:05.8824059 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 43336 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:11.2785103 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 43732 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-05 07:44:11.2785213 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 43732 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-05 07:44:11.3129683 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 43756 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-05 07:44:11.3129779 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 43756 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-05 07:44:11.4129626 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 43780 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:11.4129736 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 43780 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:11.9987704 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 43908 \??\C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\26.129.0706.0003\OneDrive.Sync.Service.exe [2026-08-05 07:44:11.9987839 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 43908 C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\26.129.0706.0003\OneDrive.Sync.Service.exe [2026-08-05 07:44:31.5361846 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 43728 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:31.5362120 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 43728 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:32.6984547 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 41844 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:32.6984625 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 41844 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:33.3890406 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 42968 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:33.3890562 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 42968 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:49.4924771 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 1880 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:44:49.4924996 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 1880 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:45:01.9100769 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 38736 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:45:01.9100995 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 38736 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:46:01.5255637 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 43384 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:46:01.5255923 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 43384 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:47:02.2810354 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 41916 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:47:02.2810676 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 41916 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:49:04.4350247 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 42588 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 07:49:04.4350621 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 42588 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 09:43:48.4004504 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 48568 \SystemRoot\System32\Conhost.exe [2026-08-05 09:43:48.4004901 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 48568 \SystemRoot\System32\Conhost.exe [2026-08-05 10:59:17.4321282 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 52372 \SystemRoot\System32\Conhost.exe [2026-08-05 10:59:17.4321688 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 52372 \SystemRoot\System32\Conhost.exe [2026-08-05 10:59:17.5885252 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 54696 \SystemRoot\System32\Conhost.exe [2026-08-05 10:59:17.5885574 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 54696 \SystemRoot\System32\Conhost.exe [2026-08-05 11:43:48.8041622 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 57004 \SystemRoot\System32\Conhost.exe [2026-08-05 11:43:48.8041940 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 57004 \SystemRoot\System32\Conhost.exe [2026-08-05 12:20:52.7511969 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 60092 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-05 12:20:52.7512334 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 60092 C:\IMC\MPS\IMCMobil.exe [2026-08-05 12:20:53.3957344 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 60064 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-05 12:20:53.3957449 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 60064 C:\IMC\MPS\iIMCMobl.exe [2026-08-05 12:21:15.9683079 UTC-04:00] [8200:9424] [fcmonitor 332 debug] proc cache add 56660 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-05 12:21:15.9683310 UTC-04:00] [8200:9424] [fcmonitor 99 info] add pid 56660 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-05 12:23:00.0189764 UTC-04:00] [8760:8764] [fcmonitor 1249 info] (Time Zone: Eastern Standard Time) (Sun Jun 30 22:28:59 2024, 58s) 2026-08-05 12:23:00.013 type: 0x10f size: 512 memory: 0x0000000000000000 [2026-08-05 12:23:00.0199756 UTC-04:00] [8760:8764] [fcmonitor 78 debug] ems_serial FCTEMS8821002497 [2026-08-05 12:23:00.0214644 UTC-04:00] [8760:8764] [fcmonitor 85 debug] fct_serial FCT8000515779876 [2026-08-05 12:23:00.0216572 UTC-04:00] [8760:8764] [fcmonitor 94 debug] fct_uid 4EF5549DB1674A63BE848553987D4AEE [2026-08-05 12:23:00.0216988 UTC-04:00] [8760:8764] [fcmonitor 103 debug] vdom default [2026-08-05 12:23:00.0217133 UTC-04:00] [8760:8764] [fcmonitor 843 info] InitCryptAlg [2026-08-05 12:23:00.0224629 UTC-04:00] [8760:8764] [fcmonitor 41 info] before LoadSettings [2026-08-05 12:23:00.0226051 UTC-04:00] [8760:8764] [fcmonitor 45 info] folder C:\Users\%USERNAME%\Desktop\ [2026-08-05 12:23:00.0226148 UTC-04:00] [8760:8764] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-05 12:23:00.0317799 UTC-04:00] [8760:8764] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-05 12:23:00.0318427 UTC-04:00] [8760:8764] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 0 [2026-08-05 12:23:00.0318972 UTC-04:00] [8760:8764] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 0 [2026-08-05 12:23:00.0319495 UTC-04:00] [8760:8764] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 0 [2026-08-05 12:23:00.0320040 UTC-04:00] [8760:8764] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 0 [2026-08-05 12:23:00.0320567 UTC-04:00] [8760:8764] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 0 [2026-08-05 12:23:00.0320664 UTC-04:00] [8760:8764] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 done [2026-08-05 12:23:00.0320727 UTC-04:00] [8760:8764] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-05 12:23:00.0320843 UTC-04:00] [8760:8764] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-05 12:23:00.0320882 UTC-04:00] [8760:8764] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-05 12:23:00.0320920 UTC-04:00] [8760:8764] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-05 12:23:00.0320951 UTC-04:00] [8760:8764] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-05 12:23:00.0320984 UTC-04:00] [8760:8764] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-05 12:23:00.0321158 UTC-04:00] [8760:8764] [fcmonitor 16 debug] add session=0 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-05 12:23:00.0367098 UTC-04:00] [8760:8764] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-05 12:23:00.0437006 UTC-04:00] [8760:8764] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Desktop\ for session 1 [2026-08-05 12:23:00.0458147 UTC-04:00] [8760:8764] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Documents\ for session 1 [2026-08-05 12:23:00.0475506 UTC-04:00] [8760:8764] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Favorites\ for session 1 [2026-08-05 12:23:00.0494204 UTC-04:00] [8760:8764] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Music\ for session 1 [2026-08-05 12:23:00.0513377 UTC-04:00] [8760:8764] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Pictures\ for session 1 [2026-08-05 12:23:00.0535039 UTC-04:00] [8760:8764] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Videos\ for session 1 [2026-08-05 12:23:00.0535197 UTC-04:00] [8760:8764] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 done [2026-08-05 12:23:00.0535251 UTC-04:00] [8760:8764] [fcmonitor 435 info] add c:\users\haskinsh\desktop\ [2026-08-05 12:23:00.0535293 UTC-04:00] [8760:8764] [fcmonitor 435 info] add c:\users\haskinsh\documents\ [2026-08-05 12:23:00.0535324 UTC-04:00] [8760:8764] [fcmonitor 435 info] add c:\users\haskinsh\favorites\ [2026-08-05 12:23:00.0535354 UTC-04:00] [8760:8764] [fcmonitor 435 info] add c:\users\haskinsh\music\ [2026-08-05 12:23:00.0535380 UTC-04:00] [8760:8764] [fcmonitor 435 info] add c:\users\haskinsh\pictures\ [2026-08-05 12:23:00.0535407 UTC-04:00] [8760:8764] [fcmonitor 435 info] add c:\users\haskinsh\videos\ [2026-08-05 12:23:00.0535519 UTC-04:00] [8760:8764] [fcmonitor 16 debug] add session=1 ret=1 str=C:\Users\haskinsh\Desktop\;C:\Users\haskinsh\Documents\;C:\Users\haskinsh\Favorites\;C:\Users\haskinsh\Music\;C:\Users\haskinsh\Pictures\;C:\Users\haskinsh\Videos\ [2026-08-05 12:23:00.0535545 UTC-04:00] [8760:8764] [fcmonitor 52 debug] reload monitor folder for session 0 [2026-08-05 12:23:00.0535673 UTC-04:00] [8760:8764] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-05 12:23:00.0535699 UTC-04:00] [8760:8764] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-05 12:23:00.0657646 UTC-04:00] [8760:8764] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 188785442816 499455451136 188785442816 [2026-08-05 12:23:00.0657762 UTC-04:00] [8760:8764] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-05 12:23:00.3232028 UTC-04:00] [8760:8764] [fcmonitor 232 info] queue lock 0x350 cleanevent 0x390 [2026-08-05 12:23:00.3233226 UTC-04:00] [8760:8764] [fcmonitor 245 info] init succeed [2026-08-05 12:23:00.3233270 UTC-04:00] [8760:8764] [fcmonitor 438 info] reading cache [2026-08-05 12:23:00.4115890 UTC-04:00] [8760:8764] [fcmonitor 440 info] getting all proc [2026-08-05 12:23:00.5581659 UTC-04:00] [8760:8764] [fcmonitor 159 debug] getting all proc [2026-08-05 12:23:00.5613549 UTC-04:00] [8760:8764] [fcmonitor 192 warning] GetAllProcTree can't find module 4 System [2026-08-05 12:23:00.6414124 UTC-04:00] [8760:8764] [fcmonitor 192 warning] GetAllProcTree can't find module 100 Registry [2026-08-05 12:23:00.9205484 UTC-04:00] [8760:8764] [fcmonitor 192 warning] GetAllProcTree can't find module 2516 Memory Compression [2026-08-05 12:23:01.6264830 UTC-04:00] [8760:8764] [fcmonitor 192 warning] GetAllProcTree can't find module 8560 mofcomp.exe [2026-08-05 12:23:01.6321968 UTC-04:00] [8760:8764] [fcmonitor 192 warning] GetAllProcTree can't find module 8588 conhost.exe [2026-08-05 12:23:01.6823231 UTC-04:00] [8760:8764] [fcmonitor 192 warning] GetAllProcTree can't find module 9100 net1.exe [2026-08-05 12:23:01.6839886 UTC-04:00] [8760:8764] [fcmonitor 192 warning] GetAllProcTree can't find module 9156 conhost.exe [2026-08-05 12:23:01.6859373 UTC-04:00] [8760:8764] [fcmonitor 286 debug] getting all proc finished 138 0 [2026-08-05 12:23:01.6859452 UTC-04:00] [8760:8764] [fcmonitor 442 info] finish [2026-08-05 12:23:01.6860459 UTC-04:00] [8760:8764] [fcmonitor 267 info] heap p 0x0000025972B02ED0 [2026-08-05 12:23:01.6860847 UTC-04:00] [8760:8764] [fcmonitor 267 info] heap p 0x0000025972B03380 [2026-08-05 12:23:01.6861185 UTC-04:00] [8760:8764] [fcmonitor 267 info] heap p 0x0000025972B03830 [2026-08-05 12:23:01.6861523 UTC-04:00] [8760:8764] [fcmonitor 267 info] heap p 0x0000025972B0DAA0 [2026-08-05 12:23:01.6861824 UTC-04:00] [8760:8764] [fcmonitor 267 info] heap p 0x0000025972B0DF70 [2026-08-05 12:23:01.6862144 UTC-04:00] [8760:8764] [fcmonitor 267 info] heap p 0x0000025972B0B8F0 [2026-08-05 12:23:01.6862460 UTC-04:00] [8760:8764] [fcmonitor 267 info] heap p 0x0000025972B0E440 [2026-08-05 12:23:01.6862777 UTC-04:00] [8760:8764] [fcmonitor 267 info] heap p 0x0000025972B0BDC0 [2026-08-05 12:23:01.6978658 UTC-04:00] [8760:8008] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-05 12:23:01.6979459 UTC-04:00] [8760:8036] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-05 12:23:01.6980180 UTC-04:00] [8760:7964] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-05 12:23:01.6980917 UTC-04:00] [8760:7852] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-05 12:23:01.6981779 UTC-04:00] [8760:9160] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-05 12:23:01.6982501 UTC-04:00] [8760:9084] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-05 12:23:01.6983194 UTC-04:00] [8760:9076] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-05 12:23:01.6983934 UTC-04:00] [8760:8756] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-05 12:23:01.9845477 UTC-04:00] [8760:8016] [fcmonitor 475 warning] session 1 not init [2026-08-05 12:23:01.9905879 UTC-04:00] [8760:8016] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Desktop\ for session 1 [2026-08-05 12:23:01.9923587 UTC-04:00] [8760:8016] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Documents\ for session 1 [2026-08-05 12:23:01.9944953 UTC-04:00] [8760:8016] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Favorites\ for session 1 [2026-08-05 12:23:01.9963196 UTC-04:00] [8760:8016] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Music\ for session 1 [2026-08-05 12:23:01.9981528 UTC-04:00] [8760:8016] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Pictures\ for session 1 [2026-08-05 12:23:01.9999098 UTC-04:00] [8760:8016] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Videos\ for session 1 [2026-08-05 12:23:01.9999257 UTC-04:00] [8760:8016] [fcmonitor 435 info] add c:\users\haskinsh\desktop\ [2026-08-05 12:23:01.9999315 UTC-04:00] [8760:8016] [fcmonitor 435 info] add c:\users\haskinsh\documents\ [2026-08-05 12:23:01.9999351 UTC-04:00] [8760:8016] [fcmonitor 435 info] add c:\users\haskinsh\favorites\ [2026-08-05 12:23:01.9999396 UTC-04:00] [8760:8016] [fcmonitor 435 info] add c:\users\haskinsh\music\ [2026-08-05 12:23:01.9999425 UTC-04:00] [8760:8016] [fcmonitor 435 info] add c:\users\haskinsh\pictures\ [2026-08-05 12:23:01.9999451 UTC-04:00] [8760:8016] [fcmonitor 435 info] add c:\users\haskinsh\videos\ [2026-08-05 12:23:04.9410290 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 9568 \SystemRoot\System32\Conhost.exe [2026-08-05 12:23:04.9410670 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 9568 \SystemRoot\System32\Conhost.exe [2026-08-05 12:23:08.1290295 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 9936 \??\C:\Windows\system32\igfxEM.exe [2026-08-05 12:23:08.1290430 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 9936 C:\Windows\system32\igfxEM.exe [2026-08-05 12:23:09.1580959 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 10060 \??\C:\Windows\system32\igfxHK.exe [2026-08-05 12:23:09.1581063 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 10060 C:\Windows\system32\igfxHK.exe [2026-08-05 12:23:10.1654213 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 10128 \??\C:\Windows\system32\igfxTray.exe [2026-08-05 12:23:10.1654325 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 10128 C:\Windows\system32\igfxTray.exe [2026-08-05 12:23:14.1102841 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 9428 \??\C:\Windows\system32\userinit.exe [2026-08-05 12:23:14.1103111 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 9428 C:\Windows\system32\userinit.exe [2026-08-05 12:23:14.6816932 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 872 \??\C:\Windows\Explorer.EXE [2026-08-05 12:23:14.6817047 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 872 C:\Windows\Explorer.EXE [2026-08-05 12:23:41.6756077 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 6832 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-05 12:23:41.6756360 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 6832 C:\IMC\MPS\IMCMobil.exe [2026-08-05 12:23:44.2105014 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 1512 \??\C:\Windows\system32\wlrmdr.exe [2026-08-05 12:23:44.2105102 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 1512 C:\Windows\system32\wlrmdr.exe [2026-08-05 12:23:44.6676027 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 11772 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-05 12:23:44.6676128 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 11772 C:\IMC\MPS\iIMCMobl.exe [2026-08-05 12:23:50.1574436 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 12064 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-05 12:23:50.1574543 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 12064 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-05 12:23:51.1660890 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 3400 \??\C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-05 12:23:51.1661003 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 3400 C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-05 12:23:52.6529708 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 3376 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-05 12:23:52.6529927 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 3376 C:\Windows\SysWOW64\runonce.exe [2026-08-05 12:23:53.0752175 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 3160 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-05 12:23:53.0752273 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 3160 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-05 12:23:54.3591799 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 4816 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-05 12:23:54.3592280 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 4816 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-05 12:23:55.4766738 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 11444 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-05 12:23:55.4766841 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 11444 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-05 12:23:56.7866512 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 3436 \??\C:\Windows\System32\cmd.exe [2026-08-05 12:23:56.7866652 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 3436 C:\Windows\System32\cmd.exe [2026-08-05 12:23:56.8962829 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 4244 \SystemRoot\System32\Conhost.exe [2026-08-05 12:23:56.8962925 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 4244 \SystemRoot\System32\Conhost.exe [2026-08-05 12:23:57.7222581 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 8592 \??\C:\Windows\System32\cmd.exe [2026-08-05 12:23:57.7222690 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 8592 C:\Windows\System32\cmd.exe [2026-08-05 12:23:57.7867623 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 4008 \SystemRoot\System32\Conhost.exe [2026-08-05 12:23:57.7867719 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 4008 \SystemRoot\System32\Conhost.exe [2026-08-05 12:23:58.2286001 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 7896 \??\C:\Windows\System32\cmd.exe [2026-08-05 12:23:58.2286098 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 7896 C:\Windows\System32\cmd.exe [2026-08-05 12:23:58.3021844 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 4328 \SystemRoot\System32\Conhost.exe [2026-08-05 12:23:58.3021951 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 4328 \SystemRoot\System32\Conhost.exe [2026-08-05 12:24:00.3609640 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 2780 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 12:24:00.3609737 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 2780 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 12:24:02.4129203 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 8608 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 12:24:02.4129520 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 8608 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 12:24:04.4429460 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 2092 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 12:24:04.4429605 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 2092 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 12:24:15.4705586 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 11704 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-05 12:24:15.4705815 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 11704 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-05 12:31:43.6601079 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 2384 \SystemRoot\System32\Conhost.exe [2026-08-05 12:31:43.6601388 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 2384 \SystemRoot\System32\Conhost.exe [2026-08-05 12:43:26.1937403 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 1748 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:43:26.1937822 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 1748 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:43:30.2309490 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 4084 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:43:30.2309602 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 4084 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:43:33.3384619 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 9224 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:43:33.3384881 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 9224 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:43:33.3406255 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 6440 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:43:33.3406350 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 6440 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:43:33.3501113 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 2584 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:43:33.3501204 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 2584 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:43:33.3606303 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 8768 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:43:33.3606972 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 8768 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:43:33.3620364 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 2916 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:43:33.3620456 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 2916 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:43:33.3635787 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 12172 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:43:33.3635876 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 12172 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:43:39.5381765 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 11528 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:43:39.5381868 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 11528 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:43:40.5780136 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 3012 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-05 12:43:40.5780259 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 3012 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-05 12:43:40.9477430 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 4124 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-05 12:43:40.9477600 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 4124 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-05 12:43:43.9852814 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 5068 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:43:43.9853040 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 5068 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:44:00.5434147 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 4564 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:44:00.5434426 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 4564 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:44:31.3429379 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 8800 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:44:31.3429567 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 8800 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:45:15.5308634 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 12068 \??\C:\IMC\MPS\CHECKS.EXE [2026-08-05 12:45:15.5308910 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 12068 C:\IMC\MPS\CHECKS.EXE [2026-08-05 12:45:30.5488496 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 11680 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:45:30.5488775 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 11680 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:46:01.5157887 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 7756 \??\C:\Windows\splwow64.exe [2026-08-05 12:46:01.5158123 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 7756 C:\Windows\splwow64.exe [2026-08-05 12:48:36.5330435 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 3928 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:48:36.5330783 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 3928 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:48:37.1916489 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 12860 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 12:48:37.1916610 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 12860 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 14:04:37.5912756 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 16176 \??\C:\IMC\RMS\RECORDS.EXE [2026-08-05 14:04:37.5913140 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 16176 C:\IMC\RMS\RECORDS.EXE [2026-08-05 14:04:52.0791641 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 16708 \??\C:\Windows\splwow64.exe [2026-08-05 14:04:52.0791868 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 16708 C:\Windows\splwow64.exe [2026-08-05 14:24:26.9102665 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 16540 \SystemRoot\System32\Conhost.exe [2026-08-05 14:24:26.9103039 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 16540 \SystemRoot\System32\Conhost.exe [2026-08-05 14:47:31.0845877 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 18348 \??\C:\IMC\MPS\CHECKS.EXE [2026-08-05 14:47:31.0846258 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 18348 C:\IMC\MPS\CHECKS.EXE [2026-08-05 14:48:11.6294606 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 17660 \??\C:\Windows\splwow64.exe [2026-08-05 14:48:11.6294819 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 17660 C:\Windows\splwow64.exe [2026-08-05 15:15:53.5885181 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 19076 \??\C:\Windows\splwow64.exe [2026-08-05 15:15:53.5885538 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 19076 C:\Windows\splwow64.exe [2026-08-05 15:17:50.6280169 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 18752 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-05 15:17:50.6280437 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 18752 C:\IMC\RMS\TRAFFIC.EXE [2026-08-05 15:19:16.8883009 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 21256 \??\C:\Windows\winhlp32.exe [2026-08-05 15:19:16.8883330 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 21256 C:\Windows\winhlp32.exe [2026-08-05 15:19:17.8181566 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 18752 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 15:19:17.8181674 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 18752 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 15:19:17.8648105 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 20564 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 15:19:17.8648195 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 20564 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 16:24:26.9429053 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 22724 \SystemRoot\System32\Conhost.exe [2026-08-05 16:24:26.9429464 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 22724 \SystemRoot\System32\Conhost.exe [2026-08-05 16:35:47.1448880 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 24756 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-05 16:35:47.1449197 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 24756 C:\IMC\RMS\TRAFFIC.EXE [2026-08-05 18:24:26.9340778 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 33420 \SystemRoot\System32\Conhost.exe [2026-08-05 18:24:26.9341181 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 33420 \SystemRoot\System32\Conhost.exe [2026-08-05 19:14:54.7477067 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 35100 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-05 19:14:54.7477508 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 35100 C:\IMC\RMS\TRAFFIC.EXE [2026-08-05 20:24:26.9607790 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 40328 \SystemRoot\System32\Conhost.exe [2026-08-05 20:24:26.9609447 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 40328 \SystemRoot\System32\Conhost.exe [2026-08-05 22:24:27.1889519 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 49700 \SystemRoot\System32\Conhost.exe [2026-08-05 22:24:27.1889858 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 49700 \SystemRoot\System32\Conhost.exe [2026-08-05 23:30:02.1319167 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 52664 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:30:02.1319445 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 52664 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:30:02.2727003 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 52100 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:30:02.2727113 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 52100 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:30:02.4291928 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 53348 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:30:02.4292029 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 53348 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:30:02.4310074 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 53356 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:30:02.4310200 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 53356 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:30:02.5689197 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 53800 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:30:02.5689301 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 53800 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:30:02.6498103 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 53860 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:30:02.6498253 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 53860 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:30:05.0919145 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 12920 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-05 23:30:05.0919397 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 12920 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-05 23:30:05.1245590 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 11224 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-05 23:30:05.1245724 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 11224 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-05 23:30:05.4906987 UTC-04:00] [8760:8016] [fcmonitor 332 debug] proc cache add 2952 \??\C:\Windows\system32\LogonUI.exe [2026-08-05 23:30:05.4907093 UTC-04:00] [8760:8016] [fcmonitor 99 info] add pid 2952 C:\Windows\system32\LogonUI.exe [2026-08-05 23:30:09.4214530 UTC-04:00] [8760:8372] [fcmonitor 90 debug] session change reason=6 session=1 [2026-08-05 23:30:09.4214691 UTC-04:00] [8760:8372] [fcmonitor 117 debug] add reason=6 session=1 ret=1 [2026-08-05 23:31:23.2344053 UTC-04:00] [7488:7492] [fcmonitor 1249 info] (Time Zone: Eastern Standard Time) (Sun Jun 30 22:28:59 2024, 49s) 2026-08-05 23:31:23.232 type: 0x10f size: 512 memory: 0x0000000000000000 [2026-08-05 23:31:23.2353752 UTC-04:00] [7488:7492] [fcmonitor 78 debug] ems_serial FCTEMS8821002497 [2026-08-05 23:31:23.2368341 UTC-04:00] [7488:7492] [fcmonitor 85 debug] fct_serial FCT8000515779876 [2026-08-05 23:31:23.2369999 UTC-04:00] [7488:7492] [fcmonitor 94 debug] fct_uid 4EF5549DB1674A63BE848553987D4AEE [2026-08-05 23:31:23.2370334 UTC-04:00] [7488:7492] [fcmonitor 103 debug] vdom default [2026-08-05 23:31:23.2370460 UTC-04:00] [7488:7492] [fcmonitor 843 info] InitCryptAlg [2026-08-05 23:31:23.2377681 UTC-04:00] [7488:7492] [fcmonitor 41 info] before LoadSettings [2026-08-05 23:31:23.2378980 UTC-04:00] [7488:7492] [fcmonitor 45 info] folder C:\Users\%USERNAME%\Desktop\ [2026-08-05 23:31:23.2379072 UTC-04:00] [7488:7492] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-05 23:31:23.2458036 UTC-04:00] [7488:7492] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-05 23:31:23.2458824 UTC-04:00] [7488:7492] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 0 [2026-08-05 23:31:23.2459406 UTC-04:00] [7488:7492] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 0 [2026-08-05 23:31:23.2459973 UTC-04:00] [7488:7492] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 0 [2026-08-05 23:31:23.2460564 UTC-04:00] [7488:7492] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 0 [2026-08-05 23:31:23.2461107 UTC-04:00] [7488:7492] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 0 [2026-08-05 23:31:23.2461203 UTC-04:00] [7488:7492] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 done [2026-08-05 23:31:23.2461261 UTC-04:00] [7488:7492] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-05 23:31:23.2461359 UTC-04:00] [7488:7492] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-05 23:31:23.2461391 UTC-04:00] [7488:7492] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-05 23:31:23.2461421 UTC-04:00] [7488:7492] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-05 23:31:23.2461454 UTC-04:00] [7488:7492] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-05 23:31:23.2461484 UTC-04:00] [7488:7492] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-05 23:31:23.2461653 UTC-04:00] [7488:7492] [fcmonitor 16 debug] add session=0 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-05 23:31:23.2474332 UTC-04:00] [7488:7492] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-05 23:31:23.2474390 UTC-04:00] [7488:7492] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-05 23:31:23.2479287 UTC-04:00] [7488:7492] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 188929212416 499455451136 188929212416 [2026-08-05 23:31:23.2479378 UTC-04:00] [7488:7492] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-05 23:31:23.4680882 UTC-04:00] [7488:7492] [fcmonitor 232 info] queue lock 0x338 cleanevent 0x33c [2026-08-05 23:31:23.4682099 UTC-04:00] [7488:7492] [fcmonitor 245 info] init succeed [2026-08-05 23:31:23.4682141 UTC-04:00] [7488:7492] [fcmonitor 438 info] reading cache [2026-08-05 23:31:23.5195383 UTC-04:00] [7488:7492] [fcmonitor 440 info] getting all proc [2026-08-05 23:31:23.5765580 UTC-04:00] [7488:7492] [fcmonitor 159 debug] getting all proc [2026-08-05 23:31:23.5794783 UTC-04:00] [7488:7492] [fcmonitor 192 warning] GetAllProcTree can't find module 4 System [2026-08-05 23:31:23.6288164 UTC-04:00] [7488:7492] [fcmonitor 192 warning] GetAllProcTree can't find module 100 Registry [2026-08-05 23:31:23.9605168 UTC-04:00] [7488:7492] [fcmonitor 192 warning] GetAllProcTree can't find module 2460 Memory Compression [2026-08-05 23:31:24.3357178 UTC-04:00] [7488:7492] [fcmonitor 286 debug] getting all proc finished 121 0 [2026-08-05 23:31:24.3357257 UTC-04:00] [7488:7492] [fcmonitor 442 info] finish [2026-08-05 23:31:24.3358351 UTC-04:00] [7488:7492] [fcmonitor 267 info] heap p 0x0000013AAEC76740 [2026-08-05 23:31:24.3358748 UTC-04:00] [7488:7492] [fcmonitor 267 info] heap p 0x0000013AADCEE9B0 [2026-08-05 23:31:24.3359437 UTC-04:00] [7488:7492] [fcmonitor 267 info] heap p 0x0000013AAEC6C6A0 [2026-08-05 23:31:24.3359808 UTC-04:00] [7488:7492] [fcmonitor 267 info] heap p 0x0000013AAEC81860 [2026-08-05 23:31:24.3360172 UTC-04:00] [7488:7492] [fcmonitor 267 info] heap p 0x0000013AAEC80EC0 [2026-08-05 23:31:24.3360500 UTC-04:00] [7488:7492] [fcmonitor 267 info] heap p 0x0000013AAEC7FB80 [2026-08-05 23:31:24.3360854 UTC-04:00] [7488:7492] [fcmonitor 267 info] heap p 0x0000013AAEC80520 [2026-08-05 23:31:24.3361187 UTC-04:00] [7488:7492] [fcmonitor 267 info] heap p 0x0000013AAEC81390 [2026-08-05 23:31:24.3708838 UTC-04:00] [7488:7248] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-05 23:31:24.3709952 UTC-04:00] [7488:7268] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-05 23:31:24.3711035 UTC-04:00] [7488:6600] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-05 23:31:24.3712094 UTC-04:00] [7488:6704] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-05 23:31:24.3713289 UTC-04:00] [7488:6596] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-05 23:31:24.3714336 UTC-04:00] [7488:7328] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-05 23:31:24.3715317 UTC-04:00] [7488:7312] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-05 23:31:24.3716624 UTC-04:00] [7488:6708] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-05 23:31:44.9809470 UTC-04:00] [7488:6448] [fcmonitor 475 warning] session 1 not init [2026-08-05 23:31:44.9866403 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-05 23:31:44.9867047 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 1 [2026-08-05 23:31:44.9867593 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 1 [2026-08-05 23:31:44.9868293 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 1 [2026-08-05 23:31:44.9868804 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 1 [2026-08-05 23:31:44.9869303 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 1 [2026-08-05 23:31:44.9869400 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-05 23:31:44.9869426 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-05 23:31:44.9869443 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-05 23:31:44.9869458 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-05 23:31:44.9869475 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-05 23:31:44.9869491 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-05 23:36:11.8383066 UTC-04:00] [7488:3336] [fcmonitor 90 debug] session change reason=5 session=1 [2026-08-05 23:36:11.8384899 UTC-04:00] [7488:3336] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-05 23:36:11.8521698 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\stengera\Desktop\ for session 1 [2026-08-05 23:36:11.8540525 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\stengera\Documents\ for session 1 [2026-08-05 23:36:11.8563599 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\stengera\Favorites\ for session 1 [2026-08-05 23:36:11.8583258 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\stengera\Music\ for session 1 [2026-08-05 23:36:11.8600412 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\stengera\Pictures\ for session 1 [2026-08-05 23:36:11.8617283 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\stengera\Videos\ for session 1 [2026-08-05 23:36:11.8617413 UTC-04:00] [7488:3336] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 done [2026-08-05 23:36:11.8617471 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\stengera\desktop\ [2026-08-05 23:36:11.8617510 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\stengera\documents\ [2026-08-05 23:36:11.8617540 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\stengera\favorites\ [2026-08-05 23:36:11.8617570 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\stengera\music\ [2026-08-05 23:36:11.8617598 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\stengera\pictures\ [2026-08-05 23:36:11.8617625 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\stengera\videos\ [2026-08-05 23:36:11.8617731 UTC-04:00] [7488:3336] [fcmonitor 16 debug] add session=1 ret=1 str=C:\Users\stengera\Desktop\;C:\Users\stengera\Documents\;C:\Users\stengera\Favorites\;C:\Users\stengera\Music\;C:\Users\stengera\Pictures\;C:\Users\stengera\Videos\ [2026-08-05 23:36:11.8617871 UTC-04:00] [7488:3336] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-05 23:36:11.8617906 UTC-04:00] [7488:3336] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-05 23:36:11.8619653 UTC-04:00] [7488:3336] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 188929941504 499455451136 188929941504 [2026-08-05 23:36:11.8619763 UTC-04:00] [7488:3336] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-05 23:36:15.0357836 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 5072 \SystemRoot\System32\Conhost.exe [2026-08-05 23:36:15.0358110 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 5072 \SystemRoot\System32\Conhost.exe [2026-08-05 23:36:16.4259452 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 4604 \??\C:\Windows\system32\igfxEM.exe [2026-08-05 23:36:16.4259593 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 4604 C:\Windows\system32\igfxEM.exe [2026-08-05 23:36:17.1899320 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 3360 \??\C:\Windows\system32\igfxHK.exe [2026-08-05 23:36:17.1899418 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 3360 C:\Windows\system32\igfxHK.exe [2026-08-05 23:36:17.4700000 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 7904 \??\C:\Windows\system32\igfxTray.exe [2026-08-05 23:36:17.4700112 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 7904 C:\Windows\system32\igfxTray.exe [2026-08-05 23:36:20.5824216 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 5952 \??\C:\Windows\system32\userinit.exe [2026-08-05 23:36:20.5824319 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 5952 C:\Windows\system32\userinit.exe [2026-08-05 23:36:21.1972481 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 3648 \??\C:\Windows\Explorer.EXE [2026-08-05 23:36:21.1972580 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 3648 C:\Windows\Explorer.EXE [2026-08-05 23:36:50.6575186 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 7364 \??\C:\Windows\system32\wlrmdr.exe [2026-08-05 23:36:50.6575541 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 7364 C:\Windows\system32\wlrmdr.exe [2026-08-05 23:36:56.3264285 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 7464 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-05 23:36:56.3264547 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 7464 C:\IMC\MPS\IMCMobil.exe [2026-08-05 23:36:56.9890163 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 4892 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-05 23:36:56.9890268 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 4892 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-05 23:36:57.7386187 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 11412 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-05 23:36:57.7386386 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 11412 C:\IMC\MPS\iIMCMobl.exe [2026-08-05 23:36:57.9573917 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 11440 \??\C:\Users\stengera\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-05 23:36:57.9574022 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 11440 C:\Users\stengera\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-05 23:36:59.8118175 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 11660 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:36:59.8118290 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 11660 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:37:00.7079412 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 11676 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-05 23:37:00.7080075 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 11676 C:\Windows\SysWOW64\runonce.exe [2026-08-05 23:37:01.6296659 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 11800 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-05 23:37:01.6296773 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 11800 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-05 23:37:02.8841485 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 11924 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-05 23:37:02.8841581 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 11924 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-05 23:37:03.2117429 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 11964 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-05 23:37:03.2117537 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 11964 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-05 23:37:04.9740200 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 12164 \??\C:\Windows\System32\cmd.exe [2026-08-05 23:37:04.9740442 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 12164 C:\Windows\System32\cmd.exe [2026-08-05 23:37:05.1553942 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 12184 \SystemRoot\System32\Conhost.exe [2026-08-05 23:37:05.1554040 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 12184 \SystemRoot\System32\Conhost.exe [2026-08-05 23:37:06.1284017 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 11332 \??\C:\Windows\System32\cmd.exe [2026-08-05 23:37:06.1284118 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 11332 C:\Windows\System32\cmd.exe [2026-08-05 23:37:06.3273103 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 11360 \SystemRoot\System32\Conhost.exe [2026-08-05 23:37:06.3273198 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 11360 \SystemRoot\System32\Conhost.exe [2026-08-05 23:37:08.7637023 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 10800 \??\C:\Windows\System32\cmd.exe [2026-08-05 23:37:08.7637179 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 10800 C:\Windows\System32\cmd.exe [2026-08-05 23:37:09.0110369 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 4060 \SystemRoot\System32\Conhost.exe [2026-08-05 23:37:09.0110483 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 4060 \SystemRoot\System32\Conhost.exe [2026-08-05 23:37:11.1360275 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 11896 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:37:11.1360406 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 11896 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:37:15.9180416 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 11584 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 23:37:15.9180668 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 11584 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 23:37:16.7761695 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 1376 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:37:16.7761794 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 1376 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:37:16.7773873 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 2232 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:37:16.7773959 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 2232 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:37:16.7925553 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 2072 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:37:16.7925650 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 2072 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:37:16.8073907 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 2888 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:37:16.8074013 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 2888 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:37:16.8313286 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 3600 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:37:16.8313382 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 3600 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:37:19.3971528 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 9316 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 23:37:19.3971637 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 9316 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 23:37:19.9593406 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 6056 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 23:37:19.9593507 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 6056 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-05 23:37:25.9083448 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 12728 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-05 23:37:25.9083703 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 12728 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-05 23:37:26.0563794 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 12744 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-05 23:37:26.0563887 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 12744 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-05 23:37:31.2397092 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 12952 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-05 23:37:31.2397238 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 12952 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-05 23:37:42.1644703 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 13200 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:37:42.1645006 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 13200 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:37:50.7949610 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 4060 \??\C:\Users\stengera\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-05 23:37:50.7949875 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 4060 C:\Users\stengera\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-05 23:37:57.7610376 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 3036 \??\C:\Users\stengera\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-05 23:37:57.7610639 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 3036 C:\Users\stengera\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-05 23:38:07.2476800 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 1272 \??\C:\Windows\splwow64.exe [2026-08-05 23:38:07.2477028 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 1272 C:\Windows\splwow64.exe [2026-08-05 23:38:26.2579985 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 13168 \??\C:\Users\stengera\AppData\Local\Microsoft\OneDrive\26.129.0706.0004\FileSyncConfig.exe [2026-08-05 23:38:26.2580267 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 13168 C:\Users\stengera\AppData\Local\Microsoft\OneDrive\26.129.0706.0004\FileSyncConfig.exe [2026-08-05 23:38:28.6171993 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 13240 \??\C:\Users\stengera\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-05 23:38:28.6172113 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 13240 C:\Users\stengera\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-05 23:38:35.0118989 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 12224 \??\C:\Users\stengera\AppData\Local\Microsoft\OneDrive\26.129.0706.0004\OneDrive.Sync.Service.exe [2026-08-05 23:38:35.0119228 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 12224 C:\Users\stengera\AppData\Local\Microsoft\OneDrive\26.129.0706.0004\OneDrive.Sync.Service.exe [2026-08-05 23:39:12.1712669 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 11184 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:39:12.1713003 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 11184 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:40:14.4924585 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 996 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:40:14.4924891 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 996 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-05 23:41:06.7307226 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 12324 \SystemRoot\System32\Conhost.exe [2026-08-05 23:41:06.7307515 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 12324 \SystemRoot\System32\Conhost.exe [2026-08-06 00:37:14.3516198 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 13652 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 00:37:14.3516753 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 13652 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 00:37:14.4927151 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 14076 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 00:37:14.4927263 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 14076 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 00:37:14.6960317 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 7948 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 00:37:14.6960415 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 7948 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 00:37:14.6976992 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 13744 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 00:37:14.6977079 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 13744 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 00:37:14.7901948 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 13516 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 00:37:14.7902067 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 13516 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 00:37:14.9166954 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 3196 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 00:37:14.9167063 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 3196 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 00:37:16.2414989 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 12120 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-06 00:37:16.2415089 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 12120 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-06 00:37:16.2719927 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 11680 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-06 00:37:16.2720048 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 11680 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-06 00:37:44.6861848 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 14968 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 00:37:44.6862150 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 14968 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 00:39:14.6589576 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 14096 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 00:39:14.6589887 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 14096 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 01:32:53.6925660 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 10200 \SystemRoot\System32\Conhost.exe [2026-08-06 01:32:53.6926049 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 10200 \SystemRoot\System32\Conhost.exe [2026-08-06 02:09:47.3049902 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 19780 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-06 02:09:47.3050280 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 19780 C:\IMC\RMS\TRAFFIC.EXE [2026-08-06 02:10:31.4268774 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 19172 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:10:31.4269010 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 19172 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:10:31.4733277 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 19896 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:10:31.4733399 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 19896 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:10:31.7114250 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 18572 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:10:31.7114358 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 18572 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:10:31.7125740 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 4392 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:10:31.7125817 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 4392 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:10:31.8099431 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 20212 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:10:31.8099540 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 20212 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:10:31.8715135 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 13604 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:10:31.8715271 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 13604 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:10:33.4801726 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 11736 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:10:33.4887710 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 11736 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:10:43.9276610 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 20716 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:10:43.9276882 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 20716 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:10:47.5285946 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 20872 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:10:47.5286054 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 20872 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:10:47.5638438 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 20900 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:10:47.5649586 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 20900 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:11:16.6841452 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 21424 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:11:16.6841683 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 21424 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:15:33.0274250 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 19604 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 02:15:33.0274754 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 19604 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 03:32:53.7201342 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 19536 \SystemRoot\System32\Conhost.exe [2026-08-06 03:32:53.7201714 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 19536 \SystemRoot\System32\Conhost.exe [2026-08-06 05:32:53.7218961 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 33124 \SystemRoot\System32\Conhost.exe [2026-08-06 05:32:53.7219371 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 33124 \SystemRoot\System32\Conhost.exe [2026-08-06 07:32:53.9214104 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 39940 \SystemRoot\System32\Conhost.exe [2026-08-06 07:32:53.9214442 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 39940 \SystemRoot\System32\Conhost.exe [2026-08-06 07:40:30.8357126 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 37712 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 07:40:30.8357482 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 37712 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 07:40:30.9615873 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 38384 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 07:40:30.9615959 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 38384 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 07:40:31.1501801 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 39036 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 07:40:31.1501900 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 39036 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 07:40:31.1583265 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 41500 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 07:40:31.1583356 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 41500 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 07:40:31.4230759 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 39736 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 07:40:31.4230868 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 39736 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 07:40:31.5246007 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 41972 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 07:40:31.5246113 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 41972 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 07:40:33.0453531 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 13684 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-06 07:40:33.0453642 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 13684 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-06 07:40:33.0730824 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 13532 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-06 07:40:33.0730947 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 13532 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-06 07:40:54.9243395 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 13536 \??\C:\Windows\system32\LogonUI.exe [2026-08-06 07:40:54.9243628 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 13536 C:\Windows\system32\LogonUI.exe [2026-08-06 07:40:58.4259037 UTC-04:00] [7488:3336] [fcmonitor 90 debug] session change reason=6 session=1 [2026-08-06 07:40:58.4259142 UTC-04:00] [7488:3336] [fcmonitor 117 debug] add reason=6 session=1 ret=1 [2026-08-06 07:40:58.7264679 UTC-04:00] [7488:3336] [fcmonitor 90 debug] session change reason=2 session=1 [2026-08-06 07:40:58.7264751 UTC-04:00] [7488:3336] [fcmonitor 117 debug] add reason=2 session=1 ret=1 [2026-08-06 07:40:58.8682983 UTC-04:00] [7488:6448] [fcmonitor 475 warning] session 2 not init [2026-08-06 07:40:58.8819218 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-06 07:40:58.8820093 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-06 07:40:58.8820834 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-06 07:40:58.8821549 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-06 07:40:58.8822247 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-06 07:40:58.8822938 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-06 07:40:58.8823083 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-06 07:40:58.8823129 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-06 07:40:58.8823159 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-06 07:40:58.8823186 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-06 07:40:58.8823216 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-06 07:40:58.8823244 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-06 07:41:00.3428178 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 33096 \??\C:\Windows\system32\LogonUI.exe [2026-08-06 07:41:00.3428284 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 33096 C:\Windows\system32\LogonUI.exe [2026-08-06 07:41:00.3440693 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 27452 \??\C:\Windows\system32\dwm.exe [2026-08-06 07:41:00.3440770 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 27452 C:\Windows\system32\dwm.exe [2026-08-06 07:41:00.4479070 UTC-04:00] [7488:3336] [fcmonitor 90 debug] session change reason=1 session=2 [2026-08-06 07:41:00.4480410 UTC-04:00] [7488:3336] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-06 07:41:00.4602158 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-06 07:41:00.4603177 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-06 07:41:00.4604051 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-06 07:41:00.4604880 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-06 07:41:00.4605694 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-06 07:41:00.4606480 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-06 07:41:00.4606594 UTC-04:00] [7488:3336] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-06 07:41:00.4606675 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-06 07:41:00.4606726 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-06 07:41:00.4606768 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-06 07:41:00.4606808 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-06 07:41:00.4606852 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-06 07:41:00.4606892 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-06 07:41:00.4607075 UTC-04:00] [7488:3336] [fcmonitor 16 debug] add session=2 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-06 07:41:00.4607276 UTC-04:00] [7488:3336] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-06 07:41:00.4607316 UTC-04:00] [7488:3336] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-06 07:41:00.4609217 UTC-04:00] [7488:3336] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 188111859712 499455451136 188111859712 [2026-08-06 07:41:00.4609304 UTC-04:00] [7488:3336] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-06 07:41:00.7784012 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 36140 \??\C:\Windows\system32\fontdrvhost.exe [2026-08-06 07:41:00.7784126 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 36140 C:\Windows\system32\fontdrvhost.exe [2026-08-06 08:12:03.1326728 UTC-04:00] [7488:3336] [fcmonitor 90 debug] session change reason=5 session=2 [2026-08-06 08:12:03.1329869 UTC-04:00] [7488:3336] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-06 08:12:03.1430777 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\lambertr\Desktop\ for session 2 [2026-08-06 08:12:03.1452625 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\lambertr\Documents\ for session 2 [2026-08-06 08:12:03.1508015 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\lambertr\Favorites\ for session 2 [2026-08-06 08:12:03.1531698 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\lambertr\Music\ for session 2 [2026-08-06 08:12:03.1553448 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\lambertr\Pictures\ for session 2 [2026-08-06 08:12:03.1573634 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\lambertr\Videos\ for session 2 [2026-08-06 08:12:03.1573774 UTC-04:00] [7488:3336] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-06 08:12:03.1573847 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\lambertr\desktop\ [2026-08-06 08:12:03.1573889 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\lambertr\documents\ [2026-08-06 08:12:03.1573919 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\lambertr\favorites\ [2026-08-06 08:12:03.1573967 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\lambertr\music\ [2026-08-06 08:12:03.1573996 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\lambertr\pictures\ [2026-08-06 08:12:03.1574024 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\lambertr\videos\ [2026-08-06 08:12:03.1574155 UTC-04:00] [7488:3336] [fcmonitor 16 debug] add session=2 ret=0 str=C:\Users\lambertr\Desktop\;C:\Users\lambertr\Documents\;C:\Users\lambertr\Favorites\;C:\Users\lambertr\Music\;C:\Users\lambertr\Pictures\;C:\Users\lambertr\Videos\ [2026-08-06 08:12:03.1574289 UTC-04:00] [7488:3336] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-06 08:12:03.1574323 UTC-04:00] [7488:3336] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-06 08:12:03.1576149 UTC-04:00] [7488:3336] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 188110282752 499455451136 188110282752 [2026-08-06 08:12:03.1576369 UTC-04:00] [7488:3336] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-06 08:12:04.0272893 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 41708 \SystemRoot\System32\Conhost.exe [2026-08-06 08:12:04.0273303 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 41708 \SystemRoot\System32\Conhost.exe [2026-08-06 08:12:04.4216872 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 9284 \??\C:\Windows\system32\igfxEM.exe [2026-08-06 08:12:04.4216990 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 9284 C:\Windows\system32\igfxEM.exe [2026-08-06 08:12:04.7241666 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 19908 \??\C:\Windows\system32\igfxHK.exe [2026-08-06 08:12:04.7241778 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 19908 C:\Windows\system32\igfxHK.exe [2026-08-06 08:12:05.0814587 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 41996 \??\C:\Windows\system32\igfxTray.exe [2026-08-06 08:12:05.0814709 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 41996 C:\Windows\system32\igfxTray.exe [2026-08-06 08:12:05.1104518 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 42016 \??\C:\Windows\system32\userinit.exe [2026-08-06 08:12:05.1104617 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 42016 C:\Windows\system32\userinit.exe [2026-08-06 08:12:05.2458635 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 42064 \??\C:\Windows\Explorer.EXE [2026-08-06 08:12:05.2458740 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 42064 C:\Windows\Explorer.EXE [2026-08-06 08:12:26.1533392 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 39036 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-06 08:12:26.1533640 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 39036 C:\IMC\MPS\IMCMobil.exe [2026-08-06 08:12:26.5062536 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 44364 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:26.5062638 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 44364 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:27.3409532 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 10168 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:27.3409641 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 10168 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:27.3471142 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 9860 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-06 08:12:27.3471239 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 9860 C:\IMC\MPS\iIMCMobl.exe [2026-08-06 08:12:28.0331492 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 25948 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:28.0331613 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 25948 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:28.0346675 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 41852 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:28.0346777 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 41852 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:28.1940202 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 33468 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:28.1940316 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 33468 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:28.3687051 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 33096 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:28.3687159 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 33096 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:28.9024446 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 45040 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:28.9024608 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 45040 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:28.9084925 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 43884 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:28.9085081 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 43884 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:28.9959820 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 44048 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:28.9959921 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 44048 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:29.1062076 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 44988 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:29.1062231 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 44988 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:29.3400409 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 44924 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:29.3400519 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 44924 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:32.1116205 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 45568 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-06 08:12:32.1116526 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 45568 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-06 08:12:34.9132887 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 45992 \??\C:\Users\lambertr\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-06 08:12:34.9133327 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 45992 C:\Users\lambertr\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-06 08:12:35.1546338 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 46008 \??\C:\Windows\system32\wlrmdr.exe [2026-08-06 08:12:35.1546444 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 46008 C:\Windows\system32\wlrmdr.exe [2026-08-06 08:12:35.5839260 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 45140 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:35.5839383 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 45140 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:35.8904079 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 44944 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-06 08:12:35.8904190 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 44944 C:\Windows\SysWOW64\runonce.exe [2026-08-06 08:12:36.6908476 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 45464 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-06 08:12:36.6908587 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 45464 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-06 08:12:37.1458463 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 45736 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-06 08:12:37.1458572 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 45736 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-06 08:12:38.7628264 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 45876 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:38.7628370 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 45876 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:42.0075545 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 45436 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-06 08:12:42.0075657 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 45436 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-06 08:12:43.3803453 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 4068 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-06 08:12:43.3803553 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 4068 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-06 08:12:45.4213790 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 45144 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-06 08:12:45.4214085 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 45144 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-06 08:12:46.9253405 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 46016 \??\C:\Windows\System32\cmd.exe [2026-08-06 08:12:46.9253504 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 46016 C:\Windows\System32\cmd.exe [2026-08-06 08:12:46.9968227 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 45280 \SystemRoot\System32\Conhost.exe [2026-08-06 08:12:46.9968349 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 45280 \SystemRoot\System32\Conhost.exe [2026-08-06 08:12:47.3190275 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 41420 \??\C:\Windows\System32\cmd.exe [2026-08-06 08:12:47.3190374 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 41420 C:\Windows\System32\cmd.exe [2026-08-06 08:12:47.4615250 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 34532 \SystemRoot\System32\Conhost.exe [2026-08-06 08:12:47.4615351 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 34532 \SystemRoot\System32\Conhost.exe [2026-08-06 08:12:48.0298532 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 46008 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-06 08:12:48.0298669 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 46008 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-06 08:12:48.0602218 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 45280 \??\C:\Windows\System32\cmd.exe [2026-08-06 08:12:48.0602331 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 45280 C:\Windows\System32\cmd.exe [2026-08-06 08:12:48.0640700 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 45984 \SystemRoot\System32\Conhost.exe [2026-08-06 08:12:48.0691566 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 45984 \SystemRoot\System32\Conhost.exe [2026-08-06 08:12:49.5850556 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 46396 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-06 08:12:49.5850659 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 46396 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-06 08:12:51.6374676 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 46712 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-06 08:12:51.6374782 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 46712 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-06 08:12:55.3030743 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 46904 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-06 08:12:55.3030973 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 46904 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-06 08:12:56.5708207 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 46212 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-06 08:12:56.5708315 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 46212 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-06 08:12:56.6037177 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 46200 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-06 08:12:56.6037290 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 46200 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-06 08:12:58.0003742 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 46584 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:12:58.0003868 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 46584 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:13:04.4116855 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 46868 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-06 08:13:04.4117073 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 46868 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-06 08:13:28.0970693 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 40748 \??\C:\Users\lambertr\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-06 08:13:28.0970979 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 40748 C:\Users\lambertr\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-06 08:13:28.3126957 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 13024 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:13:28.3127062 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 13024 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:13:30.3842119 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 46660 \??\C:\Users\lambertr\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-06 08:13:30.3842217 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 46660 C:\Users\lambertr\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-06 08:13:46.3040115 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 46740 \??\C:\Users\lambertr\AppData\Local\Microsoft\OneDrive\26.129.0706.0004\FileSyncConfig.exe [2026-08-06 08:13:46.3040344 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 46740 C:\Users\lambertr\AppData\Local\Microsoft\OneDrive\26.129.0706.0004\FileSyncConfig.exe [2026-08-06 08:13:47.6495117 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 42780 \??\C:\Users\lambertr\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-06 08:13:47.6495227 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 42780 C:\Users\lambertr\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-06 08:13:53.2293987 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 46016 \??\C:\Users\lambertr\AppData\Local\Microsoft\OneDrive\26.129.0706.0004\OneDrive.Sync.Service.exe [2026-08-06 08:13:53.2294086 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 46016 C:\Users\lambertr\AppData\Local\Microsoft\OneDrive\26.129.0706.0004\OneDrive.Sync.Service.exe [2026-08-06 08:14:27.9445239 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 30020 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:14:27.9445516 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 30020 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:16:32.4908722 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 43204 \??\C:\Windows\splwow64.exe [2026-08-06 08:16:32.4908982 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 43204 C:\Windows\splwow64.exe [2026-08-06 08:17:34.7166545 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 43904 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:17:34.7166801 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 43904 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:20:04.9735986 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 9280 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 08:20:04.9736346 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 9280 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 09:25:12.3531246 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 48948 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 09:25:12.3531761 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 48948 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 09:25:12.4147590 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 49000 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 09:25:12.4147688 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 49000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 09:32:54.0724487 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 47972 \SystemRoot\System32\Conhost.exe [2026-08-06 09:32:54.0724996 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 47972 \SystemRoot\System32\Conhost.exe [2026-08-06 10:36:38.2907467 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 51228 \SystemRoot\System32\Conhost.exe [2026-08-06 10:36:38.2907892 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 51228 \SystemRoot\System32\Conhost.exe [2026-08-06 10:36:38.3064389 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 52120 \SystemRoot\System32\Conhost.exe [2026-08-06 10:36:38.3064501 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 52120 \SystemRoot\System32\Conhost.exe [2026-08-06 10:58:04.2445967 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 50768 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-06 10:58:04.2446288 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 50768 C:\IMC\RMS\TRAFFIC.EXE [2026-08-06 11:32:54.0930998 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 52408 \SystemRoot\System32\Conhost.exe [2026-08-06 11:32:54.0931375 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 52408 \SystemRoot\System32\Conhost.exe [2026-08-06 13:32:54.1129845 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 61756 \SystemRoot\System32\Conhost.exe [2026-08-06 13:32:54.1130256 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 61756 \SystemRoot\System32\Conhost.exe [2026-08-06 14:23:28.5163522 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 63516 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 14:23:28.5163772 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 63516 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 15:15:10.2901550 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 54540 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 15:15:10.2901982 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 54540 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 15:15:10.6698430 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 71404 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 15:15:10.6698531 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 71404 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 15:15:14.1419847 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 6484 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 15:15:14.1420099 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 6484 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 15:15:14.1914703 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 71200 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 15:15:14.1914823 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 71200 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 15:32:54.1461964 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 72340 \SystemRoot\System32\Conhost.exe [2026-08-06 15:32:54.1462442 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 72340 \SystemRoot\System32\Conhost.exe [2026-08-06 17:29:55.9467040 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 77692 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-06 17:29:55.9467433 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 77692 C:\IMC\RMS\TRAFFIC.EXE [2026-08-06 17:31:37.0788784 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 79968 \??\C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe [2026-08-06 17:31:37.0789068 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 79968 C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe [2026-08-06 17:31:37.0939255 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 77880 \SystemRoot\System32\Conhost.exe [2026-08-06 17:31:37.0939382 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 77880 \SystemRoot\System32\Conhost.exe [2026-08-06 17:31:37.7820387 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 78856 \??\C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe [2026-08-06 17:31:37.7820580 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 78856 C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe [2026-08-06 17:32:54.6478634 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 80392 \SystemRoot\System32\Conhost.exe [2026-08-06 17:32:54.6478888 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 80392 \SystemRoot\System32\Conhost.exe [2026-08-06 17:52:21.5345259 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 81712 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 17:52:21.5347154 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 81712 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 17:52:21.8619158 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 80008 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 17:52:21.8619237 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 80008 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 18:16:47.0310298 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 82084 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-06 18:16:47.0310688 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 82084 C:\IMC\RMS\TRAFFIC.EXE [2026-08-06 19:32:54.7743263 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 85612 \SystemRoot\System32\Conhost.exe [2026-08-06 19:32:54.7743623 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 85612 \SystemRoot\System32\Conhost.exe [2026-08-06 20:41:05.1075971 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 91000 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-06 20:41:05.1076414 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 91000 C:\IMC\RMS\TRAFFIC.EXE [2026-08-06 20:43:00.2386213 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 91940 \??\C:\IMC\CMN\DIAGRAMMER.EXE [2026-08-06 20:43:00.2386656 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 91940 C:\IMC\CMN\DIAGRAMMER.EXE [2026-08-06 20:50:04.9352458 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 93080 \??\C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe [2026-08-06 20:50:04.9352811 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 93080 C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe [2026-08-06 20:50:04.9370157 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 93088 \SystemRoot\System32\Conhost.exe [2026-08-06 20:50:04.9370246 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 93088 \SystemRoot\System32\Conhost.exe [2026-08-06 20:50:05.1382772 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 93144 \??\C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe [2026-08-06 20:50:05.1382880 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 93144 C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe [2026-08-06 21:06:00.3583824 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 90232 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 21:06:00.3584937 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 90232 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 21:06:04.1803472 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 94300 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 21:06:04.1803597 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 94300 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 21:06:04.2211852 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 94328 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 21:06:04.2211981 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 94328 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 21:09:17.9225377 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 94744 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 21:09:17.9225610 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 94744 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 21:09:18.2322740 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 92560 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 21:09:18.2322841 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 92560 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 21:32:54.8607045 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 92472 \SystemRoot\System32\Conhost.exe [2026-08-06 21:32:54.8607493 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 92472 \SystemRoot\System32\Conhost.exe [2026-08-06 22:41:22.5184882 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 98052 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 22:41:22.5185261 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 98052 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 22:41:22.7070119 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 99712 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 22:41:22.7070209 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 99712 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 22:41:22.8961323 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 89692 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 22:41:22.8961427 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 89692 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 22:41:22.8975912 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 99416 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 22:41:22.8976012 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 99416 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 22:41:23.0134146 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 98608 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 22:41:23.0134241 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 98608 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 22:41:23.2957691 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 99716 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 22:41:23.2957796 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 99716 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-06 22:41:24.9566454 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 45896 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-06 22:41:24.9566766 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 45896 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-06 22:41:24.9867687 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 44328 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-06 22:41:24.9867804 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 44328 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-06 22:41:35.9233109 UTC-04:00] [7488:6448] [fcmonitor 475 warning] session 3 not init [2026-08-06 22:41:35.9564651 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-06 22:41:35.9565593 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 3 [2026-08-06 22:41:35.9566398 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 3 [2026-08-06 22:41:35.9567163 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 3 [2026-08-06 22:41:35.9567914 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 3 [2026-08-06 22:41:35.9568685 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 3 [2026-08-06 22:41:35.9568826 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-06 22:41:35.9568869 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-06 22:41:35.9568897 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-06 22:41:35.9568924 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-06 22:41:35.9568948 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-06 22:41:35.9568975 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-06 22:41:35.9572877 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 48988 \??\C:\Windows\system32\LogonUI.exe [2026-08-06 22:41:35.9572955 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 48988 C:\Windows\system32\LogonUI.exe [2026-08-06 22:41:36.0515117 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 45084 \??\C:\Windows\System32\LogonUI.exe [2026-08-06 22:41:36.0515215 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 45084 C:\Windows\System32\LogonUI.exe [2026-08-06 22:41:36.0525545 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 45088 \??\C:\Windows\System32\dwm.exe [2026-08-06 22:41:36.0525632 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 45088 C:\Windows\System32\dwm.exe [2026-08-06 22:41:36.5165630 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 45324 \??\C:\Windows\System32\fontdrvhost.exe [2026-08-06 22:41:36.5165762 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 45324 C:\Windows\System32\fontdrvhost.exe [2026-08-06 22:41:36.7495368 UTC-04:00] [7488:3336] [fcmonitor 90 debug] session change reason=3 session=3 [2026-08-06 22:41:36.7496824 UTC-04:00] [7488:3336] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-06 22:41:36.7716488 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-06 22:41:36.7717342 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 3 [2026-08-06 22:41:36.7718162 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 3 [2026-08-06 22:41:36.7719511 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 3 [2026-08-06 22:41:36.7720238 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 3 [2026-08-06 22:41:36.7720967 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 3 [2026-08-06 22:41:36.7721070 UTC-04:00] [7488:3336] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 done [2026-08-06 22:41:36.7721134 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-06 22:41:36.7721182 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-06 22:41:36.7721217 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-06 22:41:36.7721251 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-06 22:41:36.7721284 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-06 22:41:36.7721315 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-06 22:41:36.7721473 UTC-04:00] [7488:3336] [fcmonitor 16 debug] add session=3 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-06 22:41:36.7721639 UTC-04:00] [7488:3336] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-06 22:41:36.7721675 UTC-04:00] [7488:3336] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-06 22:41:36.7724618 UTC-04:00] [7488:3336] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 188361383936 499455451136 188361383936 [2026-08-06 22:41:36.7724703 UTC-04:00] [7488:3336] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-06 22:41:40.6877787 UTC-04:00] [7488:3336] [fcmonitor 90 debug] session change reason=6 session=2 [2026-08-06 22:41:40.6877888 UTC-04:00] [7488:3336] [fcmonitor 117 debug] add reason=6 session=2 ret=1 [2026-08-06 22:41:41.7434129 UTC-04:00] [7488:3336] [fcmonitor 90 debug] session change reason=2 session=2 [2026-08-06 22:41:41.7434192 UTC-04:00] [7488:3336] [fcmonitor 117 debug] add reason=2 session=2 ret=1 [2026-08-06 22:41:41.8220221 UTC-04:00] [7488:3336] [fcmonitor 90 debug] session change reason=4 session=3 [2026-08-06 22:41:41.8220324 UTC-04:00] [7488:3336] [fcmonitor 117 debug] add reason=4 session=3 ret=1 [2026-08-06 22:41:41.9330702 UTC-04:00] [7488:3336] [fcmonitor 90 debug] session change reason=1 session=3 [2026-08-06 22:41:41.9332143 UTC-04:00] [7488:3336] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-06 22:41:41.9562570 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-06 22:41:41.9563865 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 3 [2026-08-06 22:41:41.9565020 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 3 [2026-08-06 22:41:41.9566025 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 3 [2026-08-06 22:41:41.9566856 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 3 [2026-08-06 22:41:41.9567744 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 3 [2026-08-06 22:41:41.9567921 UTC-04:00] [7488:3336] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 done [2026-08-06 22:41:41.9568072 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-06 22:41:41.9568147 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-06 22:41:41.9568178 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-06 22:41:41.9568211 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-06 22:41:41.9568243 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-06 22:41:41.9568313 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-06 22:41:41.9568531 UTC-04:00] [7488:3336] [fcmonitor 16 debug] add session=3 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-06 22:41:41.9568857 UTC-04:00] [7488:3336] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-06 22:41:41.9568971 UTC-04:00] [7488:3336] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-06 22:41:41.9571413 UTC-04:00] [7488:3336] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 188372848640 499455451136 188372848640 [2026-08-06 22:41:41.9571536 UTC-04:00] [7488:3336] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-07 00:08:47.1988063 UTC-04:00] [7488:3336] [fcmonitor 90 debug] session change reason=5 session=3 [2026-08-07 00:08:47.1989983 UTC-04:00] [7488:3336] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-07 00:08:47.2110696 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\hawkinst\Desktop\ for session 3 [2026-08-07 00:08:47.2128002 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\hawkinst\Documents\ for session 3 [2026-08-07 00:08:47.2145116 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\hawkinst\Favorites\ for session 3 [2026-08-07 00:08:47.2164699 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\hawkinst\Music\ for session 3 [2026-08-07 00:08:47.2183558 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\hawkinst\Pictures\ for session 3 [2026-08-07 00:08:47.2333949 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\hawkinst\Videos\ for session 3 [2026-08-07 00:08:47.2334210 UTC-04:00] [7488:3336] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 done [2026-08-07 00:08:47.2334338 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\hawkinst\desktop\ [2026-08-07 00:08:47.2334456 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\hawkinst\documents\ [2026-08-07 00:08:47.2334499 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\hawkinst\favorites\ [2026-08-07 00:08:47.2334527 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\hawkinst\music\ [2026-08-07 00:08:47.2334552 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\hawkinst\pictures\ [2026-08-07 00:08:47.2334575 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\hawkinst\videos\ [2026-08-07 00:08:47.2334727 UTC-04:00] [7488:3336] [fcmonitor 16 debug] add session=3 ret=0 str=C:\Users\hawkinst\Desktop\;C:\Users\hawkinst\Documents\;C:\Users\hawkinst\Favorites\;C:\Users\hawkinst\Music\;C:\Users\hawkinst\Pictures\;C:\Users\hawkinst\Videos\ [2026-08-07 00:08:47.2334870 UTC-04:00] [7488:3336] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-07 00:08:47.2334907 UTC-04:00] [7488:3336] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-07 00:08:47.2338266 UTC-04:00] [7488:3336] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 188699234304 499455451136 188699234304 [2026-08-07 00:08:47.2338346 UTC-04:00] [7488:3336] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-07 00:08:47.8838005 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 12836 \SystemRoot\System32\Conhost.exe [2026-08-07 00:08:47.8838119 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 12836 \SystemRoot\System32\Conhost.exe [2026-08-07 00:08:48.9084652 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 98416 \??\C:\Windows\system32\igfxEM.exe [2026-08-07 00:08:48.9084760 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 98416 C:\Windows\system32\igfxEM.exe [2026-08-07 00:08:49.0917263 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 42608 \??\C:\Windows\system32\igfxHK.exe [2026-08-07 00:08:49.0917362 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 42608 C:\Windows\system32\igfxHK.exe [2026-08-07 00:08:49.3867644 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 99340 \??\C:\Windows\system32\userinit.exe [2026-08-07 00:08:49.3867771 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 99340 C:\Windows\system32\userinit.exe [2026-08-07 00:08:49.5148078 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 44724 \??\C:\Windows\system32\igfxTray.exe [2026-08-07 00:08:49.5148218 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 44724 C:\Windows\system32\igfxTray.exe [2026-08-07 00:08:49.5841948 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 42140 \??\C:\Windows\Explorer.EXE [2026-08-07 00:08:49.5842051 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 42140 C:\Windows\Explorer.EXE [2026-08-07 00:09:19.4689482 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 90324 \??\C:\Windows\System32\wlrmdr.exe [2026-08-07 00:09:19.4689779 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 90324 C:\Windows\System32\wlrmdr.exe [2026-08-07 00:09:22.9972272 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 85112 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-07 00:09:22.9972377 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 85112 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-07 00:09:24.5718937 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 44892 \??\C:\Users\hawkinst\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-07 00:09:24.5719175 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 44892 C:\Users\hawkinst\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-07 00:09:26.2124920 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 101284 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-07 00:09:26.2125022 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 101284 C:\Windows\SysWOW64\runonce.exe [2026-08-07 00:09:26.6061102 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 90324 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-07 00:09:26.6061199 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 90324 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-07 00:09:27.7904375 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 98372 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-07 00:09:27.7904494 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 98372 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-07 00:09:27.9164935 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 39452 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-07 00:09:27.9165034 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 39452 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-07 00:09:43.4089452 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 99696 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-07 00:09:43.4089720 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 99696 C:\IMC\MPS\IMCMobil.exe [2026-08-07 00:09:44.3295832 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 97916 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-07 00:09:44.3295945 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 97916 C:\IMC\MPS\iIMCMobl.exe [2026-08-07 00:09:57.5393516 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 98936 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-07 00:09:57.5393747 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 98936 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-07 00:10:16.3451894 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 9284 \??\C:\Users\hawkinst\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-07 00:10:16.3452124 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 9284 C:\Users\hawkinst\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-07 00:10:18.8761597 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 4420 \??\C:\Users\hawkinst\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-07 00:10:18.8761717 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 4420 C:\Users\hawkinst\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-07 00:10:35.3259428 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 98252 \??\C:\Users\hawkinst\AppData\Local\Microsoft\OneDrive\26.129.0706.0004\FileSyncConfig.exe [2026-08-07 00:10:35.3259692 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 98252 C:\Users\hawkinst\AppData\Local\Microsoft\OneDrive\26.129.0706.0004\FileSyncConfig.exe [2026-08-07 00:10:36.5756896 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 98548 \??\C:\Users\hawkinst\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-07 00:10:36.5757018 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 98548 C:\Users\hawkinst\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-07 00:10:41.8023037 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 37048 \??\C:\Users\hawkinst\AppData\Local\Microsoft\OneDrive\26.129.0706.0004\OneDrive.Sync.Service.exe [2026-08-07 00:10:41.8023427 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 37048 C:\Users\hawkinst\AppData\Local\Microsoft\OneDrive\26.129.0706.0004\OneDrive.Sync.Service.exe [2026-08-07 00:58:27.3939480 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 101820 \SystemRoot\System32\Conhost.exe [2026-08-07 00:58:27.3939822 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 101820 \SystemRoot\System32\Conhost.exe [2026-08-07 02:58:27.9390326 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 108772 \SystemRoot\System32\Conhost.exe [2026-08-07 02:58:27.9390663 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 108772 \SystemRoot\System32\Conhost.exe [2026-08-07 04:58:28.0114446 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 117524 \SystemRoot\System32\Conhost.exe [2026-08-07 04:58:28.0114860 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 117524 \SystemRoot\System32\Conhost.exe [2026-08-07 06:58:28.0206065 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 123300 \SystemRoot\System32\Conhost.exe [2026-08-07 06:58:28.0206454 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 123300 \SystemRoot\System32\Conhost.exe [2026-08-07 07:40:59.2735349 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 127980 \??\C:\Windows\System32\LogonUI.exe [2026-08-07 07:40:59.2736008 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 127980 C:\Windows\System32\LogonUI.exe [2026-08-07 07:41:03.5050962 UTC-04:00] [7488:3336] [fcmonitor 90 debug] session change reason=6 session=3 [2026-08-07 07:41:03.5051089 UTC-04:00] [7488:3336] [fcmonitor 117 debug] add reason=6 session=3 ret=1 [2026-08-07 07:41:03.8205493 UTC-04:00] [7488:3336] [fcmonitor 90 debug] session change reason=2 session=3 [2026-08-07 07:41:03.8205567 UTC-04:00] [7488:3336] [fcmonitor 117 debug] add reason=2 session=3 ret=1 [2026-08-07 07:41:03.9218737 UTC-04:00] [7488:6448] [fcmonitor 475 warning] session 4 not init [2026-08-07 07:41:03.9640169 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 4 [2026-08-07 07:41:03.9641058 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 4 [2026-08-07 07:41:03.9641836 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 4 [2026-08-07 07:41:03.9642580 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 4 [2026-08-07 07:41:03.9643318 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 4 [2026-08-07 07:41:03.9644047 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 4 [2026-08-07 07:41:03.9644189 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-07 07:41:03.9644232 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-07 07:41:03.9644261 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-07 07:41:03.9644288 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-07 07:41:03.9644315 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-07 07:41:03.9644341 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-07 07:41:04.1641923 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 128976 \??\C:\Windows\system32\LogonUI.exe [2026-08-07 07:41:04.1642044 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 128976 C:\Windows\system32\LogonUI.exe [2026-08-07 07:41:04.1653636 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 128984 \??\C:\Windows\system32\dwm.exe [2026-08-07 07:41:04.1653720 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 128984 C:\Windows\system32\dwm.exe [2026-08-07 07:41:04.2125450 UTC-04:00] [7488:3336] [fcmonitor 90 debug] session change reason=1 session=4 [2026-08-07 07:41:04.2126800 UTC-04:00] [7488:3336] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 4 [2026-08-07 07:41:04.2428360 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 4 [2026-08-07 07:41:04.2429320 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 4 [2026-08-07 07:41:04.2430162 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 4 [2026-08-07 07:41:04.2430975 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 4 [2026-08-07 07:41:04.2431758 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 4 [2026-08-07 07:41:04.2432522 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 4 [2026-08-07 07:41:04.2432653 UTC-04:00] [7488:3336] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 4 done [2026-08-07 07:41:04.2432737 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-07 07:41:04.2432799 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-07 07:41:04.2432842 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-07 07:41:04.2432879 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-07 07:41:04.2432929 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-07 07:41:04.2432965 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-07 07:41:04.2433109 UTC-04:00] [7488:3336] [fcmonitor 16 debug] add session=4 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-07 07:41:04.2433299 UTC-04:00] [7488:3336] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-07 07:41:04.2433340 UTC-04:00] [7488:3336] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-07 07:41:04.2435386 UTC-04:00] [7488:3336] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 187981979648 499455451136 187981979648 [2026-08-07 07:41:04.2435485 UTC-04:00] [7488:3336] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-07 07:41:04.5477488 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 35864 \??\C:\Windows\system32\fontdrvhost.exe [2026-08-07 07:41:04.5477592 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 35864 C:\Windows\system32\fontdrvhost.exe [2026-08-07 23:06:07.4589547 UTC-04:00] [7488:3336] [fcmonitor 90 debug] session change reason=5 session=4 [2026-08-07 23:06:07.4591567 UTC-04:00] [7488:3336] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 4 [2026-08-07 23:06:07.5049481 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\Poulimed\Desktop\ for session 4 [2026-08-07 23:06:07.5077874 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\Poulimed\Documents\ for session 4 [2026-08-07 23:06:07.5120171 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\Poulimed\Favorites\ for session 4 [2026-08-07 23:06:07.5142230 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\Poulimed\Music\ for session 4 [2026-08-07 23:06:07.5259737 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\Poulimed\Pictures\ for session 4 [2026-08-07 23:06:07.5288613 UTC-04:00] [7488:3336] [fcmonitor 228 info] parsed to C:\Users\Poulimed\Videos\ for session 4 [2026-08-07 23:06:07.5288798 UTC-04:00] [7488:3336] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 4 done [2026-08-07 23:06:07.5288874 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\poulimed\desktop\ [2026-08-07 23:06:07.5288939 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\poulimed\documents\ [2026-08-07 23:06:07.5288999 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\poulimed\favorites\ [2026-08-07 23:06:07.5289035 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\poulimed\music\ [2026-08-07 23:06:07.5289482 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\poulimed\pictures\ [2026-08-07 23:06:07.5289542 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\poulimed\videos\ [2026-08-07 23:06:07.5289702 UTC-04:00] [7488:3336] [fcmonitor 16 debug] add session=4 ret=0 str=C:\Users\Poulimed\Desktop\;C:\Users\Poulimed\Documents\;C:\Users\Poulimed\Favorites\;C:\Users\Poulimed\Music\;C:\Users\Poulimed\Pictures\;C:\Users\Poulimed\Videos\ [2026-08-07 23:06:07.5289878 UTC-04:00] [7488:3336] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-07 23:06:07.5289915 UTC-04:00] [7488:3336] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-07 23:06:07.5296936 UTC-04:00] [7488:3336] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 193687900160 499455451136 193687900160 [2026-08-07 23:06:07.5297179 UTC-04:00] [7488:3336] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-07 23:06:08.7457387 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 186648 \SystemRoot\System32\Conhost.exe [2026-08-07 23:06:08.7457550 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 186648 \SystemRoot\System32\Conhost.exe [2026-08-07 23:06:10.1916619 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 187104 \??\C:\Windows\system32\igfxEM.exe [2026-08-07 23:06:10.1916743 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 187104 C:\Windows\system32\igfxEM.exe [2026-08-07 23:06:10.6865920 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 187164 \??\C:\Windows\system32\userinit.exe [2026-08-07 23:06:10.6866037 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 187164 C:\Windows\system32\userinit.exe [2026-08-07 23:06:10.6878577 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 187172 \??\C:\Windows\system32\igfxHK.exe [2026-08-07 23:06:10.6878668 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 187172 C:\Windows\system32\igfxHK.exe [2026-08-07 23:06:10.8354180 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 187196 \??\C:\Windows\Explorer.EXE [2026-08-07 23:06:10.8354309 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 187196 C:\Windows\Explorer.EXE [2026-08-07 23:06:10.8660117 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 187204 \??\C:\Windows\system32\igfxTray.exe [2026-08-07 23:06:10.8660233 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 187204 C:\Windows\system32\igfxTray.exe [2026-08-07 23:06:40.7627058 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 190216 \??\C:\Windows\system32\wlrmdr.exe [2026-08-07 23:06:40.7627376 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 190216 C:\Windows\system32\wlrmdr.exe [2026-08-07 23:06:50.2310458 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 159936 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-07 23:06:50.2310726 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 159936 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-07 23:06:52.5700096 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 159512 \??\C:\Users\Poulimed\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-07 23:06:52.5700220 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 159512 C:\Users\Poulimed\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-07 23:06:54.1051710 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 159488 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-07 23:06:54.1051845 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 159488 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-07 23:06:55.0902319 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 159748 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-07 23:06:55.0902479 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 159748 C:\Windows\SysWOW64\runonce.exe [2026-08-07 23:06:56.1060248 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 158728 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-07 23:06:56.1060393 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 158728 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-07 23:06:56.4334141 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 159916 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-07 23:06:56.4334585 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 159916 C:\IMC\MPS\IMCMobil.exe [2026-08-07 23:06:56.9800195 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 159920 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-07 23:06:56.9800381 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 159920 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-07 23:06:58.1055472 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 190276 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-07 23:06:58.1055588 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 190276 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-07 23:06:58.6830492 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 190264 \??\C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-07 23:06:58.6830617 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 190264 C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-07 23:06:59.5998874 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 189048 \??\C:\Windows\System32\cmd.exe [2026-08-07 23:06:59.5998989 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 189048 C:\Windows\System32\cmd.exe [2026-08-07 23:06:59.7473734 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 187936 \SystemRoot\System32\Conhost.exe [2026-08-07 23:06:59.7473857 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 187936 \SystemRoot\System32\Conhost.exe [2026-08-07 23:07:00.8084904 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 189696 \??\C:\Windows\System32\cmd.exe [2026-08-07 23:07:00.8085025 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 189696 C:\Windows\System32\cmd.exe [2026-08-07 23:07:01.0271958 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 185500 \SystemRoot\System32\Conhost.exe [2026-08-07 23:07:01.0272066 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 185500 \SystemRoot\System32\Conhost.exe [2026-08-07 23:07:02.1058223 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 160316 \??\C:\Windows\System32\cmd.exe [2026-08-07 23:07:02.1058333 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 160316 C:\Windows\System32\cmd.exe [2026-08-07 23:07:02.2148633 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 159216 \SystemRoot\System32\Conhost.exe [2026-08-07 23:07:02.2148750 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 159216 \SystemRoot\System32\Conhost.exe [2026-08-07 23:07:03.9557764 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 187184 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-07 23:07:03.9557873 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 187184 C:\IMC\MPS\iIMCMobl.exe [2026-08-07 23:07:12.0972822 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 159704 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-07 23:07:12.0973114 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 159704 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-07 23:07:18.3293082 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 159344 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-07 23:07:18.3293341 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 159344 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-07 23:07:18.4000351 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 159444 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-07 23:07:18.4000466 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 159444 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-07 23:07:18.5033810 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 159340 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-07 23:07:18.5033930 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 159340 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-07 23:07:18.5051782 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 187996 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-07 23:07:18.5051889 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 187996 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-07 23:07:18.9716823 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 159628 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-07 23:07:18.9716958 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 159628 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-07 23:07:21.0498485 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 187212 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-07 23:07:21.0498613 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 187212 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-07 23:07:23.1150121 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 185480 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-07 23:07:23.1150286 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 185480 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-07 23:07:44.7521803 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 186752 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-07 23:07:44.7522134 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 186752 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-07 23:07:54.8509956 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 189136 \??\C:\Windows\splwow64.exe [2026-08-07 23:07:54.8510265 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 189136 C:\Windows\splwow64.exe [2026-08-07 23:08:00.4071330 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 158928 \??\C:\Users\Poulimed\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-07 23:08:00.4071581 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 158928 C:\Users\Poulimed\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-07 23:08:09.6610616 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 187648 \??\C:\Users\Poulimed\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-07 23:08:09.6610885 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 187648 C:\Users\Poulimed\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-07 23:08:29.9571658 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 190300 \??\C:\Users\Poulimed\AppData\Local\Microsoft\OneDrive\26.129.0706.0004\FileSyncConfig.exe [2026-08-07 23:08:29.9571933 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 190300 C:\Users\Poulimed\AppData\Local\Microsoft\OneDrive\26.129.0706.0004\FileSyncConfig.exe [2026-08-07 23:08:32.6130941 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 158064 \??\C:\Users\Poulimed\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-07 23:08:32.6131068 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 158064 C:\Users\Poulimed\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-07 23:08:39.4131581 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 185728 \??\C:\Users\Poulimed\AppData\Local\Microsoft\OneDrive\26.129.0706.0004\OneDrive.Sync.Service.exe [2026-08-07 23:08:39.4131907 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 185728 C:\Users\Poulimed\AppData\Local\Microsoft\OneDrive\26.129.0706.0004\OneDrive.Sync.Service.exe [2026-08-08 00:02:44.4497260 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 191300 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-08 00:02:44.4497601 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 191300 C:\IMC\RMS\TRAFFIC.EXE [2026-08-08 00:03:58.3224068 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 186584 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:03:58.3224402 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 186584 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:03:58.4473572 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 190952 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:03:58.4473721 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 190952 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:03:58.6357832 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 186948 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:03:58.6357939 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 186948 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:03:58.8108496 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 190884 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:03:58.8108599 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 190884 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:03:58.8124537 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 190796 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:03:58.8124642 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 190796 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:03:59.2508915 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 191552 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:03:59.2509021 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 191552 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:03:59.3381873 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 191692 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:03:59.3381981 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 191692 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:03:59.3595867 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 191700 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:03:59.3595972 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 191700 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:03:59.5228463 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 191856 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:03:59.5228569 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 191856 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:03:59.7419821 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 191900 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:03:59.7419929 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 191900 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:04:05.5849534 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 191752 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:04:05.5849670 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 191752 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:04:05.6319837 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 190716 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:04:05.6320360 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 190716 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:04:06.7082113 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 192380 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:04:06.7082375 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 192380 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:04:07.6091075 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 191788 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-08 00:04:07.6091208 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 191788 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-08 00:04:07.6480555 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 192096 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-08 00:04:07.6480678 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 192096 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-08 00:16:52.6001654 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 191808 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-08 00:16:52.6002112 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 191808 C:\Windows\SysWOW64\WerFault.exe [2026-08-08 00:47:07.1092440 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 194312 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-08 00:47:07.1092776 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 194312 C:\IMC\RMS\TRAFFIC.EXE [2026-08-08 00:49:53.3574888 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 191952 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:53.3576219 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 191952 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:53.6042338 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 192840 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:53.6042452 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 192840 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:53.7915280 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 159532 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:53.7915453 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 159532 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:53.7941745 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 193312 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:53.7941843 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 193312 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:54.1139870 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 194412 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:54.1139977 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 194412 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:54.2603511 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 193612 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:54.2603638 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 193612 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:54.2616948 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 192692 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:54.2617059 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 192692 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:54.3695290 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 192628 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:54.3695382 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 192628 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:54.4529643 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 193596 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:54.4529747 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 193596 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:57.2803071 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 195180 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:57.2803311 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 195180 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:58.8056974 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 195340 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:58.8066839 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 195340 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:58.8437555 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 195364 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:49:58.8437659 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 195364 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:50:00.1050539 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 195472 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:50:00.1050635 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 195472 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:50:00.3718698 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 195540 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-08 00:50:00.3718809 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 195540 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-08 00:50:00.3872891 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 195556 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-08 00:50:00.3873000 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 195556 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-08 00:50:02.8916456 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 194940 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:50:02.8916556 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 194940 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:50:03.0797042 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 195252 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:50:03.0797173 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 195252 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:50:03.3272372 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 193672 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:50:03.3272472 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 193672 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:50:03.3299511 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 194852 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:50:03.3300188 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 194852 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:50:03.4339632 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 195428 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:50:03.4339730 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 195428 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:50:03.6323680 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 193892 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:50:03.6323780 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 193892 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:50:05.5800811 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 194788 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-08 00:50:05.5800924 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 194788 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-08 00:50:05.6113046 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 194952 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-08 00:50:05.6113229 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 194952 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-08 00:50:33.3198264 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 186472 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:50:33.3198982 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 186472 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:52:03.3141768 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 194948 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:52:03.3142098 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 194948 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:53:03.8433293 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 191364 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:53:03.8433570 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 191364 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 00:58:29.4315700 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 159800 \SystemRoot\System32\Conhost.exe [2026-08-08 00:58:29.4316089 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 159800 \SystemRoot\System32\Conhost.exe [2026-08-08 02:58:29.5004463 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 198864 \SystemRoot\System32\Conhost.exe [2026-08-08 02:58:29.5004839 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 198864 \SystemRoot\System32\Conhost.exe [2026-08-08 03:19:46.7559408 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 204012 \??\C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-08 03:19:46.7559862 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 204012 C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-08 04:50:03.6799876 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 208332 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 04:50:03.6800302 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 208332 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 04:50:03.8376248 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 198832 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 04:50:03.8376349 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 198832 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 04:50:04.0652026 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 208684 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 04:50:04.0652132 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 208684 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 04:50:04.0671201 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 206224 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 04:50:04.0671292 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 206224 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 04:50:04.1963874 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 209156 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 04:50:04.1963982 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 209156 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 04:50:04.2619131 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 206300 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 04:50:04.2619288 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 206300 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 04:50:06.2527269 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 210096 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-08 04:50:06.2527394 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 210096 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-08 04:50:06.2987127 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 210112 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-08 04:50:06.2987247 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 210112 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-08 04:50:34.0473642 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 210856 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 04:50:34.0473929 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 210856 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 04:52:04.0523102 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 205788 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 04:52:04.0523346 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 205788 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 04:58:29.7278391 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 195408 \SystemRoot\System32\Conhost.exe [2026-08-08 04:58:29.7278622 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 195408 \SystemRoot\System32\Conhost.exe [2026-08-08 06:51:48.3868317 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 215300 \??\C:\Windows\system32\LogonUI.exe [2026-08-08 06:51:48.3868702 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 215300 C:\Windows\system32\LogonUI.exe [2026-08-08 06:51:51.8120357 UTC-04:00] [7488:3336] [fcmonitor 90 debug] session change reason=6 session=4 [2026-08-08 06:51:51.8120472 UTC-04:00] [7488:3336] [fcmonitor 117 debug] add reason=6 session=4 ret=1 [2026-08-08 06:51:52.1236999 UTC-04:00] [7488:3336] [fcmonitor 90 debug] session change reason=2 session=4 [2026-08-08 06:51:52.1237083 UTC-04:00] [7488:3336] [fcmonitor 117 debug] add reason=2 session=4 ret=1 [2026-08-08 06:51:52.2564572 UTC-04:00] [7488:6448] [fcmonitor 475 warning] session 5 not init [2026-08-08 06:51:52.2989395 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 5 [2026-08-08 06:51:52.2990598 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 5 [2026-08-08 06:51:52.2991994 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 5 [2026-08-08 06:51:52.2992986 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 5 [2026-08-08 06:51:52.2994249 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 5 [2026-08-08 06:51:52.2995060 UTC-04:00] [7488:6448] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 5 [2026-08-08 06:51:52.2995201 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-08 06:51:52.2995287 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-08 06:51:52.2995335 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-08 06:51:52.2995370 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-08 06:51:52.2995400 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-08 06:51:52.2995432 UTC-04:00] [7488:6448] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-08 06:51:52.5220932 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 209760 \??\C:\Windows\system32\LogonUI.exe [2026-08-08 06:51:52.5221040 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 209760 C:\Windows\system32\LogonUI.exe [2026-08-08 06:51:52.5377029 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 209444 \??\C:\Windows\system32\dwm.exe [2026-08-08 06:51:52.5377172 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 209444 C:\Windows\system32\dwm.exe [2026-08-08 06:51:52.6089194 UTC-04:00] [7488:3336] [fcmonitor 90 debug] session change reason=1 session=5 [2026-08-08 06:51:52.6090738 UTC-04:00] [7488:3336] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 5 [2026-08-08 06:51:52.6514466 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 5 [2026-08-08 06:51:52.6515304 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 5 [2026-08-08 06:51:52.6516024 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 5 [2026-08-08 06:51:52.6516705 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 5 [2026-08-08 06:51:52.6517380 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 5 [2026-08-08 06:51:52.6518029 UTC-04:00] [7488:3336] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 5 [2026-08-08 06:51:52.6518117 UTC-04:00] [7488:3336] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 5 done [2026-08-08 06:51:52.6518165 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-08 06:51:52.6518220 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-08 06:51:52.6518248 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-08 06:51:52.6518271 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-08 06:51:52.6518297 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-08 06:51:52.6518319 UTC-04:00] [7488:3336] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-08 06:51:52.6518484 UTC-04:00] [7488:3336] [fcmonitor 16 debug] add session=5 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-08 06:51:52.6518623 UTC-04:00] [7488:3336] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-08 06:51:52.6518649 UTC-04:00] [7488:3336] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-08 06:51:52.6520274 UTC-04:00] [7488:3336] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 191940546560 499455451136 191940546560 [2026-08-08 06:51:52.6520348 UTC-04:00] [7488:3336] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-08 06:51:52.9439513 UTC-04:00] [7488:6448] [fcmonitor 332 debug] proc cache add 206776 \??\C:\Windows\system32\fontdrvhost.exe [2026-08-08 06:51:52.9439649 UTC-04:00] [7488:6448] [fcmonitor 99 info] add pid 206776 C:\Windows\system32\fontdrvhost.exe [2026-08-08 08:06:23.2082618 UTC-04:00] [8364:8368] [fcmonitor 1249 info] (Time Zone: Eastern Standard Time) (Sun Jun 30 22:28:59 2024, 58s) 2026-08-08 08:06:23.200 type: 0x10f size: 512 memory: 0x0000000000000000 [2026-08-08 08:06:23.2094147 UTC-04:00] [8364:8368] [fcmonitor 78 debug] ems_serial FCTEMS8821002497 [2026-08-08 08:06:23.2116265 UTC-04:00] [8364:8368] [fcmonitor 85 debug] fct_serial FCT8000515779876 [2026-08-08 08:06:23.2117962 UTC-04:00] [8364:8368] [fcmonitor 94 debug] fct_uid 4EF5549DB1674A63BE848553987D4AEE [2026-08-08 08:06:23.2118309 UTC-04:00] [8364:8368] [fcmonitor 103 debug] vdom default [2026-08-08 08:06:23.2118440 UTC-04:00] [8364:8368] [fcmonitor 843 info] InitCryptAlg [2026-08-08 08:06:23.2125259 UTC-04:00] [8364:8368] [fcmonitor 41 info] before LoadSettings [2026-08-08 08:06:23.2126566 UTC-04:00] [8364:8368] [fcmonitor 45 info] folder C:\Users\%USERNAME%\Desktop\ [2026-08-08 08:06:23.2126664 UTC-04:00] [8364:8368] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-08 08:06:23.2875304 UTC-04:00] [8364:8368] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-08 08:06:23.2876234 UTC-04:00] [8364:8368] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 0 [2026-08-08 08:06:23.2876960 UTC-04:00] [8364:8368] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 0 [2026-08-08 08:06:23.2877837 UTC-04:00] [8364:8368] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 0 [2026-08-08 08:06:23.2878526 UTC-04:00] [8364:8368] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 0 [2026-08-08 08:06:23.2879160 UTC-04:00] [8364:8368] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 0 [2026-08-08 08:06:23.2879260 UTC-04:00] [8364:8368] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 done [2026-08-08 08:06:23.2879320 UTC-04:00] [8364:8368] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-08 08:06:23.2879476 UTC-04:00] [8364:8368] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-08 08:06:23.2879507 UTC-04:00] [8364:8368] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-08 08:06:23.2879537 UTC-04:00] [8364:8368] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-08 08:06:23.2879565 UTC-04:00] [8364:8368] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-08 08:06:23.2879591 UTC-04:00] [8364:8368] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-08 08:06:23.2879777 UTC-04:00] [8364:8368] [fcmonitor 16 debug] add session=0 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-08 08:06:23.3415936 UTC-04:00] [8364:8368] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-08 08:06:23.3482859 UTC-04:00] [8364:8368] [fcmonitor 228 info] parsed to C:\Users\garrahaj\Desktop\ for session 1 [2026-08-08 08:06:23.3507588 UTC-04:00] [8364:8368] [fcmonitor 228 info] parsed to C:\Users\garrahaj\Documents\ for session 1 [2026-08-08 08:06:23.3529587 UTC-04:00] [8364:8368] [fcmonitor 228 info] parsed to C:\Users\garrahaj\Favorites\ for session 1 [2026-08-08 08:06:23.3546151 UTC-04:00] [8364:8368] [fcmonitor 228 info] parsed to C:\Users\garrahaj\Music\ for session 1 [2026-08-08 08:06:23.3563113 UTC-04:00] [8364:8368] [fcmonitor 228 info] parsed to C:\Users\garrahaj\Pictures\ for session 1 [2026-08-08 08:06:23.3583704 UTC-04:00] [8364:8368] [fcmonitor 228 info] parsed to C:\Users\garrahaj\Videos\ for session 1 [2026-08-08 08:06:23.3583845 UTC-04:00] [8364:8368] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 done [2026-08-08 08:06:23.3583904 UTC-04:00] [8364:8368] [fcmonitor 435 info] add c:\users\garrahaj\desktop\ [2026-08-08 08:06:23.3583949 UTC-04:00] [8364:8368] [fcmonitor 435 info] add c:\users\garrahaj\documents\ [2026-08-08 08:06:23.3583979 UTC-04:00] [8364:8368] [fcmonitor 435 info] add c:\users\garrahaj\favorites\ [2026-08-08 08:06:23.3584009 UTC-04:00] [8364:8368] [fcmonitor 435 info] add c:\users\garrahaj\music\ [2026-08-08 08:06:23.3584036 UTC-04:00] [8364:8368] [fcmonitor 435 info] add c:\users\garrahaj\pictures\ [2026-08-08 08:06:23.3584062 UTC-04:00] [8364:8368] [fcmonitor 435 info] add c:\users\garrahaj\videos\ [2026-08-08 08:06:23.3584177 UTC-04:00] [8364:8368] [fcmonitor 16 debug] add session=1 ret=1 str=C:\Users\garrahaj\Desktop\;C:\Users\garrahaj\Documents\;C:\Users\garrahaj\Favorites\;C:\Users\garrahaj\Music\;C:\Users\garrahaj\Pictures\;C:\Users\garrahaj\Videos\ [2026-08-08 08:06:23.3584205 UTC-04:00] [8364:8368] [fcmonitor 52 debug] reload monitor folder for session 0 [2026-08-08 08:06:23.3584337 UTC-04:00] [8364:8368] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-08 08:06:23.3584365 UTC-04:00] [8364:8368] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-08 08:06:23.3589065 UTC-04:00] [8364:8368] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 191569649664 499455451136 191569649664 [2026-08-08 08:06:23.3589168 UTC-04:00] [8364:8368] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-08 08:06:23.5500510 UTC-04:00] [8364:8368] [fcmonitor 232 info] queue lock 0x394 cleanevent 0x398 [2026-08-08 08:06:23.5501666 UTC-04:00] [8364:8368] [fcmonitor 245 info] init succeed [2026-08-08 08:06:23.5501703 UTC-04:00] [8364:8368] [fcmonitor 438 info] reading cache [2026-08-08 08:06:23.6706650 UTC-04:00] [8364:8368] [fcmonitor 440 info] getting all proc [2026-08-08 08:06:23.7416291 UTC-04:00] [8364:8368] [fcmonitor 159 debug] getting all proc [2026-08-08 08:06:23.7448887 UTC-04:00] [8364:8368] [fcmonitor 192 warning] GetAllProcTree can't find module 4 System [2026-08-08 08:06:23.8028669 UTC-04:00] [8364:8368] [fcmonitor 192 warning] GetAllProcTree can't find module 100 Registry [2026-08-08 08:06:24.3502520 UTC-04:00] [8364:8368] [fcmonitor 192 warning] GetAllProcTree can't find module 2488 Memory Compression [2026-08-08 08:06:25.4329486 UTC-04:00] [8364:8368] [fcmonitor 192 warning] GetAllProcTree can't find module 8444 net.exe [2026-08-08 08:06:25.4346505 UTC-04:00] [8364:8368] [fcmonitor 192 warning] GetAllProcTree can't find module 8720 net1.exe [2026-08-08 08:06:25.4367372 UTC-04:00] [8364:8368] [fcmonitor 192 warning] GetAllProcTree can't find module 8776 conhost.exe [2026-08-08 08:06:25.5063029 UTC-04:00] [8364:8368] [fcmonitor 286 debug] getting all proc finished 138 0 [2026-08-08 08:06:25.5063096 UTC-04:00] [8364:8368] [fcmonitor 442 info] finish [2026-08-08 08:06:25.5064161 UTC-04:00] [8364:8368] [fcmonitor 267 info] heap p 0x000002A5D6805BE0 [2026-08-08 08:06:25.5064525 UTC-04:00] [8364:8368] [fcmonitor 267 info] heap p 0x000002A5D6806090 [2026-08-08 08:06:25.5064866 UTC-04:00] [8364:8368] [fcmonitor 267 info] heap p 0x000002A5D6806540 [2026-08-08 08:06:25.5065181 UTC-04:00] [8364:8368] [fcmonitor 267 info] heap p 0x000002A5D6814E80 [2026-08-08 08:06:25.5065509 UTC-04:00] [8364:8368] [fcmonitor 267 info] heap p 0x000002A5D6816690 [2026-08-08 08:06:25.5065806 UTC-04:00] [8364:8368] [fcmonitor 267 info] heap p 0x000002A5D6812CD0 [2026-08-08 08:06:25.5066120 UTC-04:00] [8364:8368] [fcmonitor 267 info] heap p 0x000002A5D6813670 [2026-08-08 08:06:25.5066415 UTC-04:00] [8364:8368] [fcmonitor 267 info] heap p 0x000002A5D68149B0 [2026-08-08 08:06:25.5292620 UTC-04:00] [8364:9372] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-08 08:06:25.5295782 UTC-04:00] [8364:9376] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-08 08:06:25.5303128 UTC-04:00] [8364:9380] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-08 08:06:25.5305935 UTC-04:00] [8364:9384] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-08 08:06:25.5386629 UTC-04:00] [8364:9388] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-08 08:06:25.5399163 UTC-04:00] [8364:9392] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-08 08:06:25.5400477 UTC-04:00] [8364:9396] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-08 08:06:25.5407865 UTC-04:00] [8364:9400] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-08 08:06:25.5752932 UTC-04:00] [8364:9368] [fcmonitor 475 warning] session 1 not init [2026-08-08 08:06:25.5819408 UTC-04:00] [8364:9368] [fcmonitor 228 info] parsed to C:\Users\garrahaj\Desktop\ for session 1 [2026-08-08 08:06:25.5839135 UTC-04:00] [8364:9368] [fcmonitor 228 info] parsed to C:\Users\garrahaj\Documents\ for session 1 [2026-08-08 08:06:25.5858546 UTC-04:00] [8364:9368] [fcmonitor 228 info] parsed to C:\Users\garrahaj\Favorites\ for session 1 [2026-08-08 08:06:25.5878430 UTC-04:00] [8364:9368] [fcmonitor 228 info] parsed to C:\Users\garrahaj\Music\ for session 1 [2026-08-08 08:06:25.5901501 UTC-04:00] [8364:9368] [fcmonitor 228 info] parsed to C:\Users\garrahaj\Pictures\ for session 1 [2026-08-08 08:06:25.5921337 UTC-04:00] [8364:9368] [fcmonitor 228 info] parsed to C:\Users\garrahaj\Videos\ for session 1 [2026-08-08 08:06:25.5921516 UTC-04:00] [8364:9368] [fcmonitor 435 info] add c:\users\garrahaj\desktop\ [2026-08-08 08:06:25.5921562 UTC-04:00] [8364:9368] [fcmonitor 435 info] add c:\users\garrahaj\documents\ [2026-08-08 08:06:25.5921592 UTC-04:00] [8364:9368] [fcmonitor 435 info] add c:\users\garrahaj\favorites\ [2026-08-08 08:06:25.5921619 UTC-04:00] [8364:9368] [fcmonitor 435 info] add c:\users\garrahaj\music\ [2026-08-08 08:06:25.5921646 UTC-04:00] [8364:9368] [fcmonitor 435 info] add c:\users\garrahaj\pictures\ [2026-08-08 08:06:25.5921671 UTC-04:00] [8364:9368] [fcmonitor 435 info] add c:\users\garrahaj\videos\ [2026-08-08 08:06:28.9682028 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 9692 \??\C:\Windows\system32\igfxEM.exe [2026-08-08 08:06:28.9682198 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 9692 C:\Windows\system32\igfxEM.exe [2026-08-08 08:06:29.9453825 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 9760 \??\C:\Windows\system32\igfxHK.exe [2026-08-08 08:06:29.9453917 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 9760 C:\Windows\system32\igfxHK.exe [2026-08-08 08:06:30.8784756 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 9852 \??\C:\Windows\system32\igfxTray.exe [2026-08-08 08:06:30.8784862 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 9852 C:\Windows\system32\igfxTray.exe [2026-08-08 08:06:33.0118032 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 10200 \??\C:\Windows\system32\userinit.exe [2026-08-08 08:06:33.0118142 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 10200 C:\Windows\system32\userinit.exe [2026-08-08 08:06:34.0920686 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 9312 \??\C:\Windows\Explorer.EXE [2026-08-08 08:06:34.0920792 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 9312 C:\Windows\Explorer.EXE [2026-08-08 08:07:03.1164090 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 11412 \??\C:\Windows\system32\wlrmdr.exe [2026-08-08 08:07:03.1164410 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 11412 C:\Windows\system32\wlrmdr.exe [2026-08-08 08:07:13.5250549 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 11612 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-08 08:07:13.5250834 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 11612 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-08 08:07:14.6654832 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 11832 \??\C:\Users\garrahaj\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-08 08:07:14.6655067 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 11832 C:\Users\garrahaj\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-08 08:07:16.0262260 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 804 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:07:16.0262366 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 804 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:07:17.4185830 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 11896 \??\C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Win32Bridge.Server.exe [2026-08-08 08:07:17.4185966 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 11896 C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Win32Bridge.Server.exe [2026-08-08 08:07:18.7770332 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 12084 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-08 08:07:18.7770425 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 12084 C:\Windows\SysWOW64\runonce.exe [2026-08-08 08:07:19.2926035 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 11992 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-08 08:07:19.2926150 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 11992 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-08 08:07:21.1450024 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 7800 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-08 08:07:21.1450298 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 7800 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-08 08:07:22.9498446 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 12176 \??\C:\Windows\System32\cmd.exe [2026-08-08 08:07:22.9498545 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 12176 C:\Windows\System32\cmd.exe [2026-08-08 08:07:23.1679161 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 10756 \SystemRoot\System32\Conhost.exe [2026-08-08 08:07:23.1679253 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 10756 \SystemRoot\System32\Conhost.exe [2026-08-08 08:07:24.4824110 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 10836 \??\C:\Windows\System32\cmd.exe [2026-08-08 08:07:24.4824343 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 10836 C:\Windows\System32\cmd.exe [2026-08-08 08:07:24.6289157 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 11700 \SystemRoot\System32\Conhost.exe [2026-08-08 08:07:24.6289251 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 11700 \SystemRoot\System32\Conhost.exe [2026-08-08 08:07:24.8663745 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 11680 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-08 08:07:24.8663894 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 11680 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-08 08:07:25.4883192 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 7512 \??\C:\Windows\System32\cmd.exe [2026-08-08 08:07:25.4883295 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 7512 C:\Windows\System32\cmd.exe [2026-08-08 08:07:25.5998375 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 4388 \SystemRoot\System32\Conhost.exe [2026-08-08 08:07:25.5998468 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 4388 \SystemRoot\System32\Conhost.exe [2026-08-08 08:07:26.7416364 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 2296 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:07:26.7416461 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 2296 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:07:34.5224054 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 10696 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:07:34.5224290 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 10696 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:07:34.5276987 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 10604 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:07:34.5277139 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 10604 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:07:34.5772929 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 10664 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:07:34.5773042 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 10664 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:07:34.5789569 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 10836 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:07:34.5789689 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 10836 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:07:49.7240196 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 13300 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-08 08:07:49.7240434 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 13300 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-08 08:07:49.9475472 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 7212 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-08 08:07:49.9475566 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 7212 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.59\identity_helper.exe [2026-08-08 08:07:58.7704475 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 11192 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:07:58.7704732 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 11192 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:08:22.3156575 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 5344 \??\C:\Users\garrahaj\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-08 08:08:22.3156837 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 5344 C:\Users\garrahaj\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-08 08:08:24.9091357 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 2316 \??\C:\Users\garrahaj\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-08 08:08:24.9091609 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 2316 C:\Users\garrahaj\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-08 08:08:44.6979563 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 4044 \??\C:\Users\garrahaj\AppData\Local\Microsoft\OneDrive\26.129.0706.0004\FileSyncConfig.exe [2026-08-08 08:08:44.6979744 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 4044 C:\Users\garrahaj\AppData\Local\Microsoft\OneDrive\26.129.0706.0004\FileSyncConfig.exe [2026-08-08 08:08:46.1756235 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 13108 \??\C:\Users\garrahaj\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-08 08:08:46.1756354 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 13108 C:\Users\garrahaj\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-08 08:08:51.3784289 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 1284 \??\C:\Users\garrahaj\AppData\Local\Microsoft\OneDrive\26.129.0706.0004\OneDrive.Sync.Service.exe [2026-08-08 08:08:51.3784392 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 1284 C:\Users\garrahaj\AppData\Local\Microsoft\OneDrive\26.129.0706.0004\OneDrive.Sync.Service.exe [2026-08-08 08:09:28.6485493 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 5456 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:09:28.6485860 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 5456 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:09:44.0036626 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 10836 \??\C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-08 08:09:44.0036922 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 10836 C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-08 08:09:45.7151942 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 10572 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:09:45.7152315 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 10572 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:09:45.9368050 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 9824 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:09:45.9368159 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 9824 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:09:45.9384053 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 5392 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:09:45.9384160 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 5392 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:09:46.1520450 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 9552 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:09:46.1520634 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 9552 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:09:46.2635493 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 8808 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:09:46.2635599 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 8808 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:09:48.3411915 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 8432 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:09:48.3412012 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 8432 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:09:48.8137295 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 9676 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:09:48.8137404 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 9676 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:10:00.9472229 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 7748 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:10:00.9472469 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 7748 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:10:04.5690956 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 1412 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:10:04.5692241 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 1412 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:10:04.7195456 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 12736 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:10:04.7196873 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 12736 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:10:12.7303278 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 3860 \??\C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-08 08:10:12.7304664 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 3860 C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-08 08:10:14.6195973 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 3856 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:10:14.6196201 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 3856 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:10:14.6981559 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 9464 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:10:14.6981877 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 9464 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:10:23.4073241 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 2424 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:10:23.4073362 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 2424 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:10:30.1443898 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 7400 \??\C:\Windows\splwow64.exe [2026-08-08 08:10:30.1444206 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 7400 C:\Windows\splwow64.exe [2026-08-08 08:10:30.9229659 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 12256 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:10:30.9229770 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 12256 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:10:46.0653013 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 5760 \??\C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-08 08:10:46.0653374 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 5760 C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-08 08:10:49.4386115 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 5548 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-08 08:10:49.4386232 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 5548 C:\IMC\MPS\IMCMobil.exe [2026-08-08 08:10:51.3653482 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 4800 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-08 08:10:51.3653604 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 4800 C:\IMC\MPS\iIMCMobl.exe [2026-08-08 08:11:01.1896237 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 10872 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-08 08:11:01.1896508 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 10872 C:\Windows\SysWOW64\WerFault.exe [2026-08-08 08:11:09.4100502 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 7928 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-08 08:11:09.4100787 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 7928 C:\Windows\SysWOW64\WerFault.exe [2026-08-08 08:11:14.5738386 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 1560 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-08 08:11:14.5738704 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 1560 C:\Windows\SysWOW64\WerFault.exe [2026-08-08 08:11:39.0288874 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 11712 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-08 08:11:39.0289172 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 11712 C:\Windows\SysWOW64\WerFault.exe [2026-08-08 08:11:50.2507303 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 7112 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-08 08:11:50.2507549 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 7112 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-08 08:12:39.3188588 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 928 \SystemRoot\System32\Conhost.exe [2026-08-08 08:12:39.3188861 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 928 \SystemRoot\System32\Conhost.exe [2026-08-08 08:14:47.8878653 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 1736 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:14:47.8879130 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 1736 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:32:21.1281147 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 9560 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 08:32:21.1281575 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 9560 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 08:32:21.4222529 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 9956 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 08:32:21.4222630 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 9956 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 08:32:24.3569759 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 2384 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:32:24.3570000 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 2384 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:32:25.7851763 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 7940 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:32:25.7851889 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 7940 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:32:26.2679750 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 9116 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:32:26.2679855 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 9116 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:32:30.3643646 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 11884 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 08:32:30.3643814 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 11884 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 08:32:30.3658288 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 12464 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 08:32:30.3658376 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 12464 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 08:32:30.3706362 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 1428 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 08:32:30.3706478 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 1428 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 08:32:30.3792439 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 1072 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 08:32:30.3792560 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 1072 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 08:32:35.3181119 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 11192 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:32:35.3181361 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 11192 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:32:38.3719059 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 812 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:32:38.3719154 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 812 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:32:38.4253903 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 12984 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:32:38.4254024 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 12984 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:45:48.5334852 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 13584 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:45:48.5335400 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 13584 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:45:49.5016317 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 7888 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:45:49.5016423 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 7888 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:45:49.5751284 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 14264 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:45:49.5751382 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 14264 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:45:58.4727824 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 11968 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:45:58.4728101 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 11968 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:46:16.6013868 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 1456 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:46:16.6014122 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 1456 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:47:45.7508198 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 13676 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:47:45.7508484 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 13676 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:48:41.5430712 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 13596 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:48:41.5431013 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 13596 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:08.1875341 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 6472 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:08.1875760 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 6472 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:11.8371411 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 7488 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:11.8371559 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 7488 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:11.9272425 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 6260 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:11.9272535 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 6260 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:12.4852468 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 10820 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:12.4852578 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 10820 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:45.3927632 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 13556 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:45.3927861 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 13556 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:46.2826637 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 13904 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:46.2826831 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 13904 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:48.1045778 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 13476 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:48.1045907 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 13476 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:48.1058811 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 12828 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:48.1058905 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 12828 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:49.0356595 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 5532 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:49.0356707 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 5532 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:50.2168492 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 6316 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:50.2168598 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 6316 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:53.2220001 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 13496 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:53.2220149 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 13496 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:53.8403854 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 14368 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:53.8403986 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 14368 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:53.8444780 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 14376 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:49:53.8444904 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 14376 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:50:25.8322584 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 14868 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:50:25.8323142 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 14868 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:53:39.5886290 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 2356 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:53:39.5886604 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 2356 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:53:48.8115569 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 15112 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:53:48.8115829 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 15112 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:53:55.6562967 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 9824 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:53:55.6563220 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 9824 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:44.3801280 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 13796 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:44.3803015 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 13796 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:44.6020722 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 13592 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:44.6020824 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 13592 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.1209643 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 6324 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.1209758 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 6324 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.1226568 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 13400 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.1226660 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 13400 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.1238554 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 2060 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.1238644 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 2060 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.7725699 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 3648 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.7725805 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 3648 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.7739369 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 13496 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.7739451 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 13496 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.7749880 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 13432 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.7749960 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 13432 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.7789316 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 14264 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.7789406 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 14264 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.7830825 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 2356 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.7830920 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 2356 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.8006245 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 14344 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.8006350 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 14344 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.8032362 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 14884 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.8032466 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 14884 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.8044831 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 11464 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:52.8044938 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 11464 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:54.2639291 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 14168 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:54.2639422 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 14168 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:54.3016730 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 9084 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:54.3016956 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 9084 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:56.4872291 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 15568 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:56.4872615 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 15568 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:56.9539080 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 15608 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:56.9539240 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 15608 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:56.9616176 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 15616 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:56.9616273 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 15616 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:57.7613644 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 15852 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:57.7613759 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 15852 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:57.7785625 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 15872 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:57.7785738 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 15872 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:57.7825857 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 15880 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:57.7825967 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 15880 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:57.8655389 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 15924 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:57.8655515 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 15924 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:57.8881721 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 15952 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:57.8881824 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 15952 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:57.9472429 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 15964 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:57.9472530 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 15964 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:57.9509650 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 15996 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:57.9509763 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 15996 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:57.9945312 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 16056 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:57.9945417 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 16056 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:58.0478772 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 16100 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:54:58.0478891 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 16100 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:00.1954045 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 16424 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:00.1954170 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 16424 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:00.1967086 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 16432 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:00.1967183 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 16432 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:00.1987880 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 16452 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:00.1987981 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 16452 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:00.2127627 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 16488 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:00.2127738 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 16488 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:00.2140640 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 16496 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:00.2140731 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 16496 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:00.2206762 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 16500 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:00.2206894 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 16500 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:00.2379939 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 16528 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:00.2380058 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 16528 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:00.2396381 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 16536 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:00.2396477 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 16536 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:00.3973727 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 16572 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:00.3973844 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 16572 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:00.4386904 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 16584 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:00.4387008 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 16584 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:02.9080334 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 17232 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:02.9080435 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 17232 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:03.0260126 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 17256 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:03.0261411 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 17256 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:06.6318441 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 17364 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:06.6318687 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 17364 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:19.1511832 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 17612 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:55:19.1512063 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 17612 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:58:19.0191743 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 17268 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:58:19.0192074 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 17268 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:59:14.1341326 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 120 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 08:59:14.1341641 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 120 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:02:00.8793764 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 16960 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:02:00.8794096 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 16960 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:02:02.3668262 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 17920 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:02:02.3668354 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 17920 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:05:57.3118017 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 11256 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:05:57.3118399 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 11256 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:05:57.3183665 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 18300 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:05:57.3183758 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 18300 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:06:01.7332333 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 13556 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:06:01.7332435 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 13556 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:06:04.5112460 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 14536 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:06:04.5112775 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 14536 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:06:04.7005171 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 9536 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:06:04.7005286 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 9536 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:06:04.9426233 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 18176 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:06:04.9426345 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 18176 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:06:12.3931589 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 15484 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:06:12.3931682 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 15484 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:06:18.2024385 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 15628 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:06:18.2024636 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 15628 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:06:18.4243994 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 16588 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:06:18.4244128 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 16588 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:06:58.3759495 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 17096 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:06:58.3759779 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 17096 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:06:59.2793284 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 14280 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:06:59.2793394 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 14280 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:07:05.9569171 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 16972 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:07:05.9569746 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 16972 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:07:17.4126962 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 17544 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:07:17.4127207 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 17544 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:08:08.3869036 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 8232 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:08:08.3870933 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 8232 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:11:58.6048821 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 2040 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:11:58.6049199 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 2040 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:11:59.5950336 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 3560 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:11:59.5950437 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 3560 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:12:00.2214452 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 17180 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:12:00.2214565 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 17180 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:20:34.7421114 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 14724 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:20:34.7421497 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 14724 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:20:35.7613706 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 13724 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:20:35.7613805 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 13724 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:20:47.8050118 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 17208 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:20:47.8050376 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 17208 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:20:48.2227640 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 15872 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:20:48.2227748 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 15872 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:20:53.1561051 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 16556 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:20:53.1561154 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 16556 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:20:54.8595668 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 18048 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:20:54.8595910 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 18048 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:20:55.2331460 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 18420 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:20:55.2331580 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 18420 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:20:57.1206599 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 18340 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:20:57.1206709 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 18340 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:21:01.2048712 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 15984 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:21:01.2048827 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 15984 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:21:03.7957080 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 2120 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:21:03.7957184 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 2120 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:21:36.1343921 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 14572 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:21:36.1344202 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 14572 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:21:36.6672521 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 12088 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:21:36.6672624 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 12088 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:21:36.7251884 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 5592 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:21:36.7251995 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 5592 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:23:41.2873650 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 14044 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:23:41.2873978 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 14044 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:23:55.2152431 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 1356 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:23:55.2152652 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 1356 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:24:21.1073858 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 13888 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:24:21.1074095 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 13888 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:24:47.6150805 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 12416 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:24:47.6151065 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 12416 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:25:10.1925922 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 15160 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:25:10.1926153 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 15160 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:25:38.2996796 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 18372 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:25:38.2997023 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 18372 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:34:41.5473100 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 11132 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:34:41.5473510 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 11132 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:34:42.2455979 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 17108 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:34:42.2456094 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 17108 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:34:56.1895257 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 14916 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 09:34:56.1895669 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 14916 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 10:07:50.7994652 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 18944 \SystemRoot\System32\Conhost.exe [2026-08-08 10:07:50.7994954 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 18944 \SystemRoot\System32\Conhost.exe [2026-08-08 10:56:02.9310313 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 23320 \SystemRoot\System32\Conhost.exe [2026-08-08 10:56:02.9310600 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 23320 \SystemRoot\System32\Conhost.exe [2026-08-08 10:56:02.9761553 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 23056 \SystemRoot\System32\Conhost.exe [2026-08-08 10:56:02.9761658 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 23056 \SystemRoot\System32\Conhost.exe [2026-08-08 11:48:47.2087916 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 22852 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 11:48:47.2088333 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 22852 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 11:49:16.4377211 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 26608 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-08 11:49:16.4377461 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 26608 C:\IMC\RMS\TRAFFIC.EXE [2026-08-08 12:07:50.8219642 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 26024 \SystemRoot\System32\Conhost.exe [2026-08-08 12:07:50.8220057 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 26024 \SystemRoot\System32\Conhost.exe [2026-08-08 12:44:40.3187737 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 30032 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:44:40.3188108 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 30032 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:45:02.8748127 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 30428 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:45:02.8748372 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 30428 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:45:05.9728070 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 30572 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:45:05.9728316 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 30572 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:49:09.4506201 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 29300 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:49:09.4506489 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 29300 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:49:10.8798288 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 28908 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:49:10.8798435 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 28908 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:50:18.3330103 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 29016 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:50:18.3330328 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 29016 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:50:26.6617061 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 20628 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:50:26.6617302 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 20628 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:50:26.8911838 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 29552 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:50:26.8911959 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 29552 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:50:32.3144371 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 30656 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:50:32.3144483 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 30656 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:52:46.0354991 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 29628 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:52:46.0355401 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 29628 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:52:49.2542884 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 29252 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:52:49.2543836 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 29252 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:52:49.4611624 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 20156 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 12:52:49.4611856 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 20156 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:37:25.5428314 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 32840 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:37:25.5428690 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 32840 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:37:26.6901301 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 32980 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:37:26.6901429 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 32980 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:37:35.8615829 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 33412 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:37:35.8616226 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 33412 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:37:35.8994564 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 33436 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:37:35.8994676 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 33436 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:37:39.1916234 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 33752 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:37:39.1916380 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 33752 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:37:39.4359766 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 22860 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:37:39.4359893 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 22860 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:37:39.8594387 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 33028 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:37:39.8594505 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 33028 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:40:45.8163844 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 33164 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:40:45.8164156 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 33164 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:40:48.8623098 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 33736 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:40:48.8623216 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 33736 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:40:49.0676501 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 33124 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:40:49.0676609 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 33124 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:43:08.2153128 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 33612 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:43:08.2153452 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 33612 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:44:00.8105216 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 32600 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:44:00.8105447 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 32600 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:44:01.0472329 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 32752 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:44:01.0472437 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 32752 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:47:40.7382896 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 31824 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:47:40.7383269 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 31824 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:47:43.5316729 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 31792 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:47:43.5316838 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 31792 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:48:26.3198139 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 34552 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:48:26.3198656 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 34552 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:48:31.2062117 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 34732 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:48:31.2062236 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 34732 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:53:52.4186845 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 30200 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:53:52.4187086 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 30200 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:53:57.3186429 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 30116 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:53:57.3186678 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 30116 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:53:57.5259193 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 32772 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 13:53:57.5259304 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 32772 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:07:51.0285640 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 34808 \SystemRoot\System32\Conhost.exe [2026-08-08 14:07:51.0286026 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 34808 \SystemRoot\System32\Conhost.exe [2026-08-08 14:11:14.6295514 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 35376 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:11:14.6295832 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 35376 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:11:15.7063416 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 35776 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:11:15.7063520 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 35776 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:11:26.9654083 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 34988 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:11:26.9654296 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 34988 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:11:27.0277130 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 35496 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:11:27.0277243 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 35496 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:17:33.9663710 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 30200 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:17:33.9664025 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 30200 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:17:34.6915954 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 32252 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:17:34.6916292 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 32252 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:17:49.7379524 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 35660 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:17:49.7379734 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 35660 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:18:05.0459532 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 33896 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:18:05.0481561 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 33896 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:18:05.2859485 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 35220 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:18:05.2859577 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 35220 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:18:45.7206301 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 36224 \??\C:\Windows\system32\SnippingTool.exe [2026-08-08 14:18:45.7206529 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 36224 C:\Windows\system32\SnippingTool.exe [2026-08-08 14:20:06.0913519 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 33220 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:20:06.0913925 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 33220 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:24:09.9656823 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 36324 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:24:09.9657155 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 36324 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:43:02.0829635 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 36296 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-08 14:43:02.0830005 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 36296 C:\IMC\RMS\TRAFFIC.EXE [2026-08-08 14:54:36.4754107 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 35416 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 14:54:36.4754470 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 35416 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 15:11:04.2355473 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 39180 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 15:11:04.2355862 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 39180 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 15:11:05.2023178 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 39488 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 15:11:05.2023421 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 39488 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 15:11:11.0550496 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 39716 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 15:11:11.0550654 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 39716 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 15:11:31.3916620 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 35204 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 15:11:31.3916866 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 35204 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 15:20:36.0230491 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 39296 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-08 15:20:36.0230884 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 39296 C:\IMC\RMS\TRAFFIC.EXE [2026-08-08 15:49:04.6567474 UTC-04:00] [8364:9368] [fcmonitor 475 warning] session 2 not init [2026-08-08 15:49:04.6708605 UTC-04:00] [8364:9368] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-08 15:49:04.6709274 UTC-04:00] [8364:9368] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-08 15:49:04.6709849 UTC-04:00] [8364:9368] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-08 15:49:04.6710396 UTC-04:00] [8364:9368] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-08 15:49:04.6710942 UTC-04:00] [8364:9368] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-08 15:49:04.6711477 UTC-04:00] [8364:9368] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-08 15:49:04.6711578 UTC-04:00] [8364:9368] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-08 15:49:04.6711609 UTC-04:00] [8364:9368] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-08 15:49:04.6711630 UTC-04:00] [8364:9368] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-08 15:49:04.6711651 UTC-04:00] [8364:9368] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-08 15:49:04.6711670 UTC-04:00] [8364:9368] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-08 15:49:04.6711687 UTC-04:00] [8364:9368] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-08 15:49:05.6021491 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 39184 \??\C:\Windows\system32\LogonUI.exe [2026-08-08 15:49:05.6021765 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 39184 C:\Windows\system32\LogonUI.exe [2026-08-08 15:49:05.9000358 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 33988 \??\C:\Windows\System32\LogonUI.exe [2026-08-08 15:49:05.9000490 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 33988 C:\Windows\System32\LogonUI.exe [2026-08-08 15:49:05.9012309 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 41508 \??\C:\Windows\System32\dwm.exe [2026-08-08 15:49:05.9012394 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 41508 C:\Windows\System32\dwm.exe [2026-08-08 15:49:06.5555337 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 40856 \??\C:\Windows\System32\fontdrvhost.exe [2026-08-08 15:49:06.5555460 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 40856 C:\Windows\System32\fontdrvhost.exe [2026-08-08 15:49:07.0297842 UTC-04:00] [8364:8964] [fcmonitor 90 debug] session change reason=3 session=2 [2026-08-08 15:49:07.0299431 UTC-04:00] [8364:8964] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-08 15:49:07.0472034 UTC-04:00] [8364:8964] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-08 15:49:07.0473075 UTC-04:00] [8364:8964] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-08 15:49:07.0473904 UTC-04:00] [8364:8964] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-08 15:49:07.0474709 UTC-04:00] [8364:8964] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-08 15:49:07.0475502 UTC-04:00] [8364:8964] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-08 15:49:07.0476288 UTC-04:00] [8364:8964] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-08 15:49:07.0476405 UTC-04:00] [8364:8964] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-08 15:49:07.0476503 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-08 15:49:07.0476582 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-08 15:49:07.0476647 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-08 15:49:07.0476697 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-08 15:49:07.0476735 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-08 15:49:07.0476771 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-08 15:49:07.0476915 UTC-04:00] [8364:8964] [fcmonitor 16 debug] add session=2 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-08 15:49:07.0477073 UTC-04:00] [8364:8964] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-08 15:49:07.0477110 UTC-04:00] [8364:8964] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-08 15:49:07.0480392 UTC-04:00] [8364:8964] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 191665627136 499455451136 191665627136 [2026-08-08 15:49:07.0480468 UTC-04:00] [8364:8964] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-08 15:49:13.3008165 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 12332 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 15:49:13.3008268 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 12332 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 15:49:13.3646333 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 4404 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 15:49:13.3646445 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 4404 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 15:49:14.0017519 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 6448 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 15:49:14.0017617 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 6448 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 15:49:14.0527690 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 13652 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 15:49:14.0527804 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 13652 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-08 15:49:14.8215935 UTC-04:00] [8364:8964] [fcmonitor 90 debug] session change reason=6 session=1 [2026-08-08 15:49:14.8216206 UTC-04:00] [8364:8964] [fcmonitor 117 debug] add reason=6 session=1 ret=1 [2026-08-08 15:49:15.2305226 UTC-04:00] [8364:8964] [fcmonitor 90 debug] session change reason=2 session=1 [2026-08-08 15:49:15.2305293 UTC-04:00] [8364:8964] [fcmonitor 117 debug] add reason=2 session=1 ret=1 [2026-08-08 15:49:15.2947352 UTC-04:00] [8364:8964] [fcmonitor 90 debug] session change reason=4 session=2 [2026-08-08 15:49:15.2947453 UTC-04:00] [8364:8964] [fcmonitor 117 debug] add reason=4 session=2 ret=1 [2026-08-08 15:49:15.4044466 UTC-04:00] [8364:8964] [fcmonitor 90 debug] session change reason=1 session=2 [2026-08-08 15:49:15.4045760 UTC-04:00] [8364:8964] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-08 15:49:15.4159541 UTC-04:00] [8364:8964] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-08 15:49:15.4161022 UTC-04:00] [8364:8964] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-08 15:49:15.4161815 UTC-04:00] [8364:8964] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-08 15:49:15.4162576 UTC-04:00] [8364:8964] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-08 15:49:15.4163334 UTC-04:00] [8364:8964] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-08 15:49:15.4164067 UTC-04:00] [8364:8964] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-08 15:49:15.4164160 UTC-04:00] [8364:8964] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-08 15:49:15.4164220 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-08 15:49:15.4164262 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-08 15:49:15.4164292 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-08 15:49:15.4164321 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-08 15:49:15.4164350 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-08 15:49:15.4164380 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-08 15:49:15.4164489 UTC-04:00] [8364:8964] [fcmonitor 16 debug] add session=2 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-08 15:49:15.4164613 UTC-04:00] [8364:8964] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-08 15:49:15.4164644 UTC-04:00] [8364:8964] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-08 15:49:15.4166459 UTC-04:00] [8364:8964] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 191676141568 499455451136 191676141568 [2026-08-08 15:49:15.4166525 UTC-04:00] [8364:8964] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-08 23:05:42.6564698 UTC-04:00] [8364:8964] [fcmonitor 90 debug] session change reason=5 session=2 [2026-08-08 23:05:42.6566601 UTC-04:00] [8364:8964] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-08 23:05:42.6652544 UTC-04:00] [8364:8964] [fcmonitor 228 info] parsed to C:\Users\cloughec\Desktop\ for session 2 [2026-08-08 23:05:42.6674967 UTC-04:00] [8364:8964] [fcmonitor 228 info] parsed to C:\Users\cloughec\Documents\ for session 2 [2026-08-08 23:05:42.6712865 UTC-04:00] [8364:8964] [fcmonitor 228 info] parsed to C:\Users\cloughec\Favorites\ for session 2 [2026-08-08 23:05:42.6746998 UTC-04:00] [8364:8964] [fcmonitor 228 info] parsed to C:\Users\cloughec\Music\ for session 2 [2026-08-08 23:05:42.6772733 UTC-04:00] [8364:8964] [fcmonitor 228 info] parsed to C:\Users\cloughec\Pictures\ for session 2 [2026-08-08 23:05:42.6820948 UTC-04:00] [8364:8964] [fcmonitor 228 info] parsed to C:\Users\cloughec\Videos\ for session 2 [2026-08-08 23:05:42.6821170 UTC-04:00] [8364:8964] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-08 23:05:42.6821242 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\cloughec\desktop\ [2026-08-08 23:05:42.6821294 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\cloughec\documents\ [2026-08-08 23:05:42.6821328 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\cloughec\favorites\ [2026-08-08 23:05:42.6821361 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\cloughec\music\ [2026-08-08 23:05:42.6821392 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\cloughec\pictures\ [2026-08-08 23:05:42.6821425 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\cloughec\videos\ [2026-08-08 23:05:42.6822027 UTC-04:00] [8364:8964] [fcmonitor 16 debug] add session=2 ret=0 str=C:\Users\cloughec\Desktop\;C:\Users\cloughec\Documents\;C:\Users\cloughec\Favorites\;C:\Users\cloughec\Music\;C:\Users\cloughec\Pictures\;C:\Users\cloughec\Videos\ [2026-08-08 23:05:42.6822205 UTC-04:00] [8364:8964] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-08 23:05:42.6822241 UTC-04:00] [8364:8964] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-08 23:05:42.6826735 UTC-04:00] [8364:8964] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 191759798272 499455451136 191759798272 [2026-08-08 23:05:42.6826937 UTC-04:00] [8364:8964] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-08 23:05:43.3860936 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 2396 \SystemRoot\System32\Conhost.exe [2026-08-08 23:05:43.3861070 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 2396 \SystemRoot\System32\Conhost.exe [2026-08-08 23:05:44.8198498 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 11416 \??\C:\Windows\system32\igfxEM.exe [2026-08-08 23:05:44.8198738 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 11416 C:\Windows\system32\igfxEM.exe [2026-08-08 23:05:45.0985759 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 41420 \??\C:\Windows\system32\igfxHK.exe [2026-08-08 23:05:45.0985875 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 41420 C:\Windows\system32\igfxHK.exe [2026-08-08 23:05:45.1405597 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 33508 \??\C:\Windows\system32\userinit.exe [2026-08-08 23:05:45.1405707 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 33508 C:\Windows\system32\userinit.exe [2026-08-08 23:05:45.3082526 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 3920 \??\C:\Windows\Explorer.EXE [2026-08-08 23:05:45.3082614 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 3920 C:\Windows\Explorer.EXE [2026-08-08 23:05:45.4103009 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 6276 \??\C:\Windows\system32\igfxTray.exe [2026-08-08 23:05:45.4103100 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 6276 C:\Windows\system32\igfxTray.exe [2026-08-08 23:06:11.7167229 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 12824 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-08 23:06:11.7167482 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 12824 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-08 23:06:13.0446503 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 2256 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-08 23:06:13.0446610 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 2256 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-08 23:06:14.0198513 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 1080 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.251.21\MicrosoftEdgeUpdateCore.exe [2026-08-08 23:06:14.0198616 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 1080 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.251.21\MicrosoftEdgeUpdateCore.exe [2026-08-08 23:06:14.5666825 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 10884 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-08 23:06:14.5666953 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 10884 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-08 23:06:14.9927936 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 40516 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:14.9928152 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 40516 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:15.2492935 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 1496 \??\C:\Windows\System32\wlrmdr.exe [2026-08-08 23:06:15.2493025 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 1496 C:\Windows\System32\wlrmdr.exe [2026-08-08 23:06:16.0788582 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 14512 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-08 23:06:16.0788675 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 14512 C:\Windows\SysWOW64\runonce.exe [2026-08-08 23:06:16.4679719 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 39820 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-08 23:06:16.4679838 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 39820 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-08 23:06:17.4678561 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 40588 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-08 23:06:17.4678678 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 40588 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-08 23:06:17.8339791 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 38992 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-08 23:06:17.8339898 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 38992 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-08 23:06:24.3993436 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42004 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:24.3993557 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42004 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:29.1366654 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42708 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:29.1366889 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42708 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:29.1377132 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42716 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:29.1377201 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42716 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:36.3967185 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42588 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:36.3967614 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42588 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:36.5241184 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42524 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:36.5241342 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42524 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:40.6044555 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 12304 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:40.6044690 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 12304 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:40.6253801 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42260 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:40.6253946 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42260 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:40.6308213 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42244 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:40.6308350 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42244 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:40.6334815 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42264 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:40.6334913 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42264 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:40.6509495 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42144 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:40.6509653 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42144 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:06:42.6384155 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 8912 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-08 23:06:42.6384248 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 8912 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-08 23:06:42.8035579 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 2848 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-08 23:06:42.8035674 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 2848 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-08 23:06:56.0425381 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42928 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-08 23:06:56.0425724 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42928 C:\IMC\MPS\IMCMobil.exe [2026-08-08 23:06:57.0259168 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 41840 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-08 23:06:57.0259284 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 41840 C:\IMC\MPS\iIMCMobl.exe [2026-08-08 23:07:06.8122449 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 2292 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:07:06.8122827 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 2292 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:07:07.8126474 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42284 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-08 23:07:07.8126580 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42284 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-08 23:07:30.0125767 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 2540 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-08 23:07:30.0126145 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 2540 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-08 23:07:37.5994124 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 1452 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-08 23:07:37.5994326 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 1452 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-08 23:07:37.6078211 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 7632 \??\C:\Windows\splwow64.exe [2026-08-08 23:07:37.6078308 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 7632 C:\Windows\splwow64.exe [2026-08-08 23:07:38.3463199 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 39212 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:07:38.3463305 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 39212 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:07:46.7966583 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 41028 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:07:46.7966819 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 41028 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:07:46.8448781 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 7048 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:07:46.8448883 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 7048 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:07:47.1561902 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 39516 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:07:47.1562011 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 39516 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:07:47.1574317 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 1088 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:07:47.1574415 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 1088 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:07:47.3149907 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 3564 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:07:47.3150005 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 3564 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:07:50.1588377 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 1996 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:07:50.1588482 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 1996 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:07:52.7025331 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 7048 \??\C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-08 23:07:52.7025433 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 7048 C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-08 23:07:55.2035738 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 39556 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:07:55.2035996 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 39556 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:07:57.2582194 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 41368 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:07:57.2582292 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 41368 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:08:00.1747853 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 2760 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:08:00.1747980 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 2760 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:08:02.8303444 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42616 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:08:02.8303561 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42616 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:08:02.8437996 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 41184 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:08:02.8438104 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 41184 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:08:07.3224177 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 10276 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:08:07.3224450 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 10276 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:08:07.6479419 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 10480 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:08:07.6479537 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 10480 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:08:14.5118464 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42904 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\26.134.0713.0004\FileSyncConfig.exe [2026-08-08 23:08:14.5118572 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42904 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\26.134.0713.0004\FileSyncConfig.exe [2026-08-08 23:08:16.5888987 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 10436 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-08 23:08:16.5889226 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 10436 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-08 23:08:23.7453145 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 1824 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\26.134.0713.0004\OneDrive.Sync.Service.exe [2026-08-08 23:08:23.7453260 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 1824 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\26.134.0713.0004\OneDrive.Sync.Service.exe [2026-08-08 23:08:32.1527782 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 21584 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:08:32.1528067 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 21584 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:08:36.8153421 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 1540 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:08:36.8153664 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 1540 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:09:21.5436152 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 12936 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\Install\{C34583C5-55D0-40DE-9851-0FD866EEECD5}\MicrosoftEdgeUpdateSetup_X [2026-08-08 23:09:21.5436565 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 12936 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\Install\{C34583C5-55D0-40DE-9851-0FD866EEECD5}\MicrosoftEdgeUpdateSetup_X [2026-08-08 23:09:21.6095083 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 4840 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-08 23:09:21.6095282 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 4840 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-08 23:09:22.5435600 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 11008 \??\C:\Users\cloughec\AppData\Local\Temp\EU9719.tmp\MicrosoftEdgeUpdate.exe [2026-08-08 23:09:22.5435723 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 11008 C:\Users\cloughec\AppData\Local\Temp\EU9719.tmp\MicrosoftEdgeUpdate.exe [2026-08-08 23:09:23.1528989 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 2376 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-08 23:09:23.1529104 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 2376 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-08 23:09:23.2623514 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 37356 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.251.23\MicrosoftEdgeUpdateComRegisterShell64.exe [2026-08-08 23:09:23.2623652 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 37356 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.251.23\MicrosoftEdgeUpdateComRegisterShell64.exe [2026-08-08 23:09:23.5283436 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 8080 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.251.23\MicrosoftEdgeUpdateComRegisterShell64.exe [2026-08-08 23:09:23.5283575 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 8080 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.251.23\MicrosoftEdgeUpdateComRegisterShell64.exe [2026-08-08 23:09:23.6684965 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 7536 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.251.23\MicrosoftEdgeUpdateComRegisterShell64.exe [2026-08-08 23:09:23.6685076 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 7536 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.251.23\MicrosoftEdgeUpdateComRegisterShell64.exe [2026-08-08 23:09:24.4667210 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42776 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-08 23:09:24.4667326 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42776 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-08 23:09:37.8920945 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 12740 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:09:37.8921192 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 12740 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:12:14.3808778 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 39308 \SystemRoot\System32\Conhost.exe [2026-08-08 23:12:14.3809087 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 39308 \SystemRoot\System32\Conhost.exe [2026-08-08 23:12:48.5149298 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 12708 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:12:48.5149577 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 12708 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:14:46.3527782 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 7848 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\Install\{8EF39404-7323-4517-892F-CE06E7073F4D}\MicrosoftEdge_X64_151.0.41 [2026-08-08 23:14:46.3528194 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 7848 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\Install\{8EF39404-7323-4517-892F-CE06E7073F4D}\MicrosoftEdge_X64_151.0.41 [2026-08-08 23:14:46.7433555 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 43792 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\Install\{8EF39404-7323-4517-892F-CE06E7073F4D}\EDGEMITMP_0B937.tmp\setup. [2026-08-08 23:14:46.7433689 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 43792 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\Install\{8EF39404-7323-4517-892F-CE06E7073F4D}\EDGEMITMP_0B937.tmp\setup. [2026-08-08 23:16:04.7265205 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 43168 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-08 23:16:04.7265531 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 43168 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-08 23:31:42.9593370 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 40240 \??\C:\Windows\winhlp32.exe [2026-08-08 23:31:42.9593917 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 40240 C:\Windows\winhlp32.exe [2026-08-08 23:31:44.1321959 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 40156 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:31:44.1322114 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 40156 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:31:44.2000257 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 44012 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:31:44.2000878 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 44012 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-08 23:53:11.4973526 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 12232 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-08 23:53:11.4973874 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 12232 C:\IMC\RMS\TRAFFIC.EXE [2026-08-09 00:10:39.7901177 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 45324 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:10:39.7901571 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 45324 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:10:40.7766592 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 45472 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:10:40.7766753 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 45472 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:10:50.2602304 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 44384 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:10:50.2602539 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 44384 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:10:50.3064574 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 44512 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:10:50.3064685 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 44512 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:48:55.0058777 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 47484 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:48:55.0059148 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 47484 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:49:07.7106376 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 47804 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:49:07.7106834 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 47804 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:49:07.7534577 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 47940 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:49:07.7535717 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 47940 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:59:28.6466742 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 48116 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:59:28.6467248 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 48116 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:59:39.5654724 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 47068 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:59:39.5654967 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 47068 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:59:39.6387550 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 47732 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:59:39.6387659 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 47732 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:59:41.1749720 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 48012 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:59:41.1749832 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 48012 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:59:41.4454215 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 47624 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 00:59:41.4454334 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 47624 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 01:00:04.2451110 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 47268 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 01:00:04.2451729 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 47268 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 01:00:04.4446022 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 49088 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 01:00:04.4446177 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 49088 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 01:00:07.4474740 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 47124 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 01:00:07.4475008 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 47124 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 01:12:14.3850542 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 49584 \SystemRoot\System32\Conhost.exe [2026-08-09 01:12:14.3850863 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 49584 \SystemRoot\System32\Conhost.exe [2026-08-09 01:22:44.9806083 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 47904 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-09 01:22:44.9806409 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 47904 C:\IMC\RMS\TRAFFIC.EXE [2026-08-09 01:43:39.0513519 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 52112 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-09 01:43:39.0513934 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 52112 C:\IMC\RMS\TRAFFIC.EXE [2026-08-09 02:22:55.6341403 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 52764 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 02:22:55.6344119 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 52764 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 02:33:18.2356335 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 54708 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-09 02:33:18.2356762 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 54708 C:\IMC\RMS\TRAFFIC.EXE [2026-08-09 02:47:30.9243090 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 55552 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 02:47:30.9243573 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 55552 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 02:47:38.2585440 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 55316 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 02:47:38.2585904 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 55316 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 02:47:38.3044220 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 55436 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 02:47:38.3044365 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 55436 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 02:47:39.6853264 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 50628 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 02:47:39.6853413 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 50628 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 02:47:42.2938107 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 55864 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 02:47:42.2938224 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 55864 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 02:47:42.3247292 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 55404 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 02:47:42.3247440 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 55404 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 02:47:52.5971971 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 50200 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 02:47:52.5972287 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 50200 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 02:47:57.5604422 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 39420 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 02:47:57.5604738 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 39420 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 02:47:57.6071284 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 54584 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 02:47:57.6071393 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 54584 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 03:12:14.3943579 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 57892 \SystemRoot\System32\Conhost.exe [2026-08-09 03:12:14.3943971 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 57892 \SystemRoot\System32\Conhost.exe [2026-08-09 04:49:43.9082490 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 63880 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 04:49:43.9082917 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 63880 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 04:49:53.9860725 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 64140 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 04:49:53.9860978 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 64140 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 04:49:54.0410614 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 64172 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 04:49:54.0410734 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 64172 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 05:12:14.3918698 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 63180 \SystemRoot\System32\Conhost.exe [2026-08-09 05:12:14.3920867 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 63180 \SystemRoot\System32\Conhost.exe [2026-08-09 05:42:45.0087579 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 60264 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 05:42:45.0087986 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 60264 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 05:42:50.8217294 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 66980 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 05:42:50.8217457 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 66980 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 05:42:50.8644867 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 62388 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 05:42:50.8644985 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 62388 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 06:42:25.6655736 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 65744 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-09 06:42:25.6656268 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 65744 C:\Windows\SysWOW64\WerFault.exe [2026-08-09 06:42:28.9284784 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 54380 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-09 06:42:28.9284915 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 54380 C:\Windows\SysWOW64\WerFault.exe [2026-08-09 06:42:28.9600451 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 70840 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-09 06:42:28.9600596 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 70840 C:\Windows\SysWOW64\WerFault.exe [2026-08-09 06:42:32.8070267 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 52388 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 06:42:32.8070369 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 52388 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 06:42:33.0067496 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 67264 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 06:42:33.0067611 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 67264 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 06:42:35.6674895 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 3028 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-09 06:42:35.6675120 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 3028 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-09 06:42:35.7142948 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 4904 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-09 06:42:35.7143115 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 4904 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-09 06:42:36.0943731 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42184 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 06:42:36.0943835 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42184 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 06:42:36.0954697 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42220 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 06:42:36.0954779 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42220 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 06:42:36.1285112 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42800 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 06:42:36.1285206 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42800 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 06:42:36.1300658 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42336 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 06:42:36.1300754 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42336 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 06:42:53.9983238 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 9596 \??\C:\Windows\System32\LogonUI.exe [2026-08-09 06:42:53.9983470 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 9596 C:\Windows\System32\LogonUI.exe [2026-08-09 06:42:58.2885285 UTC-04:00] [8364:8964] [fcmonitor 90 debug] session change reason=6 session=2 [2026-08-09 06:42:58.2885546 UTC-04:00] [8364:8964] [fcmonitor 117 debug] add reason=6 session=2 ret=1 [2026-08-09 06:42:58.6859261 UTC-04:00] [8364:8964] [fcmonitor 90 debug] session change reason=2 session=2 [2026-08-09 06:42:58.6859349 UTC-04:00] [8364:8964] [fcmonitor 117 debug] add reason=2 session=2 ret=1 [2026-08-09 06:42:58.7911432 UTC-04:00] [8364:9368] [fcmonitor 475 warning] session 3 not init [2026-08-09 06:42:58.8071950 UTC-04:00] [8364:9368] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-09 06:42:58.8072871 UTC-04:00] [8364:9368] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 3 [2026-08-09 06:42:58.8073684 UTC-04:00] [8364:9368] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 3 [2026-08-09 06:42:58.8074475 UTC-04:00] [8364:9368] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 3 [2026-08-09 06:42:58.8075242 UTC-04:00] [8364:9368] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 3 [2026-08-09 06:42:58.8075984 UTC-04:00] [8364:9368] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 3 [2026-08-09 06:42:58.8076129 UTC-04:00] [8364:9368] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-09 06:42:58.8076172 UTC-04:00] [8364:9368] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-09 06:42:58.8076201 UTC-04:00] [8364:9368] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-09 06:42:58.8076225 UTC-04:00] [8364:9368] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-09 06:42:58.8076249 UTC-04:00] [8364:9368] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-09 06:42:58.8076276 UTC-04:00] [8364:9368] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-09 06:42:59.0082979 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 7108 \??\C:\Windows\system32\LogonUI.exe [2026-08-09 06:42:59.0083072 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 7108 C:\Windows\system32\LogonUI.exe [2026-08-09 06:42:59.0320702 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 36344 \??\C:\Windows\system32\dwm.exe [2026-08-09 06:42:59.0320843 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 36344 C:\Windows\system32\dwm.exe [2026-08-09 06:42:59.1833353 UTC-04:00] [8364:8964] [fcmonitor 90 debug] session change reason=1 session=3 [2026-08-09 06:42:59.1834845 UTC-04:00] [8364:8964] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-09 06:42:59.1984426 UTC-04:00] [8364:8964] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-09 06:42:59.1985271 UTC-04:00] [8364:8964] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 3 [2026-08-09 06:42:59.1986041 UTC-04:00] [8364:8964] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 3 [2026-08-09 06:42:59.1986816 UTC-04:00] [8364:8964] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 3 [2026-08-09 06:42:59.1987580 UTC-04:00] [8364:8964] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 3 [2026-08-09 06:42:59.1988364 UTC-04:00] [8364:8964] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 3 [2026-08-09 06:42:59.1988454 UTC-04:00] [8364:8964] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 done [2026-08-09 06:42:59.1988505 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-09 06:42:59.1988544 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-09 06:42:59.1988576 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-09 06:42:59.1988604 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-09 06:42:59.1988633 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-09 06:42:59.1988661 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-09 06:42:59.1988773 UTC-04:00] [8364:8964] [fcmonitor 16 debug] add session=3 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-09 06:42:59.1988897 UTC-04:00] [8364:8964] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-09 06:42:59.1988925 UTC-04:00] [8364:8964] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-09 06:42:59.1990561 UTC-04:00] [8364:8964] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 190853382144 499455451136 190853382144 [2026-08-09 06:42:59.1990624 UTC-04:00] [8364:8964] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-09 06:42:59.4158166 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 1044 \??\C:\Windows\system32\fontdrvhost.exe [2026-08-09 06:42:59.4158267 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 1044 C:\Windows\system32\fontdrvhost.exe [2026-08-09 06:49:30.7991495 UTC-04:00] [8364:8964] [fcmonitor 90 debug] session change reason=5 session=3 [2026-08-09 06:49:30.7993668 UTC-04:00] [8364:8964] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-09 06:49:30.8132135 UTC-04:00] [8364:8964] [fcmonitor 228 info] parsed to C:\Users\collinsa\Desktop\ for session 3 [2026-08-09 06:49:30.8184657 UTC-04:00] [8364:8964] [fcmonitor 228 info] parsed to C:\Users\collinsa\Documents\ for session 3 [2026-08-09 06:49:30.8222439 UTC-04:00] [8364:8964] [fcmonitor 228 info] parsed to C:\Users\collinsa\Favorites\ for session 3 [2026-08-09 06:49:30.8248903 UTC-04:00] [8364:8964] [fcmonitor 228 info] parsed to C:\Users\collinsa\Music\ for session 3 [2026-08-09 06:49:30.8270709 UTC-04:00] [8364:8964] [fcmonitor 228 info] parsed to C:\Users\collinsa\Pictures\ for session 3 [2026-08-09 06:49:30.8293583 UTC-04:00] [8364:8964] [fcmonitor 228 info] parsed to C:\Users\collinsa\Videos\ for session 3 [2026-08-09 06:49:30.8293742 UTC-04:00] [8364:8964] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 done [2026-08-09 06:49:30.8293813 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\collinsa\desktop\ [2026-08-09 06:49:30.8293871 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\collinsa\documents\ [2026-08-09 06:49:30.8293911 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\collinsa\favorites\ [2026-08-09 06:49:30.8293948 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\collinsa\music\ [2026-08-09 06:49:30.8293984 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\collinsa\pictures\ [2026-08-09 06:49:30.8294020 UTC-04:00] [8364:8964] [fcmonitor 435 info] add c:\users\collinsa\videos\ [2026-08-09 06:49:30.8294160 UTC-04:00] [8364:8964] [fcmonitor 16 debug] add session=3 ret=0 str=C:\Users\collinsa\Desktop\;C:\Users\collinsa\Documents\;C:\Users\collinsa\Favorites\;C:\Users\collinsa\Music\;C:\Users\collinsa\Pictures\;C:\Users\collinsa\Videos\ [2026-08-09 06:49:30.8294428 UTC-04:00] [8364:8964] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-09 06:49:30.8294479 UTC-04:00] [8364:8964] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-09 06:49:30.8296828 UTC-04:00] [8364:8964] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 190851829760 499455451136 190851829760 [2026-08-09 06:49:30.8297045 UTC-04:00] [8364:8964] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-09 06:49:31.7559952 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42528 \SystemRoot\System32\Conhost.exe [2026-08-09 06:49:31.7560115 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42528 \SystemRoot\System32\Conhost.exe [2026-08-09 06:49:32.2956641 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 69640 \??\C:\Windows\system32\igfxEM.exe [2026-08-09 06:49:32.2956796 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 69640 C:\Windows\system32\igfxEM.exe [2026-08-09 06:49:32.3766342 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 10400 \??\C:\Windows\system32\igfxHK.exe [2026-08-09 06:49:32.3766453 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 10400 C:\Windows\system32\igfxHK.exe [2026-08-09 06:49:32.4339081 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 1536 \??\C:\Windows\system32\igfxTray.exe [2026-08-09 06:49:32.4339225 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 1536 C:\Windows\system32\igfxTray.exe [2026-08-09 06:49:33.3051086 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 3092 \??\C:\Windows\system32\userinit.exe [2026-08-09 06:49:33.3051208 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 3092 C:\Windows\system32\userinit.exe [2026-08-09 06:49:33.4167624 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 71480 \??\C:\Windows\Explorer.EXE [2026-08-09 06:49:33.4167753 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 71480 C:\Windows\Explorer.EXE [2026-08-09 06:49:58.5010769 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 68656 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-09 06:49:58.5011004 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 68656 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-09 06:49:59.8610851 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 4724 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-09 06:49:59.8610998 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 4724 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-09 06:50:01.6764741 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 71856 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-09 06:50:01.6764842 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 71856 C:\Windows\SysWOW64\runonce.exe [2026-08-09 06:50:01.8638709 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 71980 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-09 06:50:01.8638817 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 71980 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-09 06:50:02.5941647 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 72080 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-09 06:50:02.5941750 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 72080 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-09 06:50:03.3812214 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 72144 \??\C:\Windows\system32\wlrmdr.exe [2026-08-09 06:50:03.3812346 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 72144 C:\Windows\system32\wlrmdr.exe [2026-08-09 06:50:05.8928925 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 72492 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-09 06:50:05.8929158 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 72492 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-09 06:50:06.9895034 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 72680 \??\C:\Windows\System32\cmd.exe [2026-08-09 06:50:06.9895164 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 72680 C:\Windows\System32\cmd.exe [2026-08-09 06:50:07.1115676 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 14296 \SystemRoot\System32\Conhost.exe [2026-08-09 06:50:07.1115782 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 14296 \SystemRoot\System32\Conhost.exe [2026-08-09 06:50:07.3456202 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 70428 \??\C:\Windows\System32\cmd.exe [2026-08-09 06:50:07.3456305 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 70428 C:\Windows\System32\cmd.exe [2026-08-09 06:50:07.5446652 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 71928 \SystemRoot\System32\Conhost.exe [2026-08-09 06:50:07.5446753 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 71928 \SystemRoot\System32\Conhost.exe [2026-08-09 06:50:07.9705510 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42232 \??\C:\Windows\System32\cmd.exe [2026-08-09 06:50:07.9705616 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42232 C:\Windows\System32\cmd.exe [2026-08-09 06:50:08.1749681 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 72204 \SystemRoot\System32\Conhost.exe [2026-08-09 06:50:08.1749797 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 72204 \SystemRoot\System32\Conhost.exe [2026-08-09 06:50:32.4918232 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 72652 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-09 06:50:32.4918569 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 72652 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-09 06:50:34.9915189 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 7448 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-09 06:50:34.9915446 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 7448 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-09 06:50:52.3414220 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 71180 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\26.134.0713.0004\FileSyncConfig.exe [2026-08-09 06:50:52.3414472 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 71180 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\26.134.0713.0004\FileSyncConfig.exe [2026-08-09 06:50:54.9351875 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 72300 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-09 06:50:54.9352098 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 72300 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-09 06:51:00.7681409 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42684 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\26.134.0713.0004\OneDrive.Sync.Service.exe [2026-08-09 06:51:00.7681519 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42684 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\26.134.0713.0004\OneDrive.Sync.Service.exe [2026-08-09 07:07:40.8389656 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42248 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-09 07:07:40.8390209 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42248 C:\IMC\MPS\IMCMobil.exe [2026-08-09 07:07:41.5966436 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 64340 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-09 07:07:41.5966512 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 64340 C:\IMC\MPS\iIMCMobl.exe [2026-08-09 07:08:04.5925114 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 68644 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-09 07:08:04.5925301 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 68644 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-09 07:08:32.6007997 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 4184 \??\C:\Windows\splwow64.exe [2026-08-09 07:08:32.6008243 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 4184 C:\Windows\splwow64.exe [2026-08-09 07:09:46.8569950 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 32536 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:46.8570232 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 32536 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:46.9028917 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42588 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:46.9029045 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42588 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:47.0447025 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42184 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:47.0447137 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42184 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:47.2404254 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 6448 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:47.2404350 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 6448 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:47.2422336 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42724 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:47.2422427 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42724 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:47.5544141 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 3308 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:47.5544238 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 3308 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:47.8103268 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 71360 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:47.8103380 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 71360 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:47.8119098 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42568 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:47.8119195 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42568 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:48.1444943 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 41452 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:48.1445051 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 41452 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:48.2497801 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 8088 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:48.2497998 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 8088 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:51.8514840 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 54300 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:51.8514951 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 54300 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:09:53.8398368 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 71948 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-09 07:09:53.8398474 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 71948 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-09 07:09:53.8979720 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 66076 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-09 07:09:53.8979841 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 66076 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-09 07:10:01.7574303 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 66884 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:10:01.7574634 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 66884 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:10:17.2523127 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 73104 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:10:17.2523371 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 73104 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:10:18.3956288 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 73272 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:10:18.3956408 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 73272 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:10:18.8185325 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 73320 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:10:18.8185476 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 73320 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:10:47.5470223 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 42128 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:10:47.5470411 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 42128 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:11:15.6603324 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 73184 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:11:15.6603641 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 73184 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:11:21.3221892 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 72804 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:11:21.3222007 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 72804 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:11:23.8754339 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 71968 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:11:23.8754446 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 71968 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:11:28.1124407 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 17212 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:11:28.1124667 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 17212 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:11:28.1139562 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 7828 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:11:28.1139664 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 7828 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:11:47.2124719 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 304 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:11:47.2124962 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 304 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:12:14.3932433 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 13080 \SystemRoot\System32\Conhost.exe [2026-08-09 07:12:14.3932826 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 13080 \SystemRoot\System32\Conhost.exe [2026-08-09 07:12:47.9068290 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 2480 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:12:47.9068545 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 2480 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:14:50.2788248 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 65608 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:14:50.2788596 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 65608 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:15:40.8494729 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 8184 \??\C:\IMC\RMS\RECORDS.EXE [2026-08-09 07:15:40.8494908 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 8184 C:\IMC\RMS\RECORDS.EXE [2026-08-09 07:16:28.5099693 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 71220 \??\C:\IMC\RMS\RECORDS.EXE [2026-08-09 07:16:28.5100051 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 71220 C:\IMC\RMS\RECORDS.EXE [2026-08-09 07:19:48.9334980 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 57068 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:19:48.9335282 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 57068 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:20:01.1121159 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 17660 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:20:01.1121387 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 17660 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:20:01.1527166 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 73484 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:20:01.1527288 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 73484 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:20:06.1024662 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 53672 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:20:06.1024900 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 53672 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:20:06.3480949 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 65372 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 07:20:06.3481076 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 65372 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 08:51:30.0288524 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 79316 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 08:51:30.0288989 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 79316 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 08:51:32.3296629 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 79588 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 08:51:32.3296741 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 79588 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 08:51:33.1593900 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 79640 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 08:51:33.1594012 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 79640 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 08:51:38.6985421 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 79856 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 08:51:38.6985690 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 79856 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 09:06:43.2256845 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 79384 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 09:06:43.2257250 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 79384 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 09:06:43.5487079 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 79608 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 09:06:43.5487198 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 79608 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 09:12:14.7828047 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 80864 \SystemRoot\System32\Conhost.exe [2026-08-09 09:12:14.7828388 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 80864 \SystemRoot\System32\Conhost.exe [2026-08-09 11:12:14.9643296 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 86504 \SystemRoot\System32\Conhost.exe [2026-08-09 11:12:14.9643612 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 86504 \SystemRoot\System32\Conhost.exe [2026-08-09 12:00:43.2548606 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 91932 \SystemRoot\System32\Conhost.exe [2026-08-09 12:00:43.2549062 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 91932 \SystemRoot\System32\Conhost.exe [2026-08-09 12:00:43.2565415 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 91360 \SystemRoot\System32\Conhost.exe [2026-08-09 12:00:43.2565514 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 91360 \SystemRoot\System32\Conhost.exe [2026-08-09 13:12:14.9942659 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 96040 \SystemRoot\System32\Conhost.exe [2026-08-09 13:12:14.9943006 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 96040 \SystemRoot\System32\Conhost.exe [2026-08-09 15:12:15.1051475 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 103644 \SystemRoot\System32\Conhost.exe [2026-08-09 15:12:15.1052009 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 103644 \SystemRoot\System32\Conhost.exe [2026-08-09 16:22:26.6673385 UTC-04:00] [8364:9368] [fcmonitor 332 debug] proc cache add 107976 \??\C:\Windows\system32\LogonUI.exe [2026-08-09 16:22:26.6673923 UTC-04:00] [8364:9368] [fcmonitor 99 info] add pid 107976 C:\Windows\system32\LogonUI.exe [2026-08-09 16:22:36.7853317 UTC-04:00] [8364:8964] [fcmonitor 90 debug] session change reason=6 session=3 [2026-08-09 16:22:36.7853921 UTC-04:00] [8364:8964] [fcmonitor 117 debug] add reason=6 session=3 ret=1 [2026-08-09 16:25:11.6804610 UTC-04:00] [3516:1008] [fcmonitor 1249 info] (Time Zone: Eastern Standard Time) (Sun Jun 30 22:28:59 2024, 121s) 2026-08-09 16:25:11.665 type: 0x10f size: 512 memory: 0x0000000000000000 [2026-08-09 16:25:11.6830916 UTC-04:00] [3516:1008] [fcmonitor 78 debug] ems_serial FCTEMS8821002497 [2026-08-09 16:25:11.6872015 UTC-04:00] [3516:1008] [fcmonitor 85 debug] fct_serial FCT8000515779876 [2026-08-09 16:25:11.6876774 UTC-04:00] [3516:1008] [fcmonitor 94 debug] fct_uid 4EF5549DB1674A63BE848553987D4AEE [2026-08-09 16:25:11.6878063 UTC-04:00] [3516:1008] [fcmonitor 103 debug] vdom default [2026-08-09 16:25:11.6878449 UTC-04:00] [3516:1008] [fcmonitor 843 info] InitCryptAlg [2026-08-09 16:25:11.7489202 UTC-04:00] [3516:1008] [fcmonitor 41 info] before LoadSettings [2026-08-09 16:25:11.7497347 UTC-04:00] [3516:1008] [fcmonitor 45 info] folder C:\Users\%USERNAME%\Desktop\ [2026-08-09 16:25:11.7497670 UTC-04:00] [3516:1008] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-09 16:25:11.7696962 UTC-04:00] [3516:1008] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-09 16:25:11.7699241 UTC-04:00] [3516:1008] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 0 [2026-08-09 16:25:11.7700966 UTC-04:00] [3516:1008] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 0 [2026-08-09 16:25:11.7702635 UTC-04:00] [3516:1008] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 0 [2026-08-09 16:25:11.7704349 UTC-04:00] [3516:1008] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 0 [2026-08-09 16:25:11.7705970 UTC-04:00] [3516:1008] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 0 [2026-08-09 16:25:11.7706280 UTC-04:00] [3516:1008] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 done [2026-08-09 16:25:11.7706456 UTC-04:00] [3516:1008] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-09 16:25:11.7706770 UTC-04:00] [3516:1008] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-09 16:25:11.7706891 UTC-04:00] [3516:1008] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-09 16:25:11.7707002 UTC-04:00] [3516:1008] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-09 16:25:11.7707111 UTC-04:00] [3516:1008] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-09 16:25:11.7707207 UTC-04:00] [3516:1008] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-09 16:25:11.7707836 UTC-04:00] [3516:1008] [fcmonitor 16 debug] add session=0 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-09 16:25:11.7968295 UTC-04:00] [3516:1008] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-09 16:25:11.7968464 UTC-04:00] [3516:1008] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-09 16:25:11.8008400 UTC-04:00] [3516:1008] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 190489530368 499455451136 190489530368 [2026-08-09 16:25:11.8008654 UTC-04:00] [3516:1008] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-09 16:25:12.0754652 UTC-04:00] [3516:1008] [fcmonitor 232 info] queue lock 0x38c cleanevent 0x390 [2026-08-09 16:25:12.1145017 UTC-04:00] [3516:1008] [fcmonitor 245 info] init succeed [2026-08-09 16:25:12.1145166 UTC-04:00] [3516:1008] [fcmonitor 438 info] reading cache [2026-08-09 16:25:12.2853754 UTC-04:00] [3516:1008] [fcmonitor 440 info] getting all proc [2026-08-09 16:25:12.3465852 UTC-04:00] [3516:1008] [fcmonitor 159 debug] getting all proc [2026-08-09 16:25:12.3529634 UTC-04:00] [3516:1008] [fcmonitor 192 warning] GetAllProcTree can't find module 4 System [2026-08-09 16:25:12.4831406 UTC-04:00] [3516:1008] [fcmonitor 192 warning] GetAllProcTree can't find module 100 Registry [2026-08-09 16:25:13.4076224 UTC-04:00] [3516:1008] [fcmonitor 192 warning] GetAllProcTree can't find module 2344 Memory Compression [2026-08-09 16:25:14.4275262 UTC-04:00] [3516:1008] [fcmonitor 192 warning] GetAllProcTree can't find module 7124 mofcomp.exe [2026-08-09 16:25:14.4341029 UTC-04:00] [3516:1008] [fcmonitor 192 warning] GetAllProcTree can't find module 764 conhost.exe [2026-08-09 16:25:14.5276310 UTC-04:00] [3516:1008] [fcmonitor 286 debug] getting all proc finished 127 0 [2026-08-09 16:25:14.5276491 UTC-04:00] [3516:1008] [fcmonitor 442 info] finish [2026-08-09 16:25:14.5279092 UTC-04:00] [3516:1008] [fcmonitor 267 info] heap p 0x0000027A841BDED0 [2026-08-09 16:25:14.5280154 UTC-04:00] [3516:1008] [fcmonitor 267 info] heap p 0x0000027A841F86D0 [2026-08-09 16:25:14.5281091 UTC-04:00] [3516:1008] [fcmonitor 267 info] heap p 0x0000027A841E1CB0 [2026-08-09 16:25:14.5282109 UTC-04:00] [3516:1008] [fcmonitor 267 info] heap p 0x0000027A841DCC80 [2026-08-09 16:25:14.5283007 UTC-04:00] [3516:1008] [fcmonitor 267 info] heap p 0x0000027A841DD150 [2026-08-09 16:25:14.5283967 UTC-04:00] [3516:1008] [fcmonitor 267 info] heap p 0x0000027A841DE490 [2026-08-09 16:25:14.5285133 UTC-04:00] [3516:1008] [fcmonitor 267 info] heap p 0x0000027A841DD620 [2026-08-09 16:25:14.5286115 UTC-04:00] [3516:1008] [fcmonitor 267 info] heap p 0x0000027A841DDAF0 [2026-08-09 16:25:14.5398788 UTC-04:00] [3516:7828] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-09 16:25:14.5401025 UTC-04:00] [3516:7832] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-09 16:25:14.5403081 UTC-04:00] [3516:7836] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-09 16:25:14.5405167 UTC-04:00] [3516:7840] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-09 16:25:14.5407561 UTC-04:00] [3516:7844] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-09 16:25:14.5409634 UTC-04:00] [3516:7848] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-09 16:25:14.5411624 UTC-04:00] [3516:7852] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-09 16:25:14.5413662 UTC-04:00] [3516:7856] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-09 16:25:26.7250886 UTC-04:00] [3516:7824] [fcmonitor 475 warning] session 1 not init [2026-08-09 16:25:26.7439297 UTC-04:00] [3516:7824] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-09 16:25:26.7441602 UTC-04:00] [3516:7824] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 1 [2026-08-09 16:25:26.7515988 UTC-04:00] [3516:7824] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 1 [2026-08-09 16:25:26.7518563 UTC-04:00] [3516:7824] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 1 [2026-08-09 16:25:26.7520507 UTC-04:00] [3516:7824] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 1 [2026-08-09 16:25:26.7522334 UTC-04:00] [3516:7824] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 1 [2026-08-09 16:25:26.7522676 UTC-04:00] [3516:7824] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-09 16:25:26.7522802 UTC-04:00] [3516:7824] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-09 16:25:26.7522878 UTC-04:00] [3516:7824] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-09 16:25:26.7522951 UTC-04:00] [3516:7824] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-09 16:25:26.7523025 UTC-04:00] [3516:7824] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-09 16:25:26.7523096 UTC-04:00] [3516:7824] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-09 22:45:21.1153930 UTC-04:00] [3516:7616] [fcmonitor 90 debug] session change reason=5 session=1 [2026-08-09 22:45:21.1155739 UTC-04:00] [3516:7616] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-09 22:45:21.1237627 UTC-04:00] [3516:7616] [fcmonitor 228 info] parsed to C:\Users\cloughec\Desktop\ for session 1 [2026-08-09 22:45:21.1259570 UTC-04:00] [3516:7616] [fcmonitor 228 info] parsed to C:\Users\cloughec\Documents\ for session 1 [2026-08-09 22:45:21.1279747 UTC-04:00] [3516:7616] [fcmonitor 228 info] parsed to C:\Users\cloughec\Favorites\ for session 1 [2026-08-09 22:45:21.1305281 UTC-04:00] [3516:7616] [fcmonitor 228 info] parsed to C:\Users\cloughec\Music\ for session 1 [2026-08-09 22:45:21.1327799 UTC-04:00] [3516:7616] [fcmonitor 228 info] parsed to C:\Users\cloughec\Pictures\ for session 1 [2026-08-09 22:45:21.1356202 UTC-04:00] [3516:7616] [fcmonitor 228 info] parsed to C:\Users\cloughec\Videos\ for session 1 [2026-08-09 22:45:21.1356359 UTC-04:00] [3516:7616] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 done [2026-08-09 22:45:21.1356441 UTC-04:00] [3516:7616] [fcmonitor 435 info] add c:\users\cloughec\desktop\ [2026-08-09 22:45:21.1356478 UTC-04:00] [3516:7616] [fcmonitor 435 info] add c:\users\cloughec\documents\ [2026-08-09 22:45:21.1356504 UTC-04:00] [3516:7616] [fcmonitor 435 info] add c:\users\cloughec\favorites\ [2026-08-09 22:45:21.1356527 UTC-04:00] [3516:7616] [fcmonitor 435 info] add c:\users\cloughec\music\ [2026-08-09 22:45:21.1356550 UTC-04:00] [3516:7616] [fcmonitor 435 info] add c:\users\cloughec\pictures\ [2026-08-09 22:45:21.1356573 UTC-04:00] [3516:7616] [fcmonitor 435 info] add c:\users\cloughec\videos\ [2026-08-09 22:45:21.1356726 UTC-04:00] [3516:7616] [fcmonitor 16 debug] add session=1 ret=1 str=C:\Users\cloughec\Desktop\;C:\Users\cloughec\Documents\;C:\Users\cloughec\Favorites\;C:\Users\cloughec\Music\;C:\Users\cloughec\Pictures\;C:\Users\cloughec\Videos\ [2026-08-09 22:45:21.1356864 UTC-04:00] [3516:7616] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-09 22:45:21.1356898 UTC-04:00] [3516:7616] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-09 22:45:21.1366516 UTC-04:00] [3516:7616] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 190442090496 499455451136 190442090496 [2026-08-09 22:45:21.1366630 UTC-04:00] [3516:7616] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-09 22:45:23.0489222 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 31856 \SystemRoot\System32\Conhost.exe [2026-08-09 22:45:23.0489323 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 31856 \SystemRoot\System32\Conhost.exe [2026-08-09 22:45:24.4649241 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 32548 \??\C:\Windows\system32\igfxEM.exe [2026-08-09 22:45:24.4649340 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 32548 C:\Windows\system32\igfxEM.exe [2026-08-09 22:45:24.6669105 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 32496 \??\C:\Windows\system32\igfxHK.exe [2026-08-09 22:45:24.6669207 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 32496 C:\Windows\system32\igfxHK.exe [2026-08-09 22:45:25.0282634 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 32276 \??\C:\Windows\system32\igfxTray.exe [2026-08-09 22:45:25.0282739 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 32276 C:\Windows\system32\igfxTray.exe [2026-08-09 22:45:27.5435736 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 33088 \??\C:\Windows\system32\userinit.exe [2026-08-09 22:45:27.5435837 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 33088 C:\Windows\system32\userinit.exe [2026-08-09 22:45:28.2121201 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 33124 \??\C:\Windows\Explorer.EXE [2026-08-09 22:45:28.2121309 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 33124 C:\Windows\Explorer.EXE [2026-08-09 22:45:56.8875285 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 30408 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-09 22:45:56.8875543 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 30408 C:\IMC\MPS\IMCMobil.exe [2026-08-09 22:45:57.6218876 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 30828 \??\C:\Windows\system32\wlrmdr.exe [2026-08-09 22:45:57.6218985 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 30828 C:\Windows\system32\wlrmdr.exe [2026-08-09 22:45:58.3744688 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 30992 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:45:58.3744791 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 30992 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:45:59.5267515 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 31124 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-09 22:45:59.5267616 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 31124 C:\IMC\MPS\iIMCMobl.exe [2026-08-09 22:46:01.6402550 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 33396 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-09 22:46:01.6402770 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 33396 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-09 22:46:03.1683646 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 35188 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-09 22:46:03.1683761 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 35188 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-09 22:46:04.9962428 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 29468 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.251.23\MicrosoftEdgeUpdateCore.exe [2026-08-09 22:46:04.9962552 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 29468 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.251.23\MicrosoftEdgeUpdateCore.exe [2026-08-09 22:46:05.5469086 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 30436 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:05.5469183 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 30436 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:06.8398314 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 35592 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:06.8398426 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 35592 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:07.0745608 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 35616 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-09 22:46:07.0745705 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 35616 C:\Windows\SysWOW64\runonce.exe [2026-08-09 22:46:07.8408951 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 30824 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-09 22:46:07.8409048 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 30824 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-09 22:46:09.2927993 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 34808 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-09 22:46:09.2928121 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 34808 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-09 22:46:10.2857265 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 35304 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-09 22:46:10.2857369 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 35304 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-09 22:46:10.6679681 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 32352 \??\C:\Windows\System32\cmd.exe [2026-08-09 22:46:10.6679785 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 32352 C:\Windows\System32\cmd.exe [2026-08-09 22:46:10.8247799 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 34312 \SystemRoot\System32\Conhost.exe [2026-08-09 22:46:10.8247895 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 34312 \SystemRoot\System32\Conhost.exe [2026-08-09 22:46:11.9340841 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 30436 \??\C:\Windows\System32\cmd.exe [2026-08-09 22:46:11.9341057 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 30436 C:\Windows\System32\cmd.exe [2026-08-09 22:46:12.1550567 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 35368 \SystemRoot\System32\Conhost.exe [2026-08-09 22:46:12.1550666 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 35368 \SystemRoot\System32\Conhost.exe [2026-08-09 22:46:14.0425583 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 36076 \??\C:\Windows\System32\cmd.exe [2026-08-09 22:46:14.0425688 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 36076 C:\Windows\System32\cmd.exe [2026-08-09 22:46:14.3536489 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 36100 \SystemRoot\System32\Conhost.exe [2026-08-09 22:46:14.3536585 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 36100 \SystemRoot\System32\Conhost.exe [2026-08-09 22:46:15.0599735 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 36132 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:15.0599842 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 36132 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:15.0610425 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 36140 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:15.0610505 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 36140 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:15.2166696 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 36160 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:15.2166803 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 36160 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:15.2202890 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 36192 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:15.2202985 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 36192 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:15.2221001 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 36200 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:15.2221096 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 36200 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:15.3350886 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 36220 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:15.3350990 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 36220 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:15.3362060 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 36228 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:15.3362142 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 36228 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:16.5014840 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 36504 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:16.5014942 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 36504 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:20.6260925 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 35860 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-09 22:46:20.6261020 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 35860 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-09 22:46:22.6726453 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 32328 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-09 22:46:22.6726733 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 32328 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-09 22:46:22.9562694 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 35988 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:22.9562800 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 35988 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:24.9764490 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 31524 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-09 22:46:24.9764588 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 31524 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-09 22:46:25.7144736 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 30756 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-09 22:46:25.7144912 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 30756 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-09 22:46:25.9968031 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 32140 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-09 22:46:25.9968144 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 32140 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-09 22:46:37.9666234 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 35760 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:46:37.9666530 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 35760 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:47:09.7405475 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 32180 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:47:09.7405759 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 32180 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:47:10.8283675 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 30952 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:47:10.8283789 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 30952 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:47:22.8913130 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 30952 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:47:22.8913379 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 30952 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:47:22.9868395 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 31708 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:47:22.9868505 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 31708 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:47:26.9924989 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 35208 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:47:26.9925112 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 35208 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:47:28.7473111 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 29960 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:47:28.7473224 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 29960 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:48:07.4764509 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 30500 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-09 22:48:07.4764768 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 30500 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-09 22:48:07.9552032 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 31316 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:48:07.9552147 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 31316 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:48:39.2203201 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 34236 \??\C:\Windows\splwow64.exe [2026-08-09 22:48:39.2203394 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 34236 C:\Windows\splwow64.exe [2026-08-09 22:48:51.8482297 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 34252 \??\C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-09 22:48:51.8482533 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 34252 C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-09 22:51:22.6687700 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 31924 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 22:51:22.6688016 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 31924 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 23:15:12.2031741 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 31360 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-09 23:15:12.2033059 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 31360 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-09 23:35:32.1552472 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 34620 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 23:35:32.1552853 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 34620 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 23:35:41.2834020 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 37832 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 23:35:41.2834295 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 37832 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 23:35:43.7948852 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 37008 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 23:35:43.7948958 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 37008 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 23:35:43.8448113 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 30488 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 23:35:43.8448240 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 30488 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 23:35:47.8117823 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 38056 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 23:35:47.8117943 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 38056 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 23:35:48.0108110 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 38132 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 23:35:48.0108395 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 38132 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 23:48:30.4795711 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 28760 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 23:48:30.4796098 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 28760 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 23:48:32.5354630 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 34268 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-09 23:48:32.5354907 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 34268 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 00:03:44.8905059 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 38700 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\26.134.0713.0004\OneDrive.Sync.Service.exe [2026-08-10 00:03:44.8905440 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 38700 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\26.134.0713.0004\OneDrive.Sync.Service.exe [2026-08-10 00:25:53.5194875 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 41980 \SystemRoot\System32\Conhost.exe [2026-08-10 00:25:53.5195219 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 41980 \SystemRoot\System32\Conhost.exe [2026-08-10 01:53:13.8344274 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 46476 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 01:53:13.8344596 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 46476 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 01:53:21.2767900 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 47456 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 01:53:21.2768150 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 47456 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 01:53:21.3255822 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 47484 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 01:53:21.3255996 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 47484 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 01:53:22.5352626 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 47612 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 01:53:22.5352794 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 47612 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 01:53:22.7757671 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 47688 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 01:53:22.7757799 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 47688 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 02:14:40.0204673 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 48716 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 02:14:40.0205183 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 48716 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 02:14:51.8223515 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 47860 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 02:14:51.8223796 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 47860 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 02:14:51.8697042 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 48596 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 02:14:51.8697160 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 48596 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 02:14:56.2042422 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 46916 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 02:14:56.2043486 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 46916 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 02:14:56.4312771 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 48080 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 02:14:56.4312880 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 48080 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 02:25:53.6309796 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 48828 \SystemRoot\System32\Conhost.exe [2026-08-10 02:25:53.6310160 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 48828 \SystemRoot\System32\Conhost.exe [2026-08-10 04:25:54.0902272 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 56920 \SystemRoot\System32\Conhost.exe [2026-08-10 04:25:54.0902621 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 56920 \SystemRoot\System32\Conhost.exe [2026-08-10 06:25:54.1906296 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 64048 \SystemRoot\System32\Conhost.exe [2026-08-10 06:25:54.1906543 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 64048 \SystemRoot\System32\Conhost.exe [2026-08-10 06:52:25.6721071 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 66548 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 06:52:25.6721289 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 66548 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 06:52:25.8599403 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 28336 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 06:52:25.8599520 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 28336 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 06:52:26.1528557 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 48396 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 06:52:26.1528661 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 48396 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 06:52:26.1551493 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 47284 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 06:52:26.1551584 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 47284 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 06:52:26.2154273 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 48376 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 06:52:26.2154423 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 48376 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 06:52:26.3289901 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 48912 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 06:52:26.3290009 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 48912 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 06:52:28.2219975 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 64932 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-10 06:52:28.2220075 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 64932 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-10 06:52:28.2532525 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 35360 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-10 06:52:28.2532641 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 35360 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-10 06:52:30.2684428 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 35052 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-10 06:52:30.2684557 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 35052 C:\Windows\SysWOW64\WerFault.exe [2026-08-10 06:52:37.9489625 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 66060 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-10 06:52:37.9489907 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 66060 C:\Windows\SysWOW64\WerFault.exe [2026-08-10 06:52:45.4618439 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 36160 \??\C:\Windows\system32\LogonUI.exe [2026-08-10 06:52:45.4618666 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 36160 C:\Windows\system32\LogonUI.exe [2026-08-10 06:52:48.9719503 UTC-04:00] [3516:7616] [fcmonitor 90 debug] session change reason=6 session=1 [2026-08-10 06:52:48.9719746 UTC-04:00] [3516:7616] [fcmonitor 117 debug] add reason=6 session=1 ret=1 [2026-08-10 06:52:49.3128836 UTC-04:00] [3516:7616] [fcmonitor 90 debug] session change reason=2 session=1 [2026-08-10 06:52:49.3128905 UTC-04:00] [3516:7616] [fcmonitor 117 debug] add reason=2 session=1 ret=1 [2026-08-10 06:52:49.4365422 UTC-04:00] [3516:7824] [fcmonitor 475 warning] session 2 not init [2026-08-10 06:52:49.4703296 UTC-04:00] [3516:7824] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-10 06:52:49.4704097 UTC-04:00] [3516:7824] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-10 06:52:49.4704814 UTC-04:00] [3516:7824] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-10 06:52:49.4706361 UTC-04:00] [3516:7824] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-10 06:52:49.4714959 UTC-04:00] [3516:7824] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-10 06:52:49.4715741 UTC-04:00] [3516:7824] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-10 06:52:49.4715890 UTC-04:00] [3516:7824] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-10 06:52:49.4716083 UTC-04:00] [3516:7824] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-10 06:52:49.4716126 UTC-04:00] [3516:7824] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-10 06:52:49.4716153 UTC-04:00] [3516:7824] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-10 06:52:49.4716177 UTC-04:00] [3516:7824] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-10 06:52:49.4716201 UTC-04:00] [3516:7824] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-10 06:52:51.1565724 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 2936 \??\C:\Windows\system32\LogonUI.exe [2026-08-10 06:52:51.1565843 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 2936 C:\Windows\system32\LogonUI.exe [2026-08-10 06:52:51.1577546 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 47696 \??\C:\Windows\system32\dwm.exe [2026-08-10 06:52:51.1577630 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 47696 C:\Windows\system32\dwm.exe [2026-08-10 06:52:51.3269236 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 36144 \??\C:\Windows\system32\fontdrvhost.exe [2026-08-10 06:52:51.3269339 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 36144 C:\Windows\system32\fontdrvhost.exe [2026-08-10 06:52:51.3468810 UTC-04:00] [3516:7616] [fcmonitor 90 debug] session change reason=1 session=2 [2026-08-10 06:52:51.3470153 UTC-04:00] [3516:7616] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-10 06:52:51.3618356 UTC-04:00] [3516:7616] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-10 06:52:51.3619149 UTC-04:00] [3516:7616] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-10 06:52:51.3619837 UTC-04:00] [3516:7616] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-10 06:52:51.3620510 UTC-04:00] [3516:7616] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-10 06:52:51.3621187 UTC-04:00] [3516:7616] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-10 06:52:51.3621846 UTC-04:00] [3516:7616] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-10 06:52:51.3621937 UTC-04:00] [3516:7616] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-10 06:52:51.3621988 UTC-04:00] [3516:7616] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-10 06:52:51.3622026 UTC-04:00] [3516:7616] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-10 06:52:51.3622059 UTC-04:00] [3516:7616] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-10 06:52:51.3622085 UTC-04:00] [3516:7616] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-10 06:52:51.3622111 UTC-04:00] [3516:7616] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-10 06:52:51.3622135 UTC-04:00] [3516:7616] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-10 06:52:51.3622280 UTC-04:00] [3516:7616] [fcmonitor 16 debug] add session=2 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-10 06:52:51.3622409 UTC-04:00] [3516:7616] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-10 06:52:51.3622436 UTC-04:00] [3516:7616] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-10 06:52:51.3624158 UTC-04:00] [3516:7616] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 190471864320 499455451136 190471864320 [2026-08-10 06:52:51.3624224 UTC-04:00] [3516:7616] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-10 07:06:18.2212645 UTC-04:00] [3516:7616] [fcmonitor 90 debug] session change reason=5 session=2 [2026-08-10 07:06:18.2214479 UTC-04:00] [3516:7616] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-10 07:06:18.2365964 UTC-04:00] [3516:7616] [fcmonitor 228 info] parsed to C:\Users\mcculloc\Desktop\ for session 2 [2026-08-10 07:06:18.2385518 UTC-04:00] [3516:7616] [fcmonitor 228 info] parsed to C:\Users\mcculloc\Documents\ for session 2 [2026-08-10 07:06:18.2408314 UTC-04:00] [3516:7616] [fcmonitor 228 info] parsed to C:\Users\mcculloc\Favorites\ for session 2 [2026-08-10 07:06:18.2434163 UTC-04:00] [3516:7616] [fcmonitor 228 info] parsed to C:\Users\mcculloc\Music\ for session 2 [2026-08-10 07:06:18.2457133 UTC-04:00] [3516:7616] [fcmonitor 228 info] parsed to C:\Users\mcculloc\Pictures\ for session 2 [2026-08-10 07:06:18.2480678 UTC-04:00] [3516:7616] [fcmonitor 228 info] parsed to C:\Users\mcculloc\Videos\ for session 2 [2026-08-10 07:06:18.2480839 UTC-04:00] [3516:7616] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-10 07:06:18.2480899 UTC-04:00] [3516:7616] [fcmonitor 435 info] add c:\users\mcculloc\desktop\ [2026-08-10 07:06:18.2480936 UTC-04:00] [3516:7616] [fcmonitor 435 info] add c:\users\mcculloc\documents\ [2026-08-10 07:06:18.2480962 UTC-04:00] [3516:7616] [fcmonitor 435 info] add c:\users\mcculloc\favorites\ [2026-08-10 07:06:18.2480986 UTC-04:00] [3516:7616] [fcmonitor 435 info] add c:\users\mcculloc\music\ [2026-08-10 07:06:18.2481010 UTC-04:00] [3516:7616] [fcmonitor 435 info] add c:\users\mcculloc\pictures\ [2026-08-10 07:06:18.2481058 UTC-04:00] [3516:7616] [fcmonitor 435 info] add c:\users\mcculloc\videos\ [2026-08-10 07:06:18.2481166 UTC-04:00] [3516:7616] [fcmonitor 16 debug] add session=2 ret=0 str=C:\Users\mcculloc\Desktop\;C:\Users\mcculloc\Documents\;C:\Users\mcculloc\Favorites\;C:\Users\mcculloc\Music\;C:\Users\mcculloc\Pictures\;C:\Users\mcculloc\Videos\ [2026-08-10 07:06:18.2481310 UTC-04:00] [3516:7616] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-10 07:06:18.2481344 UTC-04:00] [3516:7616] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-10 07:06:18.2483165 UTC-04:00] [3516:7616] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 190469083136 499455451136 190469083136 [2026-08-10 07:06:18.2483315 UTC-04:00] [3516:7616] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-10 07:06:19.2397782 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 48616 \SystemRoot\System32\Conhost.exe [2026-08-10 07:06:19.2397919 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 48616 \SystemRoot\System32\Conhost.exe [2026-08-10 07:06:19.9433771 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 36644 \??\C:\Windows\system32\igfxEM.exe [2026-08-10 07:06:19.9433881 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 36644 C:\Windows\system32\igfxEM.exe [2026-08-10 07:06:20.0219343 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 33940 \??\C:\Windows\system32\userinit.exe [2026-08-10 07:06:20.0219463 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 33940 C:\Windows\system32\userinit.exe [2026-08-10 07:06:20.0951150 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 30956 \??\C:\Windows\system32\igfxHK.exe [2026-08-10 07:06:20.0951273 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 30956 C:\Windows\system32\igfxHK.exe [2026-08-10 07:06:20.1166552 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 65724 \??\C:\Windows\Explorer.EXE [2026-08-10 07:06:20.1166650 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 65724 C:\Windows\Explorer.EXE [2026-08-10 07:06:20.1927297 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 30980 \??\C:\Windows\system32\igfxTray.exe [2026-08-10 07:06:20.1927404 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 30980 C:\Windows\system32\igfxTray.exe [2026-08-10 07:06:41.4224422 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 68552 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-10 07:06:41.4224696 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 68552 C:\IMC\MPS\IMCMobil.exe [2026-08-10 07:06:42.2104333 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 35472 \??\C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-10 07:06:42.2104549 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 35472 C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-10 07:06:42.6070049 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 64688 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-10 07:06:42.6070148 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 64688 C:\IMC\MPS\iIMCMobl.exe [2026-08-10 07:06:43.0154153 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 58616 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:43.0154261 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 58616 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:43.1538996 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 33596 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:43.1539112 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 33596 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:43.9506409 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 41368 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:43.9506582 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 41368 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:44.4203814 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 35860 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:44.4203933 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 35860 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:44.4363656 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 32472 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:44.4363757 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 32472 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:44.9359522 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 68580 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:44.9359652 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 68580 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:45.3896457 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 50588 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:45.3896571 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 50588 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:45.3918495 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 67356 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:45.3918643 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 67356 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:45.4399083 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 68108 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:45.4399187 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 68108 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:46.0025237 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 68676 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:46.0025335 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 68676 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:48.3806062 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 69148 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-10 07:06:48.3806190 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 69148 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-10 07:06:49.6146032 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 69356 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:49.6146135 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 69356 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:50.0855007 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 69456 \??\C:\Windows\system32\wlrmdr.exe [2026-08-10 07:06:50.0855101 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 69456 C:\Windows\system32\wlrmdr.exe [2026-08-10 07:06:50.3440811 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 69500 \??\C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-10 07:06:50.3440921 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 69500 C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-10 07:06:51.4596012 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 68788 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:51.4596117 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 68788 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:06:52.2951361 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 68780 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-10 07:06:52.2954579 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 68780 C:\Windows\SysWOW64\runonce.exe [2026-08-10 07:06:52.8251615 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 30304 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-10 07:06:52.8251731 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 30304 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-10 07:06:53.5052435 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 69348 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-10 07:06:53.5052548 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 69348 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-10 07:06:56.3975663 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 66216 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-10 07:06:56.3975777 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 66216 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-10 07:06:58.1670597 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 39168 \??\C:\Windows\System32\cmd.exe [2026-08-10 07:06:58.1670741 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 39168 C:\Windows\System32\cmd.exe [2026-08-10 07:06:58.2300400 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 34332 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 07:06:58.2300515 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 34332 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 07:06:58.2339711 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 68972 \SystemRoot\System32\Conhost.exe [2026-08-10 07:06:58.2339852 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 68972 \SystemRoot\System32\Conhost.exe [2026-08-10 07:06:59.0961566 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 64764 \??\C:\Windows\System32\cmd.exe [2026-08-10 07:06:59.0961672 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 64764 C:\Windows\System32\cmd.exe [2026-08-10 07:06:59.3293696 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 69212 \SystemRoot\System32\Conhost.exe [2026-08-10 07:06:59.3293820 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 69212 \SystemRoot\System32\Conhost.exe [2026-08-10 07:07:00.3809367 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 39052 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 07:07:00.3809474 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 39052 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 07:07:00.4978285 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 39468 \??\C:\Windows\System32\cmd.exe [2026-08-10 07:07:00.4978417 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 39468 C:\Windows\System32\cmd.exe [2026-08-10 07:07:00.5981131 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 40188 \SystemRoot\System32\Conhost.exe [2026-08-10 07:07:00.5981238 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 40188 \SystemRoot\System32\Conhost.exe [2026-08-10 07:07:02.5777587 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 35736 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 07:07:02.5777852 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 35736 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 07:07:04.7607259 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 68296 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 07:07:04.7607354 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 68296 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 07:07:05.9432155 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 65764 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:07:05.9432268 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 65764 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:07:06.8539323 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 39348 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 07:07:06.8539419 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 39348 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 07:07:09.2707430 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 69648 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 07:07:09.2707538 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 69648 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 07:07:11.4125086 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 69780 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 07:07:11.4125196 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 69780 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 07:07:13.5740953 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 69988 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 07:07:13.5741174 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 69988 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 07:07:14.4277577 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 70064 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:07:14.4277688 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 70064 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:07:15.2648481 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 70264 \??\C:\Windows\splwow64.exe [2026-08-10 07:07:15.2648585 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 70264 C:\Windows\splwow64.exe [2026-08-10 07:07:26.6749232 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 69752 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:07:26.6749458 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 69752 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:07:27.1754392 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 69900 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:07:27.1754501 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 69900 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:07:39.3897065 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 70148 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-10 07:07:39.3897286 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 70148 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-10 07:07:39.4270720 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 70316 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-10 07:07:39.4270840 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 70316 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-10 07:07:44.9935692 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 34604 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:07:44.9935935 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 34604 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:07:54.8055925 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 33600 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-10 07:07:54.8056154 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 33600 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-10 07:07:56.4334106 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 70344 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:07:56.4334219 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 70344 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:08:00.5149697 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 70220 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:08:00.5149802 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 70220 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:08:04.9674133 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 66240 \??\C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-10 07:08:04.9674383 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 66240 C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-10 07:08:13.4581536 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 67908 \??\C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-10 07:08:13.4581760 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 67908 C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-10 07:08:30.4097251 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 69328 \??\C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\FileSyncConfig.exe [2026-08-10 07:08:30.4097512 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 69328 C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\FileSyncConfig.exe [2026-08-10 07:08:32.8972050 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 56532 \??\C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-10 07:08:32.8972276 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 56532 C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-10 07:08:38.8499110 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 69820 \??\C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\OneDrive.Sync.Service.exe [2026-08-10 07:08:38.8499234 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 69820 C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\OneDrive.Sync.Service.exe [2026-08-10 07:08:44.3826357 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 67508 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:08:44.3826608 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 67508 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:09:45.3902169 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 57820 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:09:45.3902404 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 57820 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:11:48.0477165 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 64868 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 07:11:48.0479177 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 64868 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 08:25:54.2804691 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 71428 \SystemRoot\System32\Conhost.exe [2026-08-10 08:25:54.2805058 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 71428 \SystemRoot\System32\Conhost.exe [2026-08-10 09:22:22.6038439 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 75756 \??\C:\IMC\RMS\RECORDS.EXE [2026-08-10 09:22:22.6038734 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 75756 C:\IMC\RMS\RECORDS.EXE [2026-08-10 10:25:54.3343116 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 79440 \SystemRoot\System32\Conhost.exe [2026-08-10 10:25:54.3343460 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 79440 \SystemRoot\System32\Conhost.exe [2026-08-10 11:01:28.3068416 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 82036 \SystemRoot\System32\Conhost.exe [2026-08-10 11:01:28.3068774 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 82036 \SystemRoot\System32\Conhost.exe [2026-08-10 11:01:50.5128308 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 83348 \SystemRoot\System32\Conhost.exe [2026-08-10 11:01:50.5128567 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 83348 \SystemRoot\System32\Conhost.exe [2026-08-10 11:01:50.5142474 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 83356 \SystemRoot\System32\Conhost.exe [2026-08-10 11:01:50.5142569 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 83356 \SystemRoot\System32\Conhost.exe [2026-08-10 12:25:54.5329684 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 86148 \SystemRoot\System32\Conhost.exe [2026-08-10 12:25:54.5330012 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 86148 \SystemRoot\System32\Conhost.exe [2026-08-10 14:25:54.7126949 UTC-04:00] [3516:7824] [fcmonitor 332 debug] proc cache add 94588 \SystemRoot\System32\Conhost.exe [2026-08-10 14:25:54.7127481 UTC-04:00] [3516:7824] [fcmonitor 99 info] add pid 94588 \SystemRoot\System32\Conhost.exe [2026-08-10 15:08:05.7115281 UTC-04:00] [8296:8300] [fcmonitor 1249 info] (Time Zone: Eastern Standard Time) (Sun Jun 30 22:28:59 2024, 82s) 2026-08-10 15:08:05.706 type: 0x10f size: 512 memory: 0x0000000000000000 [2026-08-10 15:08:05.7132453 UTC-04:00] [8296:8300] [fcmonitor 78 debug] ems_serial FCTEMS8821002497 [2026-08-10 15:08:05.7158744 UTC-04:00] [8296:8300] [fcmonitor 85 debug] fct_serial FCT8000515779876 [2026-08-10 15:08:05.7161653 UTC-04:00] [8296:8300] [fcmonitor 94 debug] fct_uid 4EF5549DB1674A63BE848553987D4AEE [2026-08-10 15:08:05.7162355 UTC-04:00] [8296:8300] [fcmonitor 103 debug] vdom default [2026-08-10 15:08:05.7162594 UTC-04:00] [8296:8300] [fcmonitor 843 info] InitCryptAlg [2026-08-10 15:08:05.7175548 UTC-04:00] [8296:8300] [fcmonitor 41 info] before LoadSettings [2026-08-10 15:08:05.7179606 UTC-04:00] [8296:8300] [fcmonitor 45 info] folder C:\Users\%USERNAME%\Desktop\ [2026-08-10 15:08:05.7179776 UTC-04:00] [8296:8300] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-10 15:08:05.7648759 UTC-04:00] [8296:8300] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-10 15:08:05.7650380 UTC-04:00] [8296:8300] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 0 [2026-08-10 15:08:05.7653324 UTC-04:00] [8296:8300] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 0 [2026-08-10 15:08:05.7654964 UTC-04:00] [8296:8300] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 0 [2026-08-10 15:08:05.7656668 UTC-04:00] [8296:8300] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 0 [2026-08-10 15:08:05.7658201 UTC-04:00] [8296:8300] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 0 [2026-08-10 15:08:05.7658530 UTC-04:00] [8296:8300] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 done [2026-08-10 15:08:05.7658714 UTC-04:00] [8296:8300] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-10 15:08:05.7659070 UTC-04:00] [8296:8300] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-10 15:08:05.7659222 UTC-04:00] [8296:8300] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-10 15:08:05.7659338 UTC-04:00] [8296:8300] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-10 15:08:05.7659430 UTC-04:00] [8296:8300] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-10 15:08:05.7659539 UTC-04:00] [8296:8300] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-10 15:08:05.7660157 UTC-04:00] [8296:8300] [fcmonitor 16 debug] add session=0 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-10 15:08:05.7955742 UTC-04:00] [8296:8300] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-10 15:08:05.7955867 UTC-04:00] [8296:8300] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-10 15:08:05.7964616 UTC-04:00] [8296:8300] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 190090489856 499455451136 190090489856 [2026-08-10 15:08:05.7964789 UTC-04:00] [8296:8300] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-10 15:08:06.0246916 UTC-04:00] [8296:8300] [fcmonitor 232 info] queue lock 0x390 cleanevent 0x39c [2026-08-10 15:08:06.0248671 UTC-04:00] [8296:8300] [fcmonitor 245 info] init succeed [2026-08-10 15:08:06.0248738 UTC-04:00] [8296:8300] [fcmonitor 438 info] reading cache [2026-08-10 15:08:06.1122305 UTC-04:00] [8296:8300] [fcmonitor 440 info] getting all proc [2026-08-10 15:08:06.1422031 UTC-04:00] [8296:8300] [fcmonitor 159 debug] getting all proc [2026-08-10 15:08:06.1473330 UTC-04:00] [8296:8300] [fcmonitor 192 warning] GetAllProcTree can't find module 4 System [2026-08-10 15:08:06.1838748 UTC-04:00] [8296:8300] [fcmonitor 192 warning] GetAllProcTree can't find module 100 Registry [2026-08-10 15:08:06.5346418 UTC-04:00] [8296:8300] [fcmonitor 192 warning] GetAllProcTree can't find module 2368 Memory Compression [2026-08-10 15:08:07.4493659 UTC-04:00] [8296:8300] [fcmonitor 192 warning] GetAllProcTree can't find module 8712 mofcomp.exe [2026-08-10 15:08:07.4918631 UTC-04:00] [8296:8300] [fcmonitor 286 debug] getting all proc finished 132 0 [2026-08-10 15:08:07.4918768 UTC-04:00] [8296:8300] [fcmonitor 442 info] finish [2026-08-10 15:08:07.4920756 UTC-04:00] [8296:8300] [fcmonitor 267 info] heap p 0x000001D83EC75AF0 [2026-08-10 15:08:07.4921568 UTC-04:00] [8296:8300] [fcmonitor 267 info] heap p 0x000001D83E5E3160 [2026-08-10 15:08:07.4922238 UTC-04:00] [8296:8300] [fcmonitor 267 info] heap p 0x000001D83E5E3610 [2026-08-10 15:08:07.4922980 UTC-04:00] [8296:8300] [fcmonitor 267 info] heap p 0x000001D83EC8CBF0 [2026-08-10 15:08:07.4923612 UTC-04:00] [8296:8300] [fcmonitor 267 info] heap p 0x000001D83EC8DA60 [2026-08-10 15:08:07.4924319 UTC-04:00] [8296:8300] [fcmonitor 267 info] heap p 0x000001D83EC8D0C0 [2026-08-10 15:08:07.4924993 UTC-04:00] [8296:8300] [fcmonitor 267 info] heap p 0x000001D83EC8D590 [2026-08-10 15:08:07.4925689 UTC-04:00] [8296:8300] [fcmonitor 267 info] heap p 0x000001D83EC8C720 [2026-08-10 15:08:07.5204123 UTC-04:00] [8296:8992] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-10 15:08:07.5212268 UTC-04:00] [8296:8996] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-10 15:08:07.5213259 UTC-04:00] [8296:9000] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-10 15:08:07.5214051 UTC-04:00] [8296:9004] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-10 15:08:07.5215111 UTC-04:00] [8296:9008] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-10 15:08:07.5218032 UTC-04:00] [8296:9016] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-10 15:08:07.5216842 UTC-04:00] [8296:9012] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-10 15:08:07.5229687 UTC-04:00] [8296:9020] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-10 15:08:11.5887148 UTC-04:00] [8296:8988] [fcmonitor 475 warning] session 1 not init [2026-08-10 15:08:11.6077220 UTC-04:00] [8296:8988] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-10 15:08:11.6079365 UTC-04:00] [8296:8988] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 1 [2026-08-10 15:08:11.6081015 UTC-04:00] [8296:8988] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 1 [2026-08-10 15:08:11.6082540 UTC-04:00] [8296:8988] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 1 [2026-08-10 15:08:11.6084868 UTC-04:00] [8296:8988] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 1 [2026-08-10 15:08:11.6086604 UTC-04:00] [8296:8988] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 1 [2026-08-10 15:08:11.6086925 UTC-04:00] [8296:8988] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-10 15:08:11.6087035 UTC-04:00] [8296:8988] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-10 15:08:11.6087104 UTC-04:00] [8296:8988] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-10 15:08:11.6087169 UTC-04:00] [8296:8988] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-10 15:08:11.6087233 UTC-04:00] [8296:8988] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-10 15:08:11.6087299 UTC-04:00] [8296:8988] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-10 15:08:18.6137912 UTC-04:00] [8296:8752] [fcmonitor 90 debug] session change reason=5 session=1 [2026-08-10 15:08:18.6141894 UTC-04:00] [8296:8752] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-10 15:08:18.7028340 UTC-04:00] [8296:8752] [fcmonitor 228 info] parsed to C:\Users\DOrtonap\Desktop\ for session 1 [2026-08-10 15:08:18.7081184 UTC-04:00] [8296:8752] [fcmonitor 228 info] parsed to C:\Users\DOrtonap\Documents\ for session 1 [2026-08-10 15:08:18.7134310 UTC-04:00] [8296:8752] [fcmonitor 228 info] parsed to C:\Users\DOrtonap\Favorites\ for session 1 [2026-08-10 15:08:18.8369014 UTC-04:00] [8296:8752] [fcmonitor 228 info] parsed to C:\Users\DOrtonap\Music\ for session 1 [2026-08-10 15:08:18.8433844 UTC-04:00] [8296:8752] [fcmonitor 228 info] parsed to C:\Users\DOrtonap\Pictures\ for session 1 [2026-08-10 15:08:18.8481913 UTC-04:00] [8296:8752] [fcmonitor 228 info] parsed to C:\Users\DOrtonap\Videos\ for session 1 [2026-08-10 15:08:18.8482276 UTC-04:00] [8296:8752] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 done [2026-08-10 15:08:18.8482407 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\dortonap\desktop\ [2026-08-10 15:08:18.8482514 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\dortonap\documents\ [2026-08-10 15:08:18.8482584 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\dortonap\favorites\ [2026-08-10 15:08:18.8482647 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\dortonap\music\ [2026-08-10 15:08:18.8482715 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\dortonap\pictures\ [2026-08-10 15:08:18.8482781 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\dortonap\videos\ [2026-08-10 15:08:18.8483137 UTC-04:00] [8296:8752] [fcmonitor 16 debug] add session=1 ret=1 str=C:\Users\DOrtonap\Desktop\;C:\Users\DOrtonap\Documents\;C:\Users\DOrtonap\Favorites\;C:\Users\DOrtonap\Music\;C:\Users\DOrtonap\Pictures\;C:\Users\DOrtonap\Videos\ [2026-08-10 15:08:18.8483488 UTC-04:00] [8296:8752] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-10 15:08:18.8483558 UTC-04:00] [8296:8752] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-10 15:08:18.8488602 UTC-04:00] [8296:8752] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 190085804032 499455451136 190085804032 [2026-08-10 15:08:18.8488776 UTC-04:00] [8296:8752] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-10 15:08:30.5887703 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 9476 \SystemRoot\System32\Conhost.exe [2026-08-10 15:08:30.5888297 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 9476 \SystemRoot\System32\Conhost.exe [2026-08-10 15:08:37.8250509 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 9876 \??\C:\Windows\system32\igfxEM.exe [2026-08-10 15:08:37.8251009 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 9876 C:\Windows\system32\igfxEM.exe [2026-08-10 15:08:38.7294770 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 9916 \??\C:\Windows\system32\igfxHK.exe [2026-08-10 15:08:38.7295002 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 9916 C:\Windows\system32\igfxHK.exe [2026-08-10 15:08:39.2917970 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 9944 \??\C:\Windows\system32\igfxTray.exe [2026-08-10 15:08:39.2918195 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 9944 C:\Windows\system32\igfxTray.exe [2026-08-10 15:08:50.9203549 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 9612 \??\C:\Windows\system32\userinit.exe [2026-08-10 15:08:50.9204153 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 9612 C:\Windows\system32\userinit.exe [2026-08-10 15:08:53.2727649 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 9444 \??\C:\Windows\Explorer.EXE [2026-08-10 15:08:53.2727870 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 9444 C:\Windows\Explorer.EXE [2026-08-10 15:09:21.1426741 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 9728 \??\C:\Windows\system32\wlrmdr.exe [2026-08-10 15:09:21.1427345 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 9728 C:\Windows\system32\wlrmdr.exe [2026-08-10 15:09:48.3566554 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 6300 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-10 15:09:48.3567053 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 6300 C:\IMC\MPS\IMCMobil.exe [2026-08-10 15:09:48.4106008 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 2520 \??\C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-10 15:09:48.4106252 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 2520 C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-10 15:09:59.4607023 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 10592 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-10 15:09:59.4607529 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 10592 C:\IMC\MPS\iIMCMobl.exe [2026-08-10 15:10:37.9798237 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 2624 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-10 15:10:37.9799035 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 2624 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-10 15:10:42.2084801 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 5496 \??\C:\Users\DOrtonap\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-10 15:10:42.2085527 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 5496 C:\Users\DOrtonap\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-10 15:10:46.2478259 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 10868 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 15:10:46.2478785 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 10868 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 15:10:47.6842557 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 5892 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-10 15:10:47.6842779 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 5892 C:\Windows\SysWOW64\runonce.exe [2026-08-10 15:10:51.3485988 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 11408 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-10 15:10:51.3486229 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 11408 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-10 15:10:56.1373002 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 11712 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-10 15:10:56.1373620 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 11712 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-10 15:10:59.2824113 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 11932 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-10 15:10:59.2824379 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 11932 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-10 15:10:59.8871511 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 11976 \??\C:\Windows\System32\cmd.exe [2026-08-10 15:10:59.8871786 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 11976 C:\Windows\System32\cmd.exe [2026-08-10 15:11:00.9832022 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 12088 \SystemRoot\System32\Conhost.exe [2026-08-10 15:11:00.9832248 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 12088 \SystemRoot\System32\Conhost.exe [2026-08-10 15:11:01.9169371 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 12200 \??\C:\Windows\System32\cmd.exe [2026-08-10 15:11:01.9169604 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 12200 C:\Windows\System32\cmd.exe [2026-08-10 15:11:02.2649515 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 12240 \SystemRoot\System32\Conhost.exe [2026-08-10 15:11:02.2649866 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 12240 \SystemRoot\System32\Conhost.exe [2026-08-10 15:11:03.9520289 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 11524 \??\C:\Windows\System32\cmd.exe [2026-08-10 15:11:03.9520817 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 11524 C:\Windows\System32\cmd.exe [2026-08-10 15:11:04.2664935 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 2360 \SystemRoot\System32\Conhost.exe [2026-08-10 15:11:04.2665284 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 2360 \SystemRoot\System32\Conhost.exe [2026-08-10 15:11:12.9136340 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 5892 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:12.9136569 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 5892 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:14.9812304 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 12060 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:14.9812827 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 12060 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:17.5001979 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 10116 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:17.5002215 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 10116 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:19.9428788 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 11544 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:19.9429039 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 11544 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:22.2821634 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 10996 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:22.2821867 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 10996 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:24.5018329 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 11040 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:24.5018887 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 11040 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:24.6799556 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 1180 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 15:11:24.6799823 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 1180 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 15:11:27.3441654 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 12040 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:27.3441914 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 12040 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:29.5077056 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 11060 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:29.5077289 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 11060 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:31.8102112 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 11472 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:31.8102354 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 11472 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:34.1537735 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 12400 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:34.1538587 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 12400 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:36.6368968 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 12480 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:36.6369332 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 12480 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:38.8668362 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 12564 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:38.8668577 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 12564 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:41.3578433 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 12680 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:41.3578674 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 12680 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:43.6046597 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 12828 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:43.6047120 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 12828 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:45.9494594 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 12900 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:45.9494834 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 12900 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:48.1915387 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 13024 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:48.1915626 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 13024 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:50.5698497 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 13252 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:50.5698720 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 13252 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:51.2825873 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 13284 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 15:11:51.2826384 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 13284 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 15:11:51.2860737 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 13292 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 15:11:51.2861083 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 13292 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 15:11:51.5533558 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 9356 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 15:11:51.5533789 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 9356 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 15:11:51.5586072 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 7536 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 15:11:51.5586301 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 7536 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 15:11:53.2149332 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 1064 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:53.2149569 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 1064 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:55.5477069 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 12424 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:55.5477607 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 12424 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:57.7059226 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 6244 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:11:57.7059439 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 6244 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:12:02.5974190 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 12760 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:12:02.5974423 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 12760 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:12:04.7123174 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 12576 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:12:04.7123654 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 12576 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:12:06.9195663 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 5356 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:12:06.9195907 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 5356 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:12:09.0013338 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 11212 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:12:09.0013584 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 11212 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 15:12:29.3707190 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 12336 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-10 15:12:29.3707754 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 12336 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-10 15:13:02.8864526 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 5652 \??\C:\Windows\splwow64.exe [2026-08-10 15:13:02.8865331 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 5652 C:\Windows\splwow64.exe [2026-08-10 15:14:00.2374940 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 11900 \??\C:\Users\DOrtonap\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-10 15:14:00.2375526 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 11900 C:\Users\DOrtonap\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-10 15:14:12.1524133 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 3720 \??\C:\Users\DOrtonap\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-10 15:14:12.1524780 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 3720 C:\Users\DOrtonap\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-10 15:14:21.4879516 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 7904 \SystemRoot\System32\Conhost.exe [2026-08-10 15:14:21.4880143 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 7904 \SystemRoot\System32\Conhost.exe [2026-08-10 15:15:28.3398324 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 7448 \??\C:\Users\DOrtonap\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\FileSyncConfig.exe [2026-08-10 15:15:28.3398987 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 7448 C:\Users\DOrtonap\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\FileSyncConfig.exe [2026-08-10 15:15:34.2269934 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 11568 \??\C:\Users\DOrtonap\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-10 15:15:34.2270484 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 11568 C:\Users\DOrtonap\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-10 15:15:39.2459817 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 10324 \??\C:\Users\DOrtonap\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\OneDrive.Sync.Service.exe [2026-08-10 15:15:39.2460178 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 10324 C:\Users\DOrtonap\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\OneDrive.Sync.Service.exe [2026-08-10 16:28:26.5645232 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 6632 \??\C:\IMC\RMS\RECORDS.EXE [2026-08-10 16:28:26.5645574 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 6632 C:\IMC\RMS\RECORDS.EXE [2026-08-10 16:32:25.7470899 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 14624 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-10 16:32:25.7471258 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 14624 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-10 16:32:26.1350920 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 3836 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-10 16:32:26.1351022 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 3836 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-10 16:32:26.2450874 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 14516 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-10 16:32:26.2450985 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 14516 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-10 16:32:26.2468461 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 14312 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-10 16:32:26.2468616 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 14312 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-10 16:32:26.4974975 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 15124 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-10 16:32:26.4975104 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 15124 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-10 16:32:26.7749553 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 15484 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-10 16:32:26.7749667 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 15484 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.72\msedgewebview2.exe [2026-08-10 16:35:10.4400616 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 14504 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:10.4400925 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 14504 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:10.4857872 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 14372 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:10.4858024 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 14372 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:10.5830048 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 15552 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:10.5830146 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 15552 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:10.7673765 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 15668 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:10.7673872 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 15668 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:10.7686839 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 14524 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:10.7686923 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 14524 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:11.0225161 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 16036 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:11.0225276 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 16036 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:11.1378594 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 15144 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:11.1378708 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 15144 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:11.1404356 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 6632 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:11.1404447 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 6632 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:11.3036653 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 15924 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:11.3036813 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 15924 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:11.3645542 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 15072 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:11.3645653 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 15072 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:11.5291692 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 16204 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:11.5291795 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 16204 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:15.6411795 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 17236 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:15.6412177 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 17236 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:19.7134742 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 17400 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:19.7134884 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 17400 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:20.4670389 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 16432 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-10 16:35:20.4670508 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 16432 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-10 16:35:20.6301411 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 10668 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-10 16:35:20.6301517 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 10668 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-10 16:35:40.7409467 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 14464 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:40.7409717 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 14464 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:41.6564812 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 17052 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:41.6564927 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 17052 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:42.1081657 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 17392 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:35:42.1081771 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 17392 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:36:10.8905113 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 16784 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:36:10.8905294 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 16784 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:37:10.7504520 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 16836 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:37:10.7504828 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 16836 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:38:11.2497493 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 12516 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:38:11.2497731 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 12516 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:40:14.4602063 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 16600 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 16:40:14.4602510 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 16600 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 17:09:54.7225290 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 18836 \SystemRoot\System32\Conhost.exe [2026-08-10 17:09:54.7225590 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 18836 \SystemRoot\System32\Conhost.exe [2026-08-10 19:09:54.7234356 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 25824 \SystemRoot\System32\Conhost.exe [2026-08-10 19:09:54.7234817 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 25824 \SystemRoot\System32\Conhost.exe [2026-08-10 21:09:54.7451197 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 34288 \SystemRoot\System32\Conhost.exe [2026-08-10 21:09:54.7451734 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 34288 \SystemRoot\System32\Conhost.exe [2026-08-10 23:08:44.7017823 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 15836 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-10 23:08:44.7018256 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 15836 C:\Windows\SysWOW64\WerFault.exe [2026-08-10 23:08:56.5785582 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 1420 \??\C:\Windows\system32\LogonUI.exe [2026-08-10 23:08:56.5785830 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 1420 C:\Windows\system32\LogonUI.exe [2026-08-10 23:09:04.8746915 UTC-04:00] [8296:8752] [fcmonitor 90 debug] session change reason=6 session=1 [2026-08-10 23:09:04.8747174 UTC-04:00] [8296:8752] [fcmonitor 117 debug] add reason=6 session=1 ret=1 [2026-08-10 23:09:05.2085865 UTC-04:00] [8296:8752] [fcmonitor 90 debug] session change reason=2 session=1 [2026-08-10 23:09:05.2085932 UTC-04:00] [8296:8752] [fcmonitor 117 debug] add reason=2 session=1 ret=1 [2026-08-10 23:09:05.3775658 UTC-04:00] [8296:8988] [fcmonitor 475 warning] session 2 not init [2026-08-10 23:09:05.3885727 UTC-04:00] [8296:8988] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-10 23:09:05.3886598 UTC-04:00] [8296:8988] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-10 23:09:05.3887377 UTC-04:00] [8296:8988] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-10 23:09:05.3888135 UTC-04:00] [8296:8988] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-10 23:09:05.3888881 UTC-04:00] [8296:8988] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-10 23:09:05.3889586 UTC-04:00] [8296:8988] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-10 23:09:05.3889740 UTC-04:00] [8296:8988] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-10 23:09:05.3889796 UTC-04:00] [8296:8988] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-10 23:09:05.3889825 UTC-04:00] [8296:8988] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-10 23:09:05.3889852 UTC-04:00] [8296:8988] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-10 23:09:05.3889883 UTC-04:00] [8296:8988] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-10 23:09:05.3889924 UTC-04:00] [8296:8988] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-10 23:09:06.8912258 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 41364 \??\C:\Windows\system32\LogonUI.exe [2026-08-10 23:09:06.8912358 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 41364 C:\Windows\system32\LogonUI.exe [2026-08-10 23:09:06.8922490 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 5028 \??\C:\Windows\system32\dwm.exe [2026-08-10 23:09:06.8922561 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 5028 C:\Windows\system32\dwm.exe [2026-08-10 23:09:06.9726582 UTC-04:00] [8296:8752] [fcmonitor 90 debug] session change reason=1 session=2 [2026-08-10 23:09:06.9728147 UTC-04:00] [8296:8752] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-10 23:09:06.9838374 UTC-04:00] [8296:8752] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-10 23:09:06.9839300 UTC-04:00] [8296:8752] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-10 23:09:06.9840078 UTC-04:00] [8296:8752] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-10 23:09:06.9840827 UTC-04:00] [8296:8752] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-10 23:09:06.9841584 UTC-04:00] [8296:8752] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-10 23:09:06.9842328 UTC-04:00] [8296:8752] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-10 23:09:06.9842440 UTC-04:00] [8296:8752] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-10 23:09:06.9842509 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-10 23:09:06.9842563 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-10 23:09:06.9842603 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-10 23:09:06.9842641 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-10 23:09:06.9842685 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-10 23:09:06.9842724 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-10 23:09:06.9842853 UTC-04:00] [8296:8752] [fcmonitor 16 debug] add session=2 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-10 23:09:06.9843035 UTC-04:00] [8296:8752] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-10 23:09:06.9843074 UTC-04:00] [8296:8752] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-10 23:09:06.9846480 UTC-04:00] [8296:8752] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 189541257216 499455451136 189541257216 [2026-08-10 23:09:06.9846585 UTC-04:00] [8296:8752] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-10 23:09:07.3051749 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 10276 \??\C:\Windows\system32\fontdrvhost.exe [2026-08-10 23:09:07.3051871 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 10276 C:\Windows\system32\fontdrvhost.exe [2026-08-10 23:09:43.5233093 UTC-04:00] [8296:8752] [fcmonitor 90 debug] session change reason=5 session=2 [2026-08-10 23:09:43.5234970 UTC-04:00] [8296:8752] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-10 23:09:43.5314729 UTC-04:00] [8296:8752] [fcmonitor 228 info] parsed to C:\Users\cloughec\Desktop\ for session 2 [2026-08-10 23:09:43.5334897 UTC-04:00] [8296:8752] [fcmonitor 228 info] parsed to C:\Users\cloughec\Documents\ for session 2 [2026-08-10 23:09:43.5383404 UTC-04:00] [8296:8752] [fcmonitor 228 info] parsed to C:\Users\cloughec\Favorites\ for session 2 [2026-08-10 23:09:43.5428028 UTC-04:00] [8296:8752] [fcmonitor 228 info] parsed to C:\Users\cloughec\Music\ for session 2 [2026-08-10 23:09:43.5464410 UTC-04:00] [8296:8752] [fcmonitor 228 info] parsed to C:\Users\cloughec\Pictures\ for session 2 [2026-08-10 23:09:43.5500836 UTC-04:00] [8296:8752] [fcmonitor 228 info] parsed to C:\Users\cloughec\Videos\ for session 2 [2026-08-10 23:09:43.5501000 UTC-04:00] [8296:8752] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-10 23:09:43.5501057 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\cloughec\desktop\ [2026-08-10 23:09:43.5501095 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\cloughec\documents\ [2026-08-10 23:09:43.5501120 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\cloughec\favorites\ [2026-08-10 23:09:43.5501144 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\cloughec\music\ [2026-08-10 23:09:43.5501168 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\cloughec\pictures\ [2026-08-10 23:09:43.5501194 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\cloughec\videos\ [2026-08-10 23:09:43.5501331 UTC-04:00] [8296:8752] [fcmonitor 16 debug] add session=2 ret=0 str=C:\Users\cloughec\Desktop\;C:\Users\cloughec\Documents\;C:\Users\cloughec\Favorites\;C:\Users\cloughec\Music\;C:\Users\cloughec\Pictures\;C:\Users\cloughec\Videos\ [2026-08-10 23:09:43.5501647 UTC-04:00] [8296:8752] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-10 23:09:43.5501681 UTC-04:00] [8296:8752] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-10 23:09:43.5503629 UTC-04:00] [8296:8752] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 189541060608 499455451136 189541060608 [2026-08-10 23:09:43.5503701 UTC-04:00] [8296:8752] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-10 23:09:44.4281312 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 41648 \SystemRoot\System32\Conhost.exe [2026-08-10 23:09:44.4281433 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 41648 \SystemRoot\System32\Conhost.exe [2026-08-10 23:09:45.1662727 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 252 \??\C:\Windows\system32\igfxEM.exe [2026-08-10 23:09:45.1662820 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 252 C:\Windows\system32\igfxEM.exe [2026-08-10 23:09:45.2988560 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 7556 \??\C:\Windows\system32\igfxHK.exe [2026-08-10 23:09:45.2988663 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 7556 C:\Windows\system32\igfxHK.exe [2026-08-10 23:09:45.3965756 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 3684 \??\C:\Windows\system32\userinit.exe [2026-08-10 23:09:45.3965859 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 3684 C:\Windows\system32\userinit.exe [2026-08-10 23:09:45.4668765 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 10620 \??\C:\Windows\system32\igfxTray.exe [2026-08-10 23:09:45.4668876 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 10620 C:\Windows\system32\igfxTray.exe [2026-08-10 23:09:45.5718868 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 11388 \??\C:\Windows\Explorer.EXE [2026-08-10 23:09:45.5718964 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 11388 C:\Windows\Explorer.EXE [2026-08-10 23:09:54.8543403 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 41168 \SystemRoot\System32\Conhost.exe [2026-08-10 23:09:54.8543669 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 41168 \SystemRoot\System32\Conhost.exe [2026-08-10 23:10:08.6585651 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 17208 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-10 23:10:08.6585963 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 17208 C:\IMC\MPS\IMCMobil.exe [2026-08-10 23:10:09.6521820 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 15456 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-10 23:10:09.6521954 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 15456 C:\IMC\MPS\iIMCMobl.exe [2026-08-10 23:10:11.1138634 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 4656 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-10 23:10:11.1138751 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 4656 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-10 23:10:12.0441548 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 42124 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 23:10:12.0441649 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 42124 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 23:10:12.6732754 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 15048 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-10 23:10:12.6732858 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 15048 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-10 23:10:14.0853979 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 7640 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 23:10:14.0854199 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 7640 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 23:10:14.3231976 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 42720 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.251.23\MicrosoftEdgeUpdateCore.exe [2026-08-10 23:10:14.3232075 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 42720 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.251.23\MicrosoftEdgeUpdateCore.exe [2026-08-10 23:10:14.9075078 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 42704 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-10 23:10:14.9075191 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 42704 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-10 23:10:15.4266002 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 7600 \??\C:\Windows\system32\wlrmdr.exe [2026-08-10 23:10:15.4266103 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 7600 C:\Windows\system32\wlrmdr.exe [2026-08-10 23:10:15.4277577 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 17208 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:10:15.4277661 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 17208 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:10:16.0431067 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 23312 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:10:16.0431169 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 23312 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:10:16.1180278 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 15584 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 23:10:16.1180379 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 15584 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 23:10:16.4433702 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 5808 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:10:16.4433857 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 5808 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:10:16.4453782 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 9700 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:10:16.4453862 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 9700 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:10:16.6321800 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 3276 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:10:16.6321899 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 3276 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:10:16.7322692 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 42888 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:10:16.7322841 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 42888 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:10:18.1809589 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 9944 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 23:10:18.1809696 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 9944 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 23:10:19.8526449 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 776 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-10 23:10:19.8526545 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 776 C:\Windows\SysWOW64\runonce.exe [2026-08-10 23:10:20.2919219 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 42404 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 23:10:20.2919328 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 42404 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 23:10:21.4445191 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 42844 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-10 23:10:21.4445343 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 42844 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-10 23:10:21.5179532 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 31504 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-10 23:10:21.5179631 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 31504 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-10 23:10:22.4880675 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 43116 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 23:10:22.4880783 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 43116 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 23:10:24.6104125 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 43372 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 23:10:24.6104346 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 43372 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-10 23:10:25.7371732 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 43544 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-10 23:10:25.7371830 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 43544 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-10 23:10:28.3927484 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 43884 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-10 23:10:28.3927593 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 43884 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-10 23:10:28.4242643 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 43900 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-10 23:10:28.4242748 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 43900 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-10 23:10:46.3902348 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 42740 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:10:46.3902605 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 42740 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:10:50.2353337 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 40468 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-10 23:10:50.2353438 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 40468 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-10 23:10:55.4740273 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 42392 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-10 23:10:55.4740467 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 42392 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-10 23:11:09.9378434 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 15436 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\FileSyncConfig.exe [2026-08-10 23:11:09.9378651 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 15436 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\FileSyncConfig.exe [2026-08-10 23:11:11.1407521 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 43564 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-10 23:11:11.1407637 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 43564 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-10 23:11:17.0684920 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 42764 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\OneDrive.Sync.Service.exe [2026-08-10 23:11:17.0685144 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 42764 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\OneDrive.Sync.Service.exe [2026-08-10 23:11:17.3861171 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 10064 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:11:17.3861317 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 10064 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:11:20.0549925 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 43888 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-10 23:11:20.0550024 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 43888 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-10 23:11:46.2105483 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 41492 \??\C:\Windows\splwow64.exe [2026-08-10 23:11:46.2105759 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 41492 C:\Windows\splwow64.exe [2026-08-10 23:12:03.4468538 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 42784 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:03.4468763 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 42784 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:03.6176919 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 2964 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:03.6177016 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 2964 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:03.6209647 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 18916 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:03.6209729 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 18916 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:03.7960097 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 43588 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:03.7960194 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 43588 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:06.7412083 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 40428 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:06.7412193 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 40428 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:08.0474223 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 41152 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:08.0474326 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 41152 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:11.2430134 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 7900 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:11.2430231 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 7900 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:12.7383947 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 42544 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:12.7384048 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 42544 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:13.3253810 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 42000 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:13.3254060 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 42000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:14.7093726 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 38188 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:14.7093866 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 38188 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:14.9954634 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 14376 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:14.9954762 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 14376 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:16.3902928 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 10196 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:16.3903040 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 10196 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:16.4791742 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 16048 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:16.4791850 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 16048 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:16.7556125 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 42516 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:16.7556234 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 42516 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:19.4930856 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 14616 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:19.4930964 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 14616 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:21.1339798 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 10116 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:21.1339941 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 10116 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:48.6123832 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 15628 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:12:48.6124109 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 15628 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:15:20.6179235 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 14364 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-10 23:15:20.6179467 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 14364 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-10 23:17:04.7189554 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 41644 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-10 23:17:04.7189965 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 41644 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:09:58.4399563 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 48216 \SystemRoot\System32\Conhost.exe [2026-08-11 01:09:58.4399803 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 48216 \SystemRoot\System32\Conhost.exe [2026-08-11 01:55:51.7444430 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 51708 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:55:51.7444665 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 51708 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:55:53.2858947 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 52240 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:55:53.2859050 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 52240 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:56:01.2461569 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 52676 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:56:01.2461892 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 52676 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:56:01.2805514 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 52704 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:56:01.2805611 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 52704 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:56:10.5666719 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 52972 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:56:10.5667039 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 52972 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:56:14.1531730 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 53152 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:56:14.1531841 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 53152 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:56:14.2181103 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 53180 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:56:14.2181231 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 53180 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:56:36.0106375 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 52584 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:56:36.0880458 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 52584 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:56:36.0905497 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 52524 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:56:36.0905604 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 52524 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:56:36.1300809 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 52124 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:56:36.1300916 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 52124 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:56:38.2992937 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 52840 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:56:38.2993810 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 52840 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:56:38.8542171 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 51636 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 01:56:38.8542276 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 51636 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 03:09:58.4463405 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 51244 \SystemRoot\System32\Conhost.exe [2026-08-11 03:09:58.4463818 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 51244 \SystemRoot\System32\Conhost.exe [2026-08-11 03:15:45.1812185 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 53904 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 03:15:45.1813692 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 53904 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 03:15:47.1691253 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 58312 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 03:15:47.1691602 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 58312 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 03:15:54.6810902 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 57736 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 03:15:54.6811012 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 57736 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 03:15:54.7298782 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 55972 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 03:15:54.7298889 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 55972 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 03:15:55.6817923 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 57400 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 03:15:55.6818035 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 57400 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 03:15:58.3246876 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 56056 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 03:15:58.3247565 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 56056 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 03:15:58.3638989 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 57180 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 03:15:58.3639094 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 57180 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 04:36:03.1622773 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 59928 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 04:36:03.1624196 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 59928 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 04:36:03.3343188 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 61764 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 04:36:03.3343302 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 61764 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 04:36:03.5380241 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 63256 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 04:36:03.5380348 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 63256 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 04:36:03.5392749 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 62052 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 04:36:03.5392839 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 62052 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 04:36:03.6551789 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 63320 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 04:36:03.6551894 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 63320 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 04:36:03.8709153 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 63328 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 04:36:03.8709266 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 63328 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 04:36:07.5924870 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 43476 \??\C:\Windows\system32\LogonUI.exe [2026-08-11 04:36:07.5925112 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 43476 C:\Windows\system32\LogonUI.exe [2026-08-11 04:36:11.0484559 UTC-04:00] [8296:8752] [fcmonitor 90 debug] session change reason=6 session=2 [2026-08-11 04:36:11.0484646 UTC-04:00] [8296:8752] [fcmonitor 117 debug] add reason=6 session=2 ret=1 [2026-08-11 04:36:11.3650211 UTC-04:00] [8296:8752] [fcmonitor 90 debug] session change reason=2 session=2 [2026-08-11 04:36:11.3650285 UTC-04:00] [8296:8752] [fcmonitor 117 debug] add reason=2 session=2 ret=1 [2026-08-11 04:36:11.4467780 UTC-04:00] [8296:8988] [fcmonitor 475 warning] session 3 not init [2026-08-11 04:36:11.4616024 UTC-04:00] [8296:8988] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-11 04:36:11.4616846 UTC-04:00] [8296:8988] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 3 [2026-08-11 04:36:11.4617572 UTC-04:00] [8296:8988] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 3 [2026-08-11 04:36:11.4618254 UTC-04:00] [8296:8988] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 3 [2026-08-11 04:36:11.4618919 UTC-04:00] [8296:8988] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 3 [2026-08-11 04:36:11.4619568 UTC-04:00] [8296:8988] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 3 [2026-08-11 04:36:11.4619704 UTC-04:00] [8296:8988] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-11 04:36:11.4619747 UTC-04:00] [8296:8988] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-11 04:36:11.4619776 UTC-04:00] [8296:8988] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-11 04:36:11.4619802 UTC-04:00] [8296:8988] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-11 04:36:11.4619827 UTC-04:00] [8296:8988] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-11 04:36:11.4619856 UTC-04:00] [8296:8988] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-11 04:36:11.6520227 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 62316 \??\C:\Windows\system32\LogonUI.exe [2026-08-11 04:36:11.6520330 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 62316 C:\Windows\system32\LogonUI.exe [2026-08-11 04:36:11.6541261 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 7700 \??\C:\Windows\system32\dwm.exe [2026-08-11 04:36:11.6541351 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 7700 C:\Windows\system32\dwm.exe [2026-08-11 04:36:11.6886793 UTC-04:00] [8296:8752] [fcmonitor 90 debug] session change reason=1 session=3 [2026-08-11 04:36:11.6888116 UTC-04:00] [8296:8752] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-11 04:36:11.7034879 UTC-04:00] [8296:8752] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-11 04:36:11.7035756 UTC-04:00] [8296:8752] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 3 [2026-08-11 04:36:11.7036554 UTC-04:00] [8296:8752] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 3 [2026-08-11 04:36:11.7037422 UTC-04:00] [8296:8752] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 3 [2026-08-11 04:36:11.7038177 UTC-04:00] [8296:8752] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 3 [2026-08-11 04:36:11.7038864 UTC-04:00] [8296:8752] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 3 [2026-08-11 04:36:11.7038954 UTC-04:00] [8296:8752] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 done [2026-08-11 04:36:11.7039007 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-11 04:36:11.7039046 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-11 04:36:11.7039073 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-11 04:36:11.7039100 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-11 04:36:11.7039133 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-11 04:36:11.7039160 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-11 04:36:11.7039302 UTC-04:00] [8296:8752] [fcmonitor 16 debug] add session=3 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-11 04:36:11.7039421 UTC-04:00] [8296:8752] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-11 04:36:11.7039449 UTC-04:00] [8296:8752] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-11 04:36:11.7041078 UTC-04:00] [8296:8752] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 188864266240 499455451136 188864266240 [2026-08-11 04:36:11.7041157 UTC-04:00] [8296:8752] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-11 04:36:12.0893679 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 60992 \??\C:\Windows\system32\fontdrvhost.exe [2026-08-11 04:36:12.0893788 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 60992 C:\Windows\system32\fontdrvhost.exe [2026-08-11 14:46:24.1978207 UTC-04:00] [8296:8752] [fcmonitor 90 debug] session change reason=5 session=3 [2026-08-11 14:46:24.1982352 UTC-04:00] [8296:8752] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-11 14:46:24.2412469 UTC-04:00] [8296:8752] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Desktop\ for session 3 [2026-08-11 14:46:24.2471662 UTC-04:00] [8296:8752] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Documents\ for session 3 [2026-08-11 14:46:24.2523993 UTC-04:00] [8296:8752] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Favorites\ for session 3 [2026-08-11 14:46:24.3002422 UTC-04:00] [8296:8752] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Music\ for session 3 [2026-08-11 14:46:24.3050183 UTC-04:00] [8296:8752] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Pictures\ for session 3 [2026-08-11 14:46:24.3103129 UTC-04:00] [8296:8752] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Videos\ for session 3 [2026-08-11 14:46:24.3103488 UTC-04:00] [8296:8752] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 done [2026-08-11 14:46:24.3103646 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\haskinsh\desktop\ [2026-08-11 14:46:24.3103755 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\haskinsh\documents\ [2026-08-11 14:46:24.3104380 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\haskinsh\favorites\ [2026-08-11 14:46:24.3104453 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\haskinsh\music\ [2026-08-11 14:46:24.3104536 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\haskinsh\pictures\ [2026-08-11 14:46:24.3104609 UTC-04:00] [8296:8752] [fcmonitor 435 info] add c:\users\haskinsh\videos\ [2026-08-11 14:46:24.3104876 UTC-04:00] [8296:8752] [fcmonitor 16 debug] add session=3 ret=0 str=C:\Users\haskinsh\Desktop\;C:\Users\haskinsh\Documents\;C:\Users\haskinsh\Favorites\;C:\Users\haskinsh\Music\;C:\Users\haskinsh\Pictures\;C:\Users\haskinsh\Videos\ [2026-08-11 14:46:24.3105246 UTC-04:00] [8296:8752] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-11 14:46:24.3105341 UTC-04:00] [8296:8752] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-11 14:46:24.3111905 UTC-04:00] [8296:8752] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 188796559360 499455451136 188796559360 [2026-08-11 14:46:24.3112117 UTC-04:00] [8296:8752] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-11 14:46:25.4553820 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 98672 \SystemRoot\System32\Conhost.exe [2026-08-11 14:46:25.4554142 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 98672 \SystemRoot\System32\Conhost.exe [2026-08-11 14:46:27.9762226 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 97408 \??\C:\Windows\system32\igfxEM.exe [2026-08-11 14:46:27.9762725 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 97408 C:\Windows\system32\igfxEM.exe [2026-08-11 14:46:28.3879740 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 99296 \??\C:\Windows\system32\igfxHK.exe [2026-08-11 14:46:28.3879982 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 99296 C:\Windows\system32\igfxHK.exe [2026-08-11 14:46:28.9757356 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 98736 \??\C:\Windows\system32\igfxTray.exe [2026-08-11 14:46:28.9757597 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 98736 C:\Windows\system32\igfxTray.exe [2026-08-11 14:46:29.9878052 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 99440 \??\C:\Windows\system32\userinit.exe [2026-08-11 14:46:29.9878323 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 99440 C:\Windows\system32\userinit.exe [2026-08-11 14:46:30.4085911 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 99480 \??\C:\Windows\Explorer.EXE [2026-08-11 14:46:30.4086227 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 99480 C:\Windows\Explorer.EXE [2026-08-11 14:47:00.1638120 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 97596 \??\C:\Windows\system32\wlrmdr.exe [2026-08-11 14:47:00.1638634 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 97596 C:\Windows\system32\wlrmdr.exe [2026-08-11 14:47:01.4420947 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 43304 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-11 14:47:01.4421296 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 43304 C:\IMC\MPS\IMCMobil.exe [2026-08-11 14:47:06.1950703 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 97900 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-11 14:47:06.1950938 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 97900 C:\IMC\MPS\iIMCMobl.exe [2026-08-11 14:47:27.4959313 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 101740 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-11 14:47:27.4960086 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 101740 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-11 14:47:30.7516398 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 36472 \??\C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-11 14:47:30.7516646 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 36472 C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-11 14:47:32.4217312 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 102372 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 14:47:32.4217694 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 102372 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 14:47:33.0333647 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 102396 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:33.0333894 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 102396 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:35.0851531 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 102124 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:35.0851770 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 102124 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:37.2434284 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 95624 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:37.2434647 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 95624 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:39.4739786 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 99632 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:39.4740306 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 99632 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:41.3352943 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 102356 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 14:47:41.3353203 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 102356 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 14:47:41.7492652 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 98508 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:41.7492886 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 98508 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:43.1783296 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 100176 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 14:47:43.1783546 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 100176 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 14:47:43.1817258 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 100152 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 14:47:43.1817976 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 100152 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 14:47:43.5722027 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 101784 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-11 14:47:43.5722250 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 101784 C:\Windows\SysWOW64\runonce.exe [2026-08-11 14:47:44.2771540 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 98080 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 14:47:44.2771810 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 98080 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 14:47:44.3057132 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 100268 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 14:47:44.3057524 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 100268 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 14:47:44.4557459 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 102324 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:44.4557692 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 102324 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:45.9822299 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 102452 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 14:47:45.9822668 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 102452 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 14:47:46.9195755 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 102636 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:46.9195988 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 102636 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:47.7113743 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 102744 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-11 14:47:47.7114319 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 102744 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-11 14:47:48.9186503 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 102820 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-11 14:47:48.9186749 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 102820 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-11 14:47:49.3206014 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 102844 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:49.3206266 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 102844 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:51.6933821 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 103116 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-11 14:47:51.6934087 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 103116 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-11 14:47:51.7735976 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 103128 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:51.7736372 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 103128 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:53.9913702 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 103224 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:53.9914075 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 103224 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:56.1986544 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 103272 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:56.1986789 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 103272 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:58.3489818 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 103380 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:47:58.3490363 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 103380 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:00.5518005 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 100132 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:00.5518233 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 100132 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:02.8281778 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 100060 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:02.8282000 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 100060 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:05.2201806 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 102428 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:05.2202079 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 102428 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:07.4458040 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 101716 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:07.4458405 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 101716 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:09.6173950 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 99936 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:09.6174477 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 99936 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:11.8300315 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 97696 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:11.8300556 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 97696 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:12.8729139 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 103152 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 14:48:12.8729373 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 103152 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 14:48:13.9359454 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 103236 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:13.9359697 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 103236 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:16.0289409 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 97364 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:16.0289676 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 97364 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:18.2224485 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 94768 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:18.2225219 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 94768 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:18.2926632 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 102408 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-11 14:48:18.2926877 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 102408 C:\Windows\SysWOW64\WerFault.exe [2026-08-11 14:48:20.4011482 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 102008 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:20.4011733 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 102008 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:22.5252822 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 102772 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:22.5253077 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 102772 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:24.6588876 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 102700 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:24.6589123 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 102700 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:26.7499439 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 100320 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:26.7499825 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 100320 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:28.8127672 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 102736 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:28.8128167 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 102736 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:30.1550890 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 102656 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-11 14:48:30.1551171 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 102656 C:\Windows\SysWOW64\WerFault.exe [2026-08-11 14:48:30.8749320 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 101452 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:30.8749550 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 101452 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:32.8268862 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 101448 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-11 14:48:32.8269124 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 101448 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-11 14:48:34.2391542 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 102688 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-11 14:48:34.2391790 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 102688 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-11 14:48:34.2455728 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 101776 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:34.2455948 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 101776 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:35.0206818 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 93816 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:35.0207065 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 93816 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:37.0616133 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 97700 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:37.0616388 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 97700 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:39.1245950 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 103032 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:39.1246533 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 103032 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:41.1665838 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 101604 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:41.1666082 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 101604 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:43.2224933 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 100084 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:43.2225177 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 100084 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:45.2642624 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 97376 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:48:45.2642859 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 97376 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-11 14:49:04.0287149 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 103164 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-11 14:49:04.0287669 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 103164 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-11 14:49:30.9534349 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 96160 \??\C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-11 14:49:30.9534779 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 96160 C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-11 14:49:51.3202970 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 102188 \??\C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-11 14:49:51.3203962 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 102188 C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-11 14:49:51.3682701 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 97760 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 14:49:51.3682946 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 97760 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 14:49:54.6486633 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 98088 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-11 14:49:54.6489153 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 98088 C:\IMC\MPS\IMCMobil.exe [2026-08-11 14:49:55.9950578 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 102004 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-11 14:49:55.9950799 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 102004 C:\IMC\MPS\iIMCMobl.exe [2026-08-11 14:50:35.6499362 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 97784 \??\C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\FileSyncConfig.exe [2026-08-11 14:50:35.6499896 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 97784 C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\FileSyncConfig.exe [2026-08-11 14:50:40.0557806 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 98244 \??\C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-11 14:50:40.0558389 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 98244 C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-11 14:50:44.8379742 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 99444 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 14:50:44.8380004 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 99444 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 14:50:50.3653646 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 100060 \??\C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\OneDrive.Sync.Service.exe [2026-08-11 14:50:50.3654180 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 100060 C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\OneDrive.Sync.Service.exe [2026-08-11 15:09:59.0672791 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 99176 \SystemRoot\System32\Conhost.exe [2026-08-11 15:09:59.0673777 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 99176 \SystemRoot\System32\Conhost.exe [2026-08-11 15:18:52.2449899 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 98440 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-11 15:18:52.2450469 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 98440 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-11 15:19:53.4675688 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 87164 \??\C:\Windows\splwow64.exe [2026-08-11 15:19:53.4676218 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 87164 C:\Windows\splwow64.exe [2026-08-11 15:20:28.3241952 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 98500 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 15:20:28.3242537 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 98500 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 15:20:28.5089196 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 97356 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 15:20:28.5089459 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 97356 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 15:20:29.2919884 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 101392 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 15:20:29.2920271 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 101392 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 15:20:29.2970324 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 103132 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 15:20:29.2970570 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 103132 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 15:20:29.7493925 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 99036 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 15:20:29.7494302 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 99036 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 15:20:41.7935912 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 104016 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 15:20:41.7936456 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 104016 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 15:20:51.8635735 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 104280 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 15:20:51.8637216 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 104280 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 15:21:14.2669572 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 104036 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 15:21:14.2670142 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 104036 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 15:25:31.9021929 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 97380 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 15:25:31.9022833 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 97380 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 16:54:56.3442950 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 110260 \??\C:\Program Files (x86)\OpenOffice 4\program\soffice.exe [2026-08-11 16:54:56.3443496 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 110260 C:\Program Files (x86)\OpenOffice 4\program\soffice.exe [2026-08-11 16:54:56.9113877 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 110296 \??\C:\Program Files (x86)\OpenOffice 4\program\soffice.bin [2026-08-11 16:54:56.9113998 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 110296 C:\Program Files (x86)\OpenOffice 4\program\soffice.bin [2026-08-11 17:09:59.0227682 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 109620 \SystemRoot\System32\Conhost.exe [2026-08-11 17:09:59.0228020 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 109620 \SystemRoot\System32\Conhost.exe [2026-08-11 19:09:59.3373204 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 117216 \SystemRoot\System32\Conhost.exe [2026-08-11 19:09:59.3373614 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 117216 \SystemRoot\System32\Conhost.exe [2026-08-11 20:22:50.8635925 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 123456 \??\C:\IMC\RMS\RECORDS.EXE [2026-08-11 20:22:50.8636328 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 123456 C:\IMC\RMS\RECORDS.EXE [2026-08-11 20:22:57.2677454 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 123836 \??\C:\IMC\MPS\PL.EXE [2026-08-11 20:22:57.2677564 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 123836 C:\IMC\MPS\PL.EXE [2026-08-11 20:41:58.0316409 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 122964 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-11 20:41:58.0316760 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 122964 C:\IMC\RMS\TRAFFIC.EXE [2026-08-11 20:43:24.4658329 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 120096 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 20:43:24.4658600 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 120096 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 20:43:38.7051715 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 122760 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 20:43:38.7053190 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 122760 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 20:43:46.2297643 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 124164 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 20:43:46.2297796 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 124164 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 20:43:48.6451665 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 121440 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 20:43:48.6451900 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 121440 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 20:43:48.9143214 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 125000 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 20:43:48.9143317 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 125000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 20:43:50.7866218 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 125128 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 20:43:50.7866412 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 125128 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 20:43:50.9589227 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 125152 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 20:43:50.9589416 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 125152 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 21:09:59.6378672 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 126456 \SystemRoot\System32\Conhost.exe [2026-08-11 21:09:59.6379104 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 126456 \SystemRoot\System32\Conhost.exe [2026-08-11 21:12:47.8859152 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 126612 \??\C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe [2026-08-11 21:12:47.8859530 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 126612 C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe [2026-08-11 21:12:47.9020812 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 123084 \SystemRoot\System32\Conhost.exe [2026-08-11 21:12:47.9020911 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 123084 \SystemRoot\System32\Conhost.exe [2026-08-11 21:12:48.7928234 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 124180 \??\C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe [2026-08-11 21:12:48.7928530 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 124180 C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe [2026-08-11 21:42:21.1860784 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 124956 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-11 21:42:21.1861202 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 124956 C:\IMC\RMS\TRAFFIC.EXE [2026-08-11 21:46:39.5677947 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 127664 \??\C:\IMC\RMS\RECORDS.EXE [2026-08-11 21:46:39.5678277 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 127664 C:\IMC\RMS\RECORDS.EXE [2026-08-11 22:38:40.8568681 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 125648 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 22:38:40.8569021 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 125648 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 22:38:40.9822087 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 133004 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 22:38:40.9822174 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 133004 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 22:38:41.1526364 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 133104 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 22:38:41.1526498 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 133104 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 22:38:41.1765103 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 132884 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 22:38:41.1765203 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 132884 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 22:38:41.3310784 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 132284 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 22:38:41.3310884 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 132284 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 22:38:41.3630575 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 130760 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 22:38:41.3630678 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 130760 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 22:38:43.8811631 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 125308 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-11 22:38:43.8811753 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 125308 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-11 22:38:43.9154617 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 125136 \??\C:\Windows\system32\LogonUI.exe [2026-08-11 22:38:43.9154723 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 125136 C:\Windows\system32\LogonUI.exe [2026-08-11 22:38:43.9193479 UTC-04:00] [8296:8988] [fcmonitor 332 debug] proc cache add 102048 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-11 22:38:43.9193590 UTC-04:00] [8296:8988] [fcmonitor 99 info] add pid 102048 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-11 22:38:47.3182606 UTC-04:00] [8296:8752] [fcmonitor 90 debug] session change reason=6 session=3 [2026-08-11 22:38:47.3182719 UTC-04:00] [8296:8752] [fcmonitor 117 debug] add reason=6 session=3 ret=1 [2026-08-11 22:39:59.1179368 UTC-04:00] [7172:7176] [fcmonitor 1249 info] (Time Zone: Eastern Standard Time) (Sun Jun 30 22:28:59 2024, 49s) 2026-08-11 22:39:59.117 type: 0x10f size: 512 memory: 0x0000000000000000 [2026-08-11 22:39:59.1188191 UTC-04:00] [7172:7176] [fcmonitor 78 debug] ems_serial FCTEMS8821002497 [2026-08-11 22:39:59.1205181 UTC-04:00] [7172:7176] [fcmonitor 85 debug] fct_serial FCT8000515779876 [2026-08-11 22:39:59.1207455 UTC-04:00] [7172:7176] [fcmonitor 94 debug] fct_uid 4EF5549DB1674A63BE848553987D4AEE [2026-08-11 22:39:59.1207948 UTC-04:00] [7172:7176] [fcmonitor 103 debug] vdom default [2026-08-11 22:39:59.1208113 UTC-04:00] [7172:7176] [fcmonitor 843 info] InitCryptAlg [2026-08-11 22:39:59.1215316 UTC-04:00] [7172:7176] [fcmonitor 41 info] before LoadSettings [2026-08-11 22:39:59.1219898 UTC-04:00] [7172:7176] [fcmonitor 45 info] folder C:\Users\%USERNAME%\Desktop\ [2026-08-11 22:39:59.1220021 UTC-04:00] [7172:7176] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-11 22:39:59.1303466 UTC-04:00] [7172:7176] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-11 22:39:59.1304392 UTC-04:00] [7172:7176] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 0 [2026-08-11 22:39:59.1305535 UTC-04:00] [7172:7176] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 0 [2026-08-11 22:39:59.1306290 UTC-04:00] [7172:7176] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 0 [2026-08-11 22:39:59.1307386 UTC-04:00] [7172:7176] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 0 [2026-08-11 22:39:59.1308184 UTC-04:00] [7172:7176] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 0 [2026-08-11 22:39:59.1308304 UTC-04:00] [7172:7176] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 done [2026-08-11 22:39:59.1308371 UTC-04:00] [7172:7176] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-11 22:39:59.1308498 UTC-04:00] [7172:7176] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-11 22:39:59.1308540 UTC-04:00] [7172:7176] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-11 22:39:59.1308575 UTC-04:00] [7172:7176] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-11 22:39:59.1308612 UTC-04:00] [7172:7176] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-11 22:39:59.1308648 UTC-04:00] [7172:7176] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-11 22:39:59.1308837 UTC-04:00] [7172:7176] [fcmonitor 16 debug] add session=0 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-11 22:39:59.1503020 UTC-04:00] [7172:7176] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-11 22:39:59.1503086 UTC-04:00] [7172:7176] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-11 22:39:59.1507375 UTC-04:00] [7172:7176] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 188089065472 499455451136 188089065472 [2026-08-11 22:39:59.1507455 UTC-04:00] [7172:7176] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-11 22:39:59.3695758 UTC-04:00] [7172:7176] [fcmonitor 232 info] queue lock 0x39c cleanevent 0x3a0 [2026-08-11 22:39:59.3697014 UTC-04:00] [7172:7176] [fcmonitor 245 info] init succeed [2026-08-11 22:39:59.3697050 UTC-04:00] [7172:7176] [fcmonitor 438 info] reading cache [2026-08-11 22:39:59.4034707 UTC-04:00] [7172:7176] [fcmonitor 440 info] getting all proc [2026-08-11 22:39:59.4141228 UTC-04:00] [7172:7176] [fcmonitor 159 debug] getting all proc [2026-08-11 22:39:59.4179593 UTC-04:00] [7172:7176] [fcmonitor 192 warning] GetAllProcTree can't find module 4 System [2026-08-11 22:39:59.4698073 UTC-04:00] [7172:7176] [fcmonitor 192 warning] GetAllProcTree can't find module 100 Registry [2026-08-11 22:39:59.6930892 UTC-04:00] [7172:7176] [fcmonitor 192 warning] GetAllProcTree can't find module 2472 Memory Compression [2026-08-11 22:40:00.2634860 UTC-04:00] [7172:7176] [fcmonitor 286 debug] getting all proc finished 124 0 [2026-08-11 22:40:00.2634935 UTC-04:00] [7172:7176] [fcmonitor 442 info] finish [2026-08-11 22:40:00.2635932 UTC-04:00] [7172:7176] [fcmonitor 267 info] heap p 0x0000029D7A35ED10 [2026-08-11 22:40:00.2636298 UTC-04:00] [7172:7176] [fcmonitor 267 info] heap p 0x0000029D7A3604C0 [2026-08-11 22:40:00.2636917 UTC-04:00] [7172:7176] [fcmonitor 267 info] heap p 0x0000029D7A360970 [2026-08-11 22:40:00.2637268 UTC-04:00] [7172:7176] [fcmonitor 267 info] heap p 0x0000029D7A372440 [2026-08-11 22:40:00.2637615 UTC-04:00] [7172:7176] [fcmonitor 267 info] heap p 0x0000029D7A370760 [2026-08-11 22:40:00.2637932 UTC-04:00] [7172:7176] [fcmonitor 267 info] heap p 0x0000029D7A373780 [2026-08-11 22:40:00.2638274 UTC-04:00] [7172:7176] [fcmonitor 267 info] heap p 0x0000029D7A371100 [2026-08-11 22:40:00.2638591 UTC-04:00] [7172:7176] [fcmonitor 267 info] heap p 0x0000029D7A372910 [2026-08-11 22:40:00.2742922 UTC-04:00] [7172:3068] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-11 22:40:00.2743636 UTC-04:00] [7172:3036] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-11 22:40:00.2744395 UTC-04:00] [7172:6608] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-11 22:40:00.2745082 UTC-04:00] [7172:6620] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-11 22:40:00.2745916 UTC-04:00] [7172:8120] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-11 22:40:00.2746567 UTC-04:00] [7172:8072] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-11 22:40:00.2747242 UTC-04:00] [7172:8136] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-11 22:40:00.2747895 UTC-04:00] [7172:8172] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-11 22:40:21.1311394 UTC-04:00] [7172:6612] [fcmonitor 475 warning] session 1 not init [2026-08-11 22:40:21.1386818 UTC-04:00] [7172:6612] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-11 22:40:21.1387444 UTC-04:00] [7172:6612] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 1 [2026-08-11 22:40:21.1388077 UTC-04:00] [7172:6612] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 1 [2026-08-11 22:40:21.1388604 UTC-04:00] [7172:6612] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 1 [2026-08-11 22:40:21.1389130 UTC-04:00] [7172:6612] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 1 [2026-08-11 22:40:21.1389622 UTC-04:00] [7172:6612] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 1 [2026-08-11 22:40:21.1389729 UTC-04:00] [7172:6612] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-11 22:40:21.1389756 UTC-04:00] [7172:6612] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-11 22:40:21.1389773 UTC-04:00] [7172:6612] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-11 22:40:21.1389791 UTC-04:00] [7172:6612] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-11 22:40:21.1389807 UTC-04:00] [7172:6612] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-11 22:40:21.1389822 UTC-04:00] [7172:6612] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-11 23:20:59.1597179 UTC-04:00] [7172:4324] [fcmonitor 90 debug] session change reason=5 session=1 [2026-08-11 23:20:59.1599008 UTC-04:00] [7172:4324] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-11 23:20:59.1666535 UTC-04:00] [7172:4324] [fcmonitor 228 info] parsed to C:\Users\cloughec\Desktop\ for session 1 [2026-08-11 23:20:59.1687284 UTC-04:00] [7172:4324] [fcmonitor 228 info] parsed to C:\Users\cloughec\Documents\ for session 1 [2026-08-11 23:20:59.1706125 UTC-04:00] [7172:4324] [fcmonitor 228 info] parsed to C:\Users\cloughec\Favorites\ for session 1 [2026-08-11 23:20:59.1726281 UTC-04:00] [7172:4324] [fcmonitor 228 info] parsed to C:\Users\cloughec\Music\ for session 1 [2026-08-11 23:20:59.1747105 UTC-04:00] [7172:4324] [fcmonitor 228 info] parsed to C:\Users\cloughec\Pictures\ for session 1 [2026-08-11 23:20:59.1766896 UTC-04:00] [7172:4324] [fcmonitor 228 info] parsed to C:\Users\cloughec\Videos\ for session 1 [2026-08-11 23:20:59.1767047 UTC-04:00] [7172:4324] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 done [2026-08-11 23:20:59.1767122 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\cloughec\desktop\ [2026-08-11 23:20:59.1767174 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\cloughec\documents\ [2026-08-11 23:20:59.1767203 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\cloughec\favorites\ [2026-08-11 23:20:59.1767230 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\cloughec\music\ [2026-08-11 23:20:59.1767256 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\cloughec\pictures\ [2026-08-11 23:20:59.1767278 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\cloughec\videos\ [2026-08-11 23:20:59.1767410 UTC-04:00] [7172:4324] [fcmonitor 16 debug] add session=1 ret=1 str=C:\Users\cloughec\Desktop\;C:\Users\cloughec\Documents\;C:\Users\cloughec\Favorites\;C:\Users\cloughec\Music\;C:\Users\cloughec\Pictures\;C:\Users\cloughec\Videos\ [2026-08-11 23:20:59.1767563 UTC-04:00] [7172:4324] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-11 23:20:59.1767598 UTC-04:00] [7172:4324] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-11 23:20:59.1770893 UTC-04:00] [7172:4324] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 188216336384 499455451136 188216336384 [2026-08-11 23:20:59.1770967 UTC-04:00] [7172:4324] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-11 23:21:00.9596539 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 11000 \SystemRoot\System32\Conhost.exe [2026-08-11 23:21:00.9596780 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 11000 \SystemRoot\System32\Conhost.exe [2026-08-11 23:21:02.1035976 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 11148 \??\C:\Windows\system32\igfxEM.exe [2026-08-11 23:21:02.1036088 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 11148 C:\Windows\system32\igfxEM.exe [2026-08-11 23:21:02.8489280 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 11200 \??\C:\Windows\system32\igfxHK.exe [2026-08-11 23:21:02.8489405 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 11200 C:\Windows\system32\igfxHK.exe [2026-08-11 23:21:03.5300863 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 10728 \??\C:\Windows\system32\igfxTray.exe [2026-08-11 23:21:03.5300968 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 10728 C:\Windows\system32\igfxTray.exe [2026-08-11 23:21:06.0474388 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 11448 \??\C:\Windows\system32\userinit.exe [2026-08-11 23:21:06.0474488 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 11448 C:\Windows\system32\userinit.exe [2026-08-11 23:21:06.7931906 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 11492 \??\C:\Windows\Explorer.EXE [2026-08-11 23:21:06.7932012 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 11492 C:\Windows\Explorer.EXE [2026-08-11 23:21:36.1216653 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 3188 \??\C:\Windows\system32\wlrmdr.exe [2026-08-11 23:21:36.1216906 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 3188 C:\Windows\system32\wlrmdr.exe [2026-08-11 23:21:40.2053322 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 13760 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-11 23:21:40.2053505 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 13760 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-11 23:21:40.9707750 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 13632 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-11 23:21:40.9707853 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 13632 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-11 23:21:41.7102520 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 2028 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.251.23\MicrosoftEdgeUpdateCore.exe [2026-08-11 23:21:41.7102635 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 2028 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.251.23\MicrosoftEdgeUpdateCore.exe [2026-08-11 23:21:41.9445744 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 14188 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-11 23:21:41.9445849 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 14188 C:\Windows\SysWOW64\runonce.exe [2026-08-11 23:21:42.2127749 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 7972 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-11 23:21:42.2127863 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 7972 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-11 23:21:43.7460411 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 4868 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-11 23:21:43.7460519 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 4868 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-11 23:21:44.1240589 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 1312 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-11 23:21:44.1240695 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 1312 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-11 23:21:44.2263203 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 12720 \??\C:\Windows\System32\cmd.exe [2026-08-11 23:21:44.2263299 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 12720 C:\Windows\System32\cmd.exe [2026-08-11 23:21:44.2656434 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 10676 \SystemRoot\System32\Conhost.exe [2026-08-11 23:21:44.2656576 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 10676 \SystemRoot\System32\Conhost.exe [2026-08-11 23:21:44.4358790 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 8616 \??\C:\Windows\System32\cmd.exe [2026-08-11 23:21:44.4358887 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 8616 C:\Windows\System32\cmd.exe [2026-08-11 23:21:44.5096526 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 9624 \SystemRoot\System32\Conhost.exe [2026-08-11 23:21:44.5096626 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 9624 \SystemRoot\System32\Conhost.exe [2026-08-11 23:21:45.2177105 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 2824 \??\C:\Windows\System32\cmd.exe [2026-08-11 23:21:45.2177201 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 2824 C:\Windows\System32\cmd.exe [2026-08-11 23:21:45.3435798 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 2780 \SystemRoot\System32\Conhost.exe [2026-08-11 23:21:45.3435944 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 2780 \SystemRoot\System32\Conhost.exe [2026-08-11 23:22:44.1854271 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 11560 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-11 23:22:44.1854653 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 11560 C:\IMC\MPS\IMCMobil.exe [2026-08-11 23:22:45.2564185 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 10620 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-11 23:22:45.2564283 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 10620 C:\IMC\MPS\iIMCMobl.exe [2026-08-11 23:22:57.0047102 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 8356 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-11 23:22:57.0047299 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 8356 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-11 23:23:24.1827981 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 14016 \??\C:\Windows\splwow64.exe [2026-08-11 23:23:24.1828152 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 14016 C:\Windows\splwow64.exe [2026-08-11 23:23:39.5854580 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 13484 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:23:39.5854811 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 13484 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:23:43.6147244 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 12652 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:23:43.6147386 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 12652 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:23:47.6453526 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 10780 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:23:47.6453667 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 10780 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:23:47.6466086 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 2700 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:23:47.6466169 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 2700 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:23:47.6634977 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 10604 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:23:47.6635077 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 10604 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:23:47.6790888 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 9552 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:23:47.6790989 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 9552 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:23:47.6814858 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 7672 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:23:47.6814961 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 7672 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:23:47.6832431 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 2064 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:23:47.6832526 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 2064 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:24:13.9890071 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 3656 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:24:13.9894153 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 3656 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:24:45.2581661 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 7448 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:24:45.2582108 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 7448 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:24:45.2663491 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 4604 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:24:45.2663593 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 4604 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:24:45.8317090 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 2728 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:24:45.8317199 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 2728 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:24:46.0446914 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 4212 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-11 23:24:46.0447019 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 4212 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-11 23:24:46.2476914 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 1044 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-11 23:24:46.2477034 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 1044 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-11 23:25:24.3400805 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 11800 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:25:24.3401070 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 11800 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:25:25.6203621 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 13716 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:25:25.6203791 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 13716 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:25:32.5327426 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 9616 \??\C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-11 23:25:32.5327784 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 9616 C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-11 23:25:43.9906384 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 11104 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:25:43.9906625 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 11104 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:30:21.8754676 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 11124 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-11 23:30:21.8755490 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 11124 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 00:00:28.8462631 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 14944 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\OneDrive.Sync.Service.exe [2026-08-12 00:00:28.8462922 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 14944 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\OneDrive.Sync.Service.exe [2026-08-12 00:18:06.1851032 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 14984 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\Install\{2F09180A-0A6E-4065-AA00-7DE2A15B511B}\MicrosoftEdge_X64_151.0.41 [2026-08-12 00:18:06.1851379 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 14984 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\Install\{2F09180A-0A6E-4065-AA00-7DE2A15B511B}\MicrosoftEdge_X64_151.0.41 [2026-08-12 00:18:06.5143046 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 16112 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\Install\{2F09180A-0A6E-4065-AA00-7DE2A15B511B}\EDGEMITMP_4B80F.tmp\setup. [2026-08-12 00:18:06.5143205 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 16112 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\Install\{2F09180A-0A6E-4065-AA00-7DE2A15B511B}\EDGEMITMP_4B80F.tmp\setup. [2026-08-12 00:19:15.7285801 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 14552 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-12 00:19:15.7286269 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 14552 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-12 00:41:29.1043294 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 17020 \SystemRoot\System32\Conhost.exe [2026-08-12 00:41:29.1043859 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 17020 \SystemRoot\System32\Conhost.exe [2026-08-12 01:57:24.0026375 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 21776 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-12 01:57:24.0026707 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 21776 C:\IMC\RMS\TRAFFIC.EXE [2026-08-12 01:57:30.2883035 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 22652 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 01:57:30.2883273 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 22652 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 01:57:32.1426532 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 22988 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 01:57:32.1426661 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 22988 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 01:57:33.4112801 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 23168 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 01:57:33.4112902 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 23168 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 01:57:33.8393046 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 23344 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 01:57:33.8393209 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 23344 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 01:57:38.4714626 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 23116 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 01:57:38.4714744 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 23116 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 01:57:39.3963410 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 23044 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 01:57:39.3963753 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 23044 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 01:57:39.4512782 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 23560 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 01:57:39.4512920 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 23560 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 01:57:43.5947323 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 23732 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 01:57:43.5947477 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 23732 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 02:08:26.9589182 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 21056 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-12 02:08:26.9589504 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 21056 C:\IMC\RMS\TRAFFIC.EXE [2026-08-12 02:15:42.5640658 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 23524 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-12 02:15:42.5641230 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 23524 C:\IMC\RMS\TRAFFIC.EXE [2026-08-12 02:41:29.1011952 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 26272 \SystemRoot\System32\Conhost.exe [2026-08-12 02:41:29.1012274 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 26272 \SystemRoot\System32\Conhost.exe [2026-08-12 03:39:09.0278927 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 29208 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-12 03:39:09.0279412 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 29208 C:\IMC\RMS\TRAFFIC.EXE [2026-08-12 04:07:45.9649757 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 31236 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-12 04:07:45.9650154 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 31236 C:\IMC\RMS\TRAFFIC.EXE [2026-08-12 04:41:30.1927380 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 32312 \SystemRoot\System32\Conhost.exe [2026-08-12 04:41:30.1927911 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 32312 \SystemRoot\System32\Conhost.exe [2026-08-12 05:27:54.1898940 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 34692 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-12 05:27:54.1899335 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 34692 C:\IMC\MPS\IMCMobil.exe [2026-08-12 05:27:54.8487569 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 36856 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-12 05:27:54.8487680 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 36856 C:\IMC\MPS\iIMCMobl.exe [2026-08-12 05:28:02.4200694 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 14240 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-12 05:28:02.4200926 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 14240 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-12 05:45:11.3042516 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 36512 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 05:45:11.3042855 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 36512 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 05:45:22.1998813 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 38264 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 05:45:22.1999067 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 38264 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 05:45:22.2468139 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 38292 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 05:45:22.2468261 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 38292 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 05:45:22.2725850 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 38320 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 05:45:22.2725983 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 38320 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 05:45:24.9109073 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 38532 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 05:45:24.9109191 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 38532 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 05:45:24.9624561 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 38560 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 05:45:24.9624689 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 38560 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 05:46:31.8762050 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 35932 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-12 05:46:31.8762365 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 35932 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-12 05:46:32.2944077 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 38500 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-12 05:46:32.2944298 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 38500 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-12 05:46:40.1524278 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 37664 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-12 05:46:40.1524411 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 37664 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-12 05:46:40.1541239 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 33824 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-12 05:46:40.1541342 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 33824 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-12 05:46:40.1642173 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 37924 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-12 05:46:40.1642287 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 37924 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-12 05:46:40.1677253 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 37100 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-12 05:46:40.1677361 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 37100 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-12 05:50:18.5301864 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 33888 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-12 05:50:18.5303129 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 33888 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-12 06:27:34.9836382 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 41156 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 06:27:34.9837340 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 41156 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 06:27:35.2457305 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 41220 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 06:27:35.2457396 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 41220 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 06:27:35.4171107 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 41396 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 06:27:35.4171236 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 41396 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 06:27:35.4184169 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 41404 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 06:27:35.4184249 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 41404 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 06:27:35.5297789 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 41472 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 06:27:35.5297933 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 41472 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 06:27:35.7250081 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 41540 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 06:27:35.7250235 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 41540 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 06:27:37.4740031 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 696 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-12 06:27:37.4740134 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 696 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-12 06:27:37.5094673 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 11832 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-12 06:27:37.5094784 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 11832 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.72\identity_helper.exe [2026-08-12 06:28:05.4222325 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 5364 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 06:28:05.4222541 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 5364 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 06:28:36.2987673 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 38428 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 06:28:36.2987946 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 38428 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 06:29:35.4119105 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 40980 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 06:29:35.4119354 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 40980 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 06:41:30.2059098 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 41108 \SystemRoot\System32\Conhost.exe [2026-08-12 06:41:30.2059523 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 41108 \SystemRoot\System32\Conhost.exe [2026-08-12 06:53:09.1477095 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 40056 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-12 06:53:09.1477302 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 40056 C:\Windows\SysWOW64\WerFault.exe [2026-08-12 06:53:23.3539476 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 5972 \??\C:\Windows\system32\LogonUI.exe [2026-08-12 06:53:23.3539726 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 5972 C:\Windows\system32\LogonUI.exe [2026-08-12 06:53:32.8888022 UTC-04:00] [7172:4324] [fcmonitor 90 debug] session change reason=6 session=1 [2026-08-12 06:53:32.8888242 UTC-04:00] [7172:4324] [fcmonitor 117 debug] add reason=6 session=1 ret=1 [2026-08-12 06:53:33.2047376 UTC-04:00] [7172:4324] [fcmonitor 90 debug] session change reason=2 session=1 [2026-08-12 06:53:33.2047440 UTC-04:00] [7172:4324] [fcmonitor 117 debug] add reason=2 session=1 ret=1 [2026-08-12 06:53:33.3551093 UTC-04:00] [7172:6612] [fcmonitor 475 warning] session 2 not init [2026-08-12 06:53:33.3662674 UTC-04:00] [7172:6612] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-12 06:53:33.3663637 UTC-04:00] [7172:6612] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-12 06:53:33.3664415 UTC-04:00] [7172:6612] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-12 06:53:33.3665145 UTC-04:00] [7172:6612] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-12 06:53:33.3665878 UTC-04:00] [7172:6612] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-12 06:53:33.3666581 UTC-04:00] [7172:6612] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-12 06:53:33.3666717 UTC-04:00] [7172:6612] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-12 06:53:33.3666762 UTC-04:00] [7172:6612] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-12 06:53:33.3666791 UTC-04:00] [7172:6612] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-12 06:53:33.3666833 UTC-04:00] [7172:6612] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-12 06:53:33.3666861 UTC-04:00] [7172:6612] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-12 06:53:33.3666887 UTC-04:00] [7172:6612] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-12 06:53:34.8236365 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 41728 \??\C:\Windows\system32\LogonUI.exe [2026-08-12 06:53:34.8236468 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 41728 C:\Windows\system32\LogonUI.exe [2026-08-12 06:53:34.8246984 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 41764 \??\C:\Windows\system32\dwm.exe [2026-08-12 06:53:34.8247155 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 41764 C:\Windows\system32\dwm.exe [2026-08-12 06:53:34.9109458 UTC-04:00] [7172:4324] [fcmonitor 90 debug] session change reason=1 session=2 [2026-08-12 06:53:34.9111589 UTC-04:00] [7172:4324] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-12 06:53:34.9255278 UTC-04:00] [7172:4324] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-12 06:53:34.9256398 UTC-04:00] [7172:4324] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-12 06:53:34.9257464 UTC-04:00] [7172:4324] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-12 06:53:34.9258514 UTC-04:00] [7172:4324] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-12 06:53:34.9259558 UTC-04:00] [7172:4324] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-12 06:53:34.9260592 UTC-04:00] [7172:4324] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-12 06:53:34.9260790 UTC-04:00] [7172:4324] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-12 06:53:34.9260906 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-12 06:53:34.9261011 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-12 06:53:34.9261103 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-12 06:53:34.9261195 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-12 06:53:34.9261287 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-12 06:53:34.9261378 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-12 06:53:34.9261606 UTC-04:00] [7172:4324] [fcmonitor 16 debug] add session=2 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-12 06:53:34.9261954 UTC-04:00] [7172:4324] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-12 06:53:34.9262067 UTC-04:00] [7172:4324] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-12 06:53:34.9264637 UTC-04:00] [7172:4324] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 187840069632 499455451136 187840069632 [2026-08-12 06:53:34.9264741 UTC-04:00] [7172:4324] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-12 06:53:35.2785295 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 41740 \??\C:\Windows\system32\fontdrvhost.exe [2026-08-12 06:53:35.2785400 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 41740 C:\Windows\system32\fontdrvhost.exe [2026-08-12 08:10:06.0583084 UTC-04:00] [7172:4324] [fcmonitor 90 debug] session change reason=5 session=2 [2026-08-12 08:10:06.0584794 UTC-04:00] [7172:4324] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-12 08:10:06.0704411 UTC-04:00] [7172:4324] [fcmonitor 228 info] parsed to C:\Users\RizziP\Desktop\ for session 2 [2026-08-12 08:10:06.0724321 UTC-04:00] [7172:4324] [fcmonitor 228 info] parsed to C:\Users\RizziP\Documents\ for session 2 [2026-08-12 08:10:06.0743727 UTC-04:00] [7172:4324] [fcmonitor 228 info] parsed to C:\Users\RizziP\Favorites\ for session 2 [2026-08-12 08:10:06.0763081 UTC-04:00] [7172:4324] [fcmonitor 228 info] parsed to C:\Users\RizziP\Music\ for session 2 [2026-08-12 08:10:06.0781827 UTC-04:00] [7172:4324] [fcmonitor 228 info] parsed to C:\Users\RizziP\Pictures\ for session 2 [2026-08-12 08:10:06.0800477 UTC-04:00] [7172:4324] [fcmonitor 228 info] parsed to C:\Users\RizziP\Videos\ for session 2 [2026-08-12 08:10:06.0800622 UTC-04:00] [7172:4324] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-12 08:10:06.0800680 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\rizzip\desktop\ [2026-08-12 08:10:06.0800726 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\rizzip\documents\ [2026-08-12 08:10:06.0800755 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\rizzip\favorites\ [2026-08-12 08:10:06.0800780 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\rizzip\music\ [2026-08-12 08:10:06.0800809 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\rizzip\pictures\ [2026-08-12 08:10:06.0800854 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\rizzip\videos\ [2026-08-12 08:10:06.0800953 UTC-04:00] [7172:4324] [fcmonitor 16 debug] add session=2 ret=0 str=C:\Users\RizziP\Desktop\;C:\Users\RizziP\Documents\;C:\Users\RizziP\Favorites\;C:\Users\RizziP\Music\;C:\Users\RizziP\Pictures\;C:\Users\RizziP\Videos\ [2026-08-12 08:10:06.0801099 UTC-04:00] [7172:4324] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-12 08:10:06.0801133 UTC-04:00] [7172:4324] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-12 08:10:06.0802934 UTC-04:00] [7172:4324] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 187838988288 499455451136 187838988288 [2026-08-12 08:10:06.0802997 UTC-04:00] [7172:4324] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-12 08:10:06.8092253 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 44732 \SystemRoot\System32\Conhost.exe [2026-08-12 08:10:06.8092385 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 44732 \SystemRoot\System32\Conhost.exe [2026-08-12 08:10:07.9263879 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 45128 \??\C:\Windows\system32\igfxEM.exe [2026-08-12 08:10:07.9263993 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 45128 C:\Windows\system32\igfxEM.exe [2026-08-12 08:10:07.9755888 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 45160 \??\C:\Windows\system32\igfxHK.exe [2026-08-12 08:10:07.9755988 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 45160 C:\Windows\system32\igfxHK.exe [2026-08-12 08:10:08.0224757 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 45172 \??\C:\Windows\system32\igfxTray.exe [2026-08-12 08:10:08.0224858 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 45172 C:\Windows\system32\igfxTray.exe [2026-08-12 08:10:08.5467942 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 45364 \??\C:\Windows\system32\userinit.exe [2026-08-12 08:10:08.5468041 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 45364 C:\Windows\system32\userinit.exe [2026-08-12 08:10:08.6920682 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 45456 \??\C:\Windows\Explorer.EXE [2026-08-12 08:10:08.6920794 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 45456 C:\Windows\Explorer.EXE [2026-08-12 08:10:34.9660286 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 42172 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-12 08:10:34.9660536 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 42172 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-12 08:10:36.2039719 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 47648 \??\C:\Users\RizziP\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-12 08:10:36.2039874 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 47648 C:\Users\RizziP\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-12 08:10:37.8526913 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 47472 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 08:10:37.8527035 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 47472 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 08:10:38.1212451 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 47532 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 08:10:38.1212560 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 47532 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 08:10:38.3616307 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 39748 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 08:10:38.3616419 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 39748 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 08:10:38.4089859 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 43444 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 08:10:38.4089966 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 43444 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 08:10:38.6009897 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 48132 \??\C:\Windows\system32\wlrmdr.exe [2026-08-12 08:10:38.6010015 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 48132 C:\Windows\system32\wlrmdr.exe [2026-08-12 08:10:39.1337049 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 48308 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 08:10:39.1337651 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 48308 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 08:10:39.5135467 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 48344 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 08:10:39.5135627 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 48344 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 08:10:41.3242724 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 48724 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-12 08:10:41.3242957 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 48724 C:\Windows\SysWOW64\runonce.exe [2026-08-12 08:10:41.6352512 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 48852 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-12 08:10:41.6352653 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 48852 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-12 08:10:42.1808407 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 48912 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-12 08:10:42.1808524 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 48912 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-12 08:10:45.3366126 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 49112 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-12 08:10:45.3366249 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 49112 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-12 08:10:50.8297501 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 48620 \??\C:\Windows\System32\cmd.exe [2026-08-12 08:10:50.8297732 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 48620 C:\Windows\System32\cmd.exe [2026-08-12 08:10:50.8676096 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 4336 \SystemRoot\System32\Conhost.exe [2026-08-12 08:10:50.8676192 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 4336 \SystemRoot\System32\Conhost.exe [2026-08-12 08:10:50.9361532 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 48832 \??\C:\Windows\System32\cmd.exe [2026-08-12 08:10:50.9361636 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 48832 C:\Windows\System32\cmd.exe [2026-08-12 08:10:51.0083336 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 46040 \SystemRoot\System32\Conhost.exe [2026-08-12 08:10:51.0083442 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 46040 \SystemRoot\System32\Conhost.exe [2026-08-12 08:10:51.2342574 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 15472 \??\C:\Windows\System32\cmd.exe [2026-08-12 08:10:51.2342684 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 15472 C:\Windows\System32\cmd.exe [2026-08-12 08:10:51.3676291 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 48160 \SystemRoot\System32\Conhost.exe [2026-08-12 08:10:51.3676401 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 48160 \SystemRoot\System32\Conhost.exe [2026-08-12 08:11:23.7174670 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 46092 \??\C:\Users\RizziP\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-12 08:11:23.7174900 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 46092 C:\Users\RizziP\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-12 08:11:30.4339766 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 48736 \??\C:\Users\RizziP\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-12 08:11:30.4339971 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 48736 C:\Users\RizziP\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-12 08:11:37.2941535 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 48652 \??\C:\Windows\system32\LogonUI.exe [2026-08-12 08:11:37.2941643 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 48652 C:\Windows\system32\LogonUI.exe [2026-08-12 08:11:45.1916998 UTC-04:00] [7172:4324] [fcmonitor 90 debug] session change reason=6 session=2 [2026-08-12 08:11:45.1917188 UTC-04:00] [7172:4324] [fcmonitor 117 debug] add reason=6 session=2 ret=1 [2026-08-12 08:11:45.4956407 UTC-04:00] [7172:4324] [fcmonitor 90 debug] session change reason=2 session=2 [2026-08-12 08:11:45.4956477 UTC-04:00] [7172:4324] [fcmonitor 117 debug] add reason=2 session=2 ret=1 [2026-08-12 08:11:45.5948036 UTC-04:00] [7172:6612] [fcmonitor 475 warning] session 3 not init [2026-08-12 08:11:45.6230170 UTC-04:00] [7172:6612] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-12 08:11:45.6231119 UTC-04:00] [7172:6612] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 3 [2026-08-12 08:11:45.6231892 UTC-04:00] [7172:6612] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 3 [2026-08-12 08:11:45.6232617 UTC-04:00] [7172:6612] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 3 [2026-08-12 08:11:45.6233313 UTC-04:00] [7172:6612] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 3 [2026-08-12 08:11:45.6233975 UTC-04:00] [7172:6612] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 3 [2026-08-12 08:11:45.6234117 UTC-04:00] [7172:6612] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-12 08:11:45.6234160 UTC-04:00] [7172:6612] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-12 08:11:45.6234189 UTC-04:00] [7172:6612] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-12 08:11:45.6234216 UTC-04:00] [7172:6612] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-12 08:11:45.6234244 UTC-04:00] [7172:6612] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-12 08:11:45.6234272 UTC-04:00] [7172:6612] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-12 08:11:45.8262660 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 43320 \??\C:\Windows\system32\LogonUI.exe [2026-08-12 08:11:45.8262767 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 43320 C:\Windows\system32\LogonUI.exe [2026-08-12 08:11:45.8274357 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 43248 \??\C:\Windows\system32\dwm.exe [2026-08-12 08:11:45.8274444 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 43248 C:\Windows\system32\dwm.exe [2026-08-12 08:11:45.8862706 UTC-04:00] [7172:4324] [fcmonitor 90 debug] session change reason=1 session=3 [2026-08-12 08:11:45.8864519 UTC-04:00] [7172:4324] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-12 08:11:45.9002736 UTC-04:00] [7172:4324] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-12 08:11:45.9003638 UTC-04:00] [7172:4324] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 3 [2026-08-12 08:11:45.9004471 UTC-04:00] [7172:4324] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 3 [2026-08-12 08:11:45.9005269 UTC-04:00] [7172:4324] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 3 [2026-08-12 08:11:45.9006083 UTC-04:00] [7172:4324] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 3 [2026-08-12 08:11:45.9006812 UTC-04:00] [7172:4324] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 3 [2026-08-12 08:11:45.9006908 UTC-04:00] [7172:4324] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 done [2026-08-12 08:11:45.9006965 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-12 08:11:45.9007012 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-12 08:11:45.9007051 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-12 08:11:45.9007089 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-12 08:11:45.9007125 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-12 08:11:45.9007157 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-12 08:11:45.9007304 UTC-04:00] [7172:4324] [fcmonitor 16 debug] add session=3 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-12 08:11:45.9007590 UTC-04:00] [7172:4324] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-12 08:11:45.9007702 UTC-04:00] [7172:4324] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-12 08:11:45.9011092 UTC-04:00] [7172:4324] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 187439939584 499455451136 187439939584 [2026-08-12 08:11:45.9011177 UTC-04:00] [7172:4324] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-12 08:11:46.2170408 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 48560 \??\C:\Windows\system32\fontdrvhost.exe [2026-08-12 08:11:46.2170516 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 48560 C:\Windows\system32\fontdrvhost.exe [2026-08-12 14:42:14.1970162 UTC-04:00] [7172:4324] [fcmonitor 90 debug] session change reason=5 session=3 [2026-08-12 14:42:14.1971977 UTC-04:00] [7172:4324] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-12 14:42:14.2080160 UTC-04:00] [7172:4324] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Desktop\ for session 3 [2026-08-12 14:42:14.2099347 UTC-04:00] [7172:4324] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Documents\ for session 3 [2026-08-12 14:42:14.2119561 UTC-04:00] [7172:4324] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Favorites\ for session 3 [2026-08-12 14:42:14.2138952 UTC-04:00] [7172:4324] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Music\ for session 3 [2026-08-12 14:42:14.2158186 UTC-04:00] [7172:4324] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Pictures\ for session 3 [2026-08-12 14:42:14.2195203 UTC-04:00] [7172:4324] [fcmonitor 228 info] parsed to C:\Users\haskinsh\Videos\ for session 3 [2026-08-12 14:42:14.2195371 UTC-04:00] [7172:4324] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 done [2026-08-12 14:42:14.2195443 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\haskinsh\desktop\ [2026-08-12 14:42:14.2195488 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\haskinsh\documents\ [2026-08-12 14:42:14.2195516 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\haskinsh\favorites\ [2026-08-12 14:42:14.2195542 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\haskinsh\music\ [2026-08-12 14:42:14.2195568 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\haskinsh\pictures\ [2026-08-12 14:42:14.2195592 UTC-04:00] [7172:4324] [fcmonitor 435 info] add c:\users\haskinsh\videos\ [2026-08-12 14:42:14.2195706 UTC-04:00] [7172:4324] [fcmonitor 16 debug] add session=3 ret=0 str=C:\Users\haskinsh\Desktop\;C:\Users\haskinsh\Documents\;C:\Users\haskinsh\Favorites\;C:\Users\haskinsh\Music\;C:\Users\haskinsh\Pictures\;C:\Users\haskinsh\Videos\ [2026-08-12 14:42:14.2195865 UTC-04:00] [7172:4324] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-12 14:42:14.2195896 UTC-04:00] [7172:4324] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-12 14:42:14.2198830 UTC-04:00] [7172:4324] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 187891810304 499455451136 187891810304 [2026-08-12 14:42:14.2198914 UTC-04:00] [7172:4324] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-12 14:42:15.2772272 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 70196 \SystemRoot\System32\Conhost.exe [2026-08-12 14:42:15.2772415 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 70196 \SystemRoot\System32\Conhost.exe [2026-08-12 14:42:15.5689330 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 70496 \??\C:\Windows\system32\igfxEM.exe [2026-08-12 14:42:15.5689438 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 70496 C:\Windows\system32\igfxEM.exe [2026-08-12 14:42:15.6646455 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 70536 \??\C:\Windows\system32\igfxHK.exe [2026-08-12 14:42:15.6646551 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 70536 C:\Windows\system32\igfxHK.exe [2026-08-12 14:42:15.7575851 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 70588 \??\C:\Windows\system32\igfxTray.exe [2026-08-12 14:42:15.7575965 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 70588 C:\Windows\system32\igfxTray.exe [2026-08-12 14:42:16.2730114 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 70356 \??\C:\Windows\system32\userinit.exe [2026-08-12 14:42:16.2730224 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 70356 C:\Windows\system32\userinit.exe [2026-08-12 14:42:16.3651341 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 41036 \??\C:\Windows\Explorer.EXE [2026-08-12 14:42:16.3651482 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 41036 C:\Windows\Explorer.EXE [2026-08-12 14:42:39.5405135 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 66140 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-12 14:42:39.5405395 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 66140 C:\IMC\MPS\IMCMobil.exe [2026-08-12 14:42:40.4459217 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 69056 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-12 14:42:40.4459332 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 69056 C:\IMC\MPS\iIMCMobl.exe [2026-08-12 14:42:42.6981831 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 73520 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-12 14:42:42.6982134 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 73520 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-12 14:42:43.0128554 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 73492 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-12 14:42:43.0128661 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 73492 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-12 14:42:43.9806400 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 66136 \??\C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-12 14:42:43.9806503 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 66136 C:\Users\haskinsh\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-12 14:42:44.6682328 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 73368 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-12 14:42:44.6682481 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 73368 C:\Windows\SysWOW64\runonce.exe [2026-08-12 14:42:45.0248010 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 66092 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-12 14:42:45.0248121 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 66092 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-12 14:42:45.0498557 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 66108 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-12 14:42:45.0498663 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 66108 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-12 14:42:45.4960379 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 65800 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-12 14:42:45.4960492 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 65800 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-12 14:42:46.3001897 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 73488 \??\C:\Windows\system32\wlrmdr.exe [2026-08-12 14:42:46.3002007 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 73488 C:\Windows\system32\wlrmdr.exe [2026-08-12 14:42:47.1278025 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 65808 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-12 14:42:47.1278132 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 65808 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-12 14:42:48.2686863 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 66012 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-12 14:42:48.2686976 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 66012 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-12 14:42:48.7919413 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 69144 \??\C:\Windows\System32\cmd.exe [2026-08-12 14:42:48.7919516 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 69144 C:\Windows\System32\cmd.exe [2026-08-12 14:42:48.8151281 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 70952 \SystemRoot\System32\Conhost.exe [2026-08-12 14:42:48.8151392 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 70952 \SystemRoot\System32\Conhost.exe [2026-08-12 14:42:48.9556402 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 71932 \??\C:\Windows\System32\cmd.exe [2026-08-12 14:42:48.9556587 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 71932 C:\Windows\System32\cmd.exe [2026-08-12 14:42:48.9876000 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 70532 \SystemRoot\System32\Conhost.exe [2026-08-12 14:42:48.9876111 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 70532 \SystemRoot\System32\Conhost.exe [2026-08-12 14:42:49.3197190 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 73672 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-12 14:42:49.3197286 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 73672 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-12 14:42:49.3462308 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 65960 \??\C:\Windows\System32\cmd.exe [2026-08-12 14:42:49.3462416 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 65960 C:\Windows\System32\cmd.exe [2026-08-12 14:42:49.3803847 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 73364 \SystemRoot\System32\Conhost.exe [2026-08-12 14:42:49.3803954 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 73364 \SystemRoot\System32\Conhost.exe [2026-08-12 14:42:51.4263158 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 69144 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-12 14:42:51.4263365 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 69144 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-12 14:42:53.5019392 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 71888 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-12 14:42:53.5019553 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 71888 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-12 14:43:01.2307782 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 74312 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-12 14:43:01.2307968 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 74312 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-12 14:44:34.4627801 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 70860 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-12 14:44:34.4628196 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 70860 C:\IMC\MPS\IMCMobil.exe [2026-08-12 14:44:34.9872547 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 72332 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-12 14:44:34.9872657 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 72332 C:\IMC\MPS\iIMCMobl.exe [2026-08-12 14:44:41.7290630 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 71728 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-12 14:44:41.7290817 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 71728 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-12 14:45:17.3859946 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 68540 \??\C:\Windows\splwow64.exe [2026-08-12 14:45:17.3860149 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 68540 C:\Windows\splwow64.exe [2026-08-12 14:45:27.3297801 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 70360 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:27.3298037 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 70360 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:27.3604638 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 48200 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:27.3604795 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 48200 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:27.5345310 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 73432 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:27.5345413 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 73432 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:27.7323030 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 72840 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:27.7323134 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 72840 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:27.7338416 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 71920 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:27.7338502 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 71920 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:27.8972031 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 69328 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:27.8972138 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 69328 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:28.2540279 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 70344 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:28.2540387 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 70344 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:28.2568502 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 70200 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:28.2568594 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 70200 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:28.3232901 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 72540 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:28.3233009 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 72540 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:28.5983563 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 74444 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:28.5983691 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 74444 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:31.8586330 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 68980 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:31.8586670 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 68980 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:33.3245722 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 72300 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-12 14:45:33.3245831 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 72300 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-12 14:45:33.5644478 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 71668 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-12 14:45:33.5645821 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 71668 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-12 14:45:35.7114317 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 71664 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:35.7114455 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 71664 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:37.2828877 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 66048 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:37.2828997 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 66048 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:57.7080781 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 65944 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:45:57.7081049 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 65944 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:46:27.8861740 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 71032 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:46:27.8861943 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 71032 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:47:27.7191384 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 71628 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:47:27.7191648 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 71628 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:48:28.2462429 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 65852 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:48:28.2462691 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 65852 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:50:30.4628272 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 46832 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 14:50:30.4628538 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 46832 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 16:41:30.8098994 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 75268 \SystemRoot\System32\Conhost.exe [2026-08-12 16:41:30.8099419 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 75268 \SystemRoot\System32\Conhost.exe [2026-08-12 18:41:30.8259358 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 87868 \SystemRoot\System32\Conhost.exe [2026-08-12 18:41:30.8259577 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 87868 \SystemRoot\System32\Conhost.exe [2026-08-12 19:49:59.9011785 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 90424 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-12 19:49:59.9012163 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 90424 C:\IMC\RMS\TRAFFIC.EXE [2026-08-12 19:51:14.1471734 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 91256 \??\C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe [2026-08-12 19:51:14.1471974 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 91256 C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe [2026-08-12 19:51:14.1789677 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 90104 \SystemRoot\System32\Conhost.exe [2026-08-12 19:51:14.1789799 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 90104 \SystemRoot\System32\Conhost.exe [2026-08-12 19:51:15.0690103 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 90776 \??\C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe [2026-08-12 19:51:15.0690271 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 90776 C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe [2026-08-12 20:10:05.7502678 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 93336 \??\C:\IMC\RMS\RECORDS.EXE [2026-08-12 20:10:05.7503179 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 93336 C:\IMC\RMS\RECORDS.EXE [2026-08-12 20:41:30.8293334 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 94760 \SystemRoot\System32\Conhost.exe [2026-08-12 20:41:30.8293731 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 94760 \SystemRoot\System32\Conhost.exe [2026-08-12 21:57:26.8909216 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 100140 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 21:57:26.8909680 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 100140 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 21:57:28.5879230 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 98100 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 21:57:28.5879671 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 98100 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 21:58:04.6452245 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 97324 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 21:58:04.6452492 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 97324 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 21:58:08.0299668 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 100336 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 21:58:08.0299802 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 100336 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 21:58:08.0625804 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 98880 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 21:58:08.0625917 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 98880 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 22:41:31.2354636 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 103276 \SystemRoot\System32\Conhost.exe [2026-08-12 22:41:31.2355016 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 103276 \SystemRoot\System32\Conhost.exe [2026-08-12 22:41:52.4788415 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 102168 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 22:41:52.4788669 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 102168 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 22:41:52.6663272 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 102984 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 22:41:52.6663380 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 102984 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 22:41:52.8528662 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 100860 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 22:41:52.8528761 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 100860 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 22:41:52.8540265 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 102636 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 22:41:52.8540348 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 102636 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 22:41:52.9386085 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 98872 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 22:41:52.9386224 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 98872 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 22:41:53.1778205 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 91772 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 22:41:53.1778307 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 91772 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-12 22:41:56.1189464 UTC-04:00] [7172:6612] [fcmonitor 332 debug] proc cache add 73620 \??\C:\Windows\system32\LogonUI.exe [2026-08-12 22:41:56.1189575 UTC-04:00] [7172:6612] [fcmonitor 99 info] add pid 73620 C:\Windows\system32\LogonUI.exe [2026-08-12 22:42:00.7862835 UTC-04:00] [7172:4324] [fcmonitor 90 debug] session change reason=6 session=3 [2026-08-12 22:42:00.7862930 UTC-04:00] [7172:4324] [fcmonitor 117 debug] add reason=6 session=3 ret=1 [2026-08-12 22:43:31.4047103 UTC-04:00] [3608:4656] [fcmonitor 1249 info] (Time Zone: Eastern Standard Time) (Sun Jun 30 22:28:59 2024, 50s) 2026-08-12 22:43:31.398 type: 0x10f size: 512 memory: 0x0000000000000000 [2026-08-12 22:43:31.4056619 UTC-04:00] [3608:4656] [fcmonitor 78 debug] ems_serial FCTEMS8821002497 [2026-08-12 22:43:31.4070725 UTC-04:00] [3608:4656] [fcmonitor 85 debug] fct_serial FCT8000515779876 [2026-08-12 22:43:31.4072477 UTC-04:00] [3608:4656] [fcmonitor 94 debug] fct_uid 4EF5549DB1674A63BE848553987D4AEE [2026-08-12 22:43:31.4072876 UTC-04:00] [3608:4656] [fcmonitor 103 debug] vdom default [2026-08-12 22:43:31.4073011 UTC-04:00] [3608:4656] [fcmonitor 843 info] InitCryptAlg [2026-08-12 22:43:31.4080058 UTC-04:00] [3608:4656] [fcmonitor 41 info] before LoadSettings [2026-08-12 22:43:31.4453167 UTC-04:00] [3608:4656] [fcmonitor 45 info] folder C:\Users\%USERNAME%\Desktop\ [2026-08-12 22:43:31.4453309 UTC-04:00] [3608:4656] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-12 22:43:31.4532159 UTC-04:00] [3608:4656] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-12 22:43:31.4532913 UTC-04:00] [3608:4656] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 0 [2026-08-12 22:43:31.4533469 UTC-04:00] [3608:4656] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 0 [2026-08-12 22:43:31.4534031 UTC-04:00] [3608:4656] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 0 [2026-08-12 22:43:31.4534624 UTC-04:00] [3608:4656] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 0 [2026-08-12 22:43:31.4535161 UTC-04:00] [3608:4656] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 0 [2026-08-12 22:43:31.4535256 UTC-04:00] [3608:4656] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 done [2026-08-12 22:43:31.4535312 UTC-04:00] [3608:4656] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-12 22:43:31.4535414 UTC-04:00] [3608:4656] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-12 22:43:31.4535445 UTC-04:00] [3608:4656] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-12 22:43:31.4535474 UTC-04:00] [3608:4656] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-12 22:43:31.4535503 UTC-04:00] [3608:4656] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-12 22:43:31.4535530 UTC-04:00] [3608:4656] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-12 22:43:31.4535695 UTC-04:00] [3608:4656] [fcmonitor 16 debug] add session=0 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-12 22:43:31.4717976 UTC-04:00] [3608:4656] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-12 22:43:31.4718044 UTC-04:00] [3608:4656] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-12 22:43:31.4722989 UTC-04:00] [3608:4656] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 188313686016 499455451136 188313686016 [2026-08-12 22:43:31.4723096 UTC-04:00] [3608:4656] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-12 22:43:31.6255007 UTC-04:00] [3608:4656] [fcmonitor 232 info] queue lock 0x3a0 cleanevent 0x3a4 [2026-08-12 22:43:31.6256016 UTC-04:00] [3608:4656] [fcmonitor 245 info] init succeed [2026-08-12 22:43:31.6256048 UTC-04:00] [3608:4656] [fcmonitor 438 info] reading cache [2026-08-12 22:43:31.6849994 UTC-04:00] [3608:4656] [fcmonitor 440 info] getting all proc [2026-08-12 22:43:31.7579910 UTC-04:00] [3608:4656] [fcmonitor 159 debug] getting all proc [2026-08-12 22:43:31.7606957 UTC-04:00] [3608:4656] [fcmonitor 192 warning] GetAllProcTree can't find module 4 System [2026-08-12 22:43:31.8186151 UTC-04:00] [3608:4656] [fcmonitor 192 warning] GetAllProcTree can't find module 100 Registry [2026-08-12 22:43:32.1217368 UTC-04:00] [3608:4656] [fcmonitor 192 warning] GetAllProcTree can't find module 2464 Memory Compression [2026-08-12 22:43:32.6461049 UTC-04:00] [3608:4656] [fcmonitor 192 warning] GetAllProcTree can't find module 628 conhost.exe [2026-08-12 22:43:32.6533204 UTC-04:00] [3608:4656] [fcmonitor 286 debug] getting all proc finished 127 0 [2026-08-12 22:43:32.6533280 UTC-04:00] [3608:4656] [fcmonitor 442 info] finish [2026-08-12 22:43:32.6534336 UTC-04:00] [3608:4656] [fcmonitor 267 info] heap p 0x000001FD33285400 [2026-08-12 22:43:32.6534770 UTC-04:00] [3608:4656] [fcmonitor 267 info] heap p 0x000001FD3328CCF0 [2026-08-12 22:43:32.6535149 UTC-04:00] [3608:4656] [fcmonitor 267 info] heap p 0x000001FD3328D1A0 [2026-08-12 22:43:32.6535933 UTC-04:00] [3608:4656] [fcmonitor 267 info] heap p 0x000001FD3328F8A0 [2026-08-12 22:43:32.6536407 UTC-04:00] [3608:4656] [fcmonitor 267 info] heap p 0x000001FD3328FD70 [2026-08-12 22:43:32.6536791 UTC-04:00] [3608:4656] [fcmonitor 267 info] heap p 0x000001FD3328EF00 [2026-08-12 22:43:32.6537135 UTC-04:00] [3608:4656] [fcmonitor 267 info] heap p 0x000001FD3328EA30 [2026-08-12 22:43:32.6537780 UTC-04:00] [3608:4656] [fcmonitor 267 info] heap p 0x000001FD3328E560 [2026-08-12 22:43:32.6955918 UTC-04:00] [3608:628] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-12 22:43:32.6956675 UTC-04:00] [3608:7824] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-12 22:43:32.6957395 UTC-04:00] [3608:6396] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-12 22:43:32.6958134 UTC-04:00] [3608:8196] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-12 22:43:32.6958956 UTC-04:00] [3608:8200] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-12 22:43:32.6959670 UTC-04:00] [3608:8204] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-12 22:43:32.6960344 UTC-04:00] [3608:8208] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-12 22:43:32.6961077 UTC-04:00] [3608:8212] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-12 22:43:53.4810051 UTC-04:00] [3608:848] [fcmonitor 475 warning] session 1 not init [2026-08-12 22:43:53.4891419 UTC-04:00] [3608:848] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-12 22:43:53.4892016 UTC-04:00] [3608:848] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 1 [2026-08-12 22:43:53.4892513 UTC-04:00] [3608:848] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 1 [2026-08-12 22:43:53.4892981 UTC-04:00] [3608:848] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 1 [2026-08-12 22:43:53.4893462 UTC-04:00] [3608:848] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 1 [2026-08-12 22:43:53.4894172 UTC-04:00] [3608:848] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 1 [2026-08-12 22:43:53.4894291 UTC-04:00] [3608:848] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-12 22:43:53.4894318 UTC-04:00] [3608:848] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-12 22:43:53.4894336 UTC-04:00] [3608:848] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-12 22:43:53.4894355 UTC-04:00] [3608:848] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-12 22:43:53.4894374 UTC-04:00] [3608:848] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-12 22:43:53.4894392 UTC-04:00] [3608:848] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-13 06:49:39.7250877 UTC-04:00] [3608:7120] [fcmonitor 90 debug] session change reason=5 session=1 [2026-08-13 06:49:39.7252996 UTC-04:00] [3608:7120] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-13 06:49:39.7385645 UTC-04:00] [3608:7120] [fcmonitor 228 info] parsed to C:\Users\collinsa\Desktop\ for session 1 [2026-08-13 06:49:39.7415652 UTC-04:00] [3608:7120] [fcmonitor 228 info] parsed to C:\Users\collinsa\Documents\ for session 1 [2026-08-13 06:49:39.7437240 UTC-04:00] [3608:7120] [fcmonitor 228 info] parsed to C:\Users\collinsa\Favorites\ for session 1 [2026-08-13 06:49:39.7455576 UTC-04:00] [3608:7120] [fcmonitor 228 info] parsed to C:\Users\collinsa\Music\ for session 1 [2026-08-13 06:49:39.7474342 UTC-04:00] [3608:7120] [fcmonitor 228 info] parsed to C:\Users\collinsa\Pictures\ for session 1 [2026-08-13 06:49:39.7746646 UTC-04:00] [3608:7120] [fcmonitor 228 info] parsed to C:\Users\collinsa\Videos\ for session 1 [2026-08-13 06:49:39.7746804 UTC-04:00] [3608:7120] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 done [2026-08-13 06:49:39.7746896 UTC-04:00] [3608:7120] [fcmonitor 435 info] add c:\users\collinsa\desktop\ [2026-08-13 06:49:39.7746938 UTC-04:00] [3608:7120] [fcmonitor 435 info] add c:\users\collinsa\documents\ [2026-08-13 06:49:39.7746964 UTC-04:00] [3608:7120] [fcmonitor 435 info] add c:\users\collinsa\favorites\ [2026-08-13 06:49:39.7746987 UTC-04:00] [3608:7120] [fcmonitor 435 info] add c:\users\collinsa\music\ [2026-08-13 06:49:39.7747011 UTC-04:00] [3608:7120] [fcmonitor 435 info] add c:\users\collinsa\pictures\ [2026-08-13 06:49:39.7747037 UTC-04:00] [3608:7120] [fcmonitor 435 info] add c:\users\collinsa\videos\ [2026-08-13 06:49:39.7747159 UTC-04:00] [3608:7120] [fcmonitor 16 debug] add session=1 ret=1 str=C:\Users\collinsa\Desktop\;C:\Users\collinsa\Documents\;C:\Users\collinsa\Favorites\;C:\Users\collinsa\Music\;C:\Users\collinsa\Pictures\;C:\Users\collinsa\Videos\ [2026-08-13 06:49:39.7747292 UTC-04:00] [3608:7120] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-13 06:49:39.7747325 UTC-04:00] [3608:7120] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-13 06:49:39.7749188 UTC-04:00] [3608:7120] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 188354015232 499455451136 188354015232 [2026-08-13 06:49:39.7749320 UTC-04:00] [3608:7120] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-13 06:49:42.0076589 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 39524 \SystemRoot\System32\Conhost.exe [2026-08-13 06:49:42.0076944 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 39524 \SystemRoot\System32\Conhost.exe [2026-08-13 06:49:43.8942816 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 39860 \??\C:\Windows\system32\igfxEM.exe [2026-08-13 06:49:43.8942913 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 39860 C:\Windows\system32\igfxEM.exe [2026-08-13 06:49:44.7051392 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 39900 \??\C:\Windows\system32\igfxHK.exe [2026-08-13 06:49:44.7051488 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 39900 C:\Windows\system32\igfxHK.exe [2026-08-13 06:49:44.8566384 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 39916 \??\C:\Windows\system32\igfxTray.exe [2026-08-13 06:49:44.8566483 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 39916 C:\Windows\system32\igfxTray.exe [2026-08-13 06:49:47.9739754 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 40068 \??\C:\Windows\system32\userinit.exe [2026-08-13 06:49:47.9739858 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 40068 C:\Windows\system32\userinit.exe [2026-08-13 06:49:48.7914196 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 40092 \??\C:\Windows\Explorer.EXE [2026-08-13 06:49:48.7914309 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 40092 C:\Windows\Explorer.EXE [2026-08-13 06:50:18.0783768 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 37312 \??\C:\Windows\system32\wlrmdr.exe [2026-08-13 06:50:18.0784035 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 37312 C:\Windows\system32\wlrmdr.exe [2026-08-13 06:50:23.9752657 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 38024 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-13 06:50:23.9752883 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 38024 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-13 06:50:25.3031422 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 42248 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-13 06:50:25.3031527 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 42248 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-13 06:50:26.6627604 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 42996 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-13 06:50:26.6627703 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 42996 C:\Windows\SysWOW64\runonce.exe [2026-08-13 06:50:27.0685048 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 42780 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-13 06:50:27.0685182 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 42780 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-13 06:50:28.2490758 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 41828 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-13 06:50:28.2490866 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 41828 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-13 06:50:28.5996440 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 41892 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-13 06:50:28.5996533 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 41892 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-13 06:50:29.3454619 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 40504 \??\C:\Windows\System32\cmd.exe [2026-08-13 06:50:29.3454710 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 40504 C:\Windows\System32\cmd.exe [2026-08-13 06:50:29.4281326 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 38168 \SystemRoot\System32\Conhost.exe [2026-08-13 06:50:29.4281428 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 38168 \SystemRoot\System32\Conhost.exe [2026-08-13 06:50:29.5840857 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 37864 \??\C:\Windows\System32\cmd.exe [2026-08-13 06:50:29.5840956 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 37864 C:\Windows\System32\cmd.exe [2026-08-13 06:50:29.7114721 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 37916 \SystemRoot\System32\Conhost.exe [2026-08-13 06:50:29.7114864 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 37916 \SystemRoot\System32\Conhost.exe [2026-08-13 06:50:30.1266101 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 42228 \??\C:\Windows\System32\cmd.exe [2026-08-13 06:50:30.1266209 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 42228 C:\Windows\System32\cmd.exe [2026-08-13 06:50:30.2035687 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 40956 \SystemRoot\System32\Conhost.exe [2026-08-13 06:50:30.2035804 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 40956 \SystemRoot\System32\Conhost.exe [2026-08-13 06:51:17.7441048 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 36916 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-13 06:51:17.7441248 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 36916 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-13 06:51:20.1499040 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 39008 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-13 06:51:20.1499152 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 39008 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-13 06:51:37.4478889 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 38676 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\FileSyncConfig.exe [2026-08-13 06:51:37.4479167 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 38676 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\FileSyncConfig.exe [2026-08-13 06:51:38.7914559 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 41096 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-13 06:51:38.7914657 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 41096 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-13 06:51:44.6479236 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 42580 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\OneDrive.Sync.Service.exe [2026-08-13 06:51:44.6479645 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 42580 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\OneDrive.Sync.Service.exe [2026-08-13 07:11:50.0849212 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 39356 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-13 07:11:50.0849508 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 39356 C:\IMC\MPS\IMCMobil.exe [2026-08-13 07:11:50.7959235 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 40300 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-13 07:11:50.7959334 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 40300 C:\IMC\MPS\iIMCMobl.exe [2026-08-13 07:12:03.1987282 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 38588 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-13 07:12:03.1987510 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 38588 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-13 07:13:24.3367406 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 38272 \??\C:\Windows\splwow64.exe [2026-08-13 07:13:24.3367611 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 38272 C:\Windows\splwow64.exe [2026-08-13 07:13:36.1330010 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 23164 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:36.1330251 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 23164 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:36.3352822 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 23296 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:36.3352955 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 23296 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:40.2202173 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 38016 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:40.2202281 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 38016 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:43.6804378 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 38364 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:43.6804642 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 38364 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:43.6814729 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 40428 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:43.6814805 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 40428 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:43.6825860 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 36712 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:43.6825921 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 36712 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:43.7029984 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 38944 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:43.7030148 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 38944 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:43.7067507 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 43036 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:43.7067649 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 43036 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:43.7084669 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 43044 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:43.7084785 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 43044 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:43.7123793 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 43052 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:43.7123887 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 43052 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:43.7141038 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 43076 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:43.7141134 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 43076 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:46.2900944 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 43500 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:46.2901046 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 43500 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:46.9643096 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 43644 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:46.9643232 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 43644 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:47.9695875 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 43696 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:47.9695993 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 43696 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:49.4681890 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 43972 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 07:13:49.4681986 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 43972 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 07:13:49.6344557 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 44008 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 07:13:49.6344650 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 44008 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 07:13:52.5391925 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 43788 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:52.5392186 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 43788 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:52.5882320 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 42744 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:52.5882928 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 42744 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:55.4599458 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 20032 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:13:55.4599578 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 20032 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:14:07.5757976 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 43864 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:14:07.5758268 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 43864 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:14:09.4770141 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 43280 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:14:09.4770258 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 43280 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:14:10.5349279 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 37900 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:14:10.5349384 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 37900 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:14:14.2454468 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 44216 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:14:14.2454751 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 44216 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:14:14.2887648 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 44244 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:14:14.2887764 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 44244 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:14:14.3425420 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 44268 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:14:14.3425544 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 44268 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:14:41.3200575 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 44796 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:14:41.3200800 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 44796 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:15:40.5289521 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 41708 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:15:40.5289796 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 41708 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:16:41.7085737 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 22596 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:16:41.7085998 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 22596 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:18:47.4269582 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 37296 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:18:47.4270011 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 37296 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:47:07.9874806 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 38464 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:47:07.9875155 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 38464 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:47:12.3433454 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 41988 \??\C:\Windows\system32\msdt.exe [2026-08-13 07:47:12.3433729 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 41988 C:\Windows\system32\msdt.exe [2026-08-13 07:47:13.1289140 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 44472 \SystemRoot\System32\Conhost.exe [2026-08-13 07:47:13.1289256 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 44472 \SystemRoot\System32\Conhost.exe [2026-08-13 07:47:22.5548389 UTC-04:00] [3608:848] [fcmonitor 332 debug] proc cache add 36492 \??\C:\Windows\system32\netsh.exe [2026-08-13 07:47:22.5550263 UTC-04:00] [3608:848] [fcmonitor 99 info] add pid 36492 C:\Windows\system32\netsh.exe [2026-08-13 07:49:10.6248987 UTC-04:00] [2008:7280] [fcmonitor 1249 info] (Time Zone: Eastern Standard Time) (Sun Jun 30 22:28:59 2024, 70s) 2026-08-13 07:49:10.613 type: 0x10f size: 512 memory: 0x0000000000000000 [2026-08-13 07:49:10.6257576 UTC-04:00] [2008:7280] [fcmonitor 78 debug] ems_serial FCTEMS8821002497 [2026-08-13 07:49:10.6291512 UTC-04:00] [2008:7280] [fcmonitor 85 debug] fct_serial FCT8000515779876 [2026-08-13 07:49:10.6292888 UTC-04:00] [2008:7280] [fcmonitor 94 debug] fct_uid 4EF5549DB1674A63BE848553987D4AEE [2026-08-13 07:49:10.6293227 UTC-04:00] [2008:7280] [fcmonitor 103 debug] vdom default [2026-08-13 07:49:10.6293349 UTC-04:00] [2008:7280] [fcmonitor 843 info] InitCryptAlg [2026-08-13 07:49:10.6306377 UTC-04:00] [2008:7280] [fcmonitor 41 info] before LoadSettings [2026-08-13 07:49:10.6307709 UTC-04:00] [2008:7280] [fcmonitor 45 info] folder C:\Users\%USERNAME%\Desktop\ [2026-08-13 07:49:10.6307803 UTC-04:00] [2008:7280] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-13 07:49:10.6394470 UTC-04:00] [2008:7280] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-13 07:49:10.6395271 UTC-04:00] [2008:7280] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 0 [2026-08-13 07:49:10.6395873 UTC-04:00] [2008:7280] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 0 [2026-08-13 07:49:10.6396435 UTC-04:00] [2008:7280] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 0 [2026-08-13 07:49:10.6397035 UTC-04:00] [2008:7280] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 0 [2026-08-13 07:49:10.6397589 UTC-04:00] [2008:7280] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 0 [2026-08-13 07:49:10.6397683 UTC-04:00] [2008:7280] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 done [2026-08-13 07:49:10.6397742 UTC-04:00] [2008:7280] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-13 07:49:10.6397844 UTC-04:00] [2008:7280] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-13 07:49:10.6397880 UTC-04:00] [2008:7280] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-13 07:49:10.6397912 UTC-04:00] [2008:7280] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-13 07:49:10.6397944 UTC-04:00] [2008:7280] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-13 07:49:10.6397974 UTC-04:00] [2008:7280] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-13 07:49:10.6398148 UTC-04:00] [2008:7280] [fcmonitor 16 debug] add session=0 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-13 07:49:10.6455825 UTC-04:00] [2008:7280] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-13 07:49:10.6573402 UTC-04:00] [2008:7280] [fcmonitor 228 info] parsed to C:\Users\collinsa\Desktop\ for session 1 [2026-08-13 07:49:10.6595073 UTC-04:00] [2008:7280] [fcmonitor 228 info] parsed to C:\Users\collinsa\Documents\ for session 1 [2026-08-13 07:49:10.6616699 UTC-04:00] [2008:7280] [fcmonitor 228 info] parsed to C:\Users\collinsa\Favorites\ for session 1 [2026-08-13 07:49:10.6639706 UTC-04:00] [2008:7280] [fcmonitor 228 info] parsed to C:\Users\collinsa\Music\ for session 1 [2026-08-13 07:49:10.6672284 UTC-04:00] [2008:7280] [fcmonitor 228 info] parsed to C:\Users\collinsa\Pictures\ for session 1 [2026-08-13 07:49:10.6704691 UTC-04:00] [2008:7280] [fcmonitor 228 info] parsed to C:\Users\collinsa\Videos\ for session 1 [2026-08-13 07:49:10.6704859 UTC-04:00] [2008:7280] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 done [2026-08-13 07:49:10.6704921 UTC-04:00] [2008:7280] [fcmonitor 435 info] add c:\users\collinsa\desktop\ [2026-08-13 07:49:10.6704961 UTC-04:00] [2008:7280] [fcmonitor 435 info] add c:\users\collinsa\documents\ [2026-08-13 07:49:10.6704991 UTC-04:00] [2008:7280] [fcmonitor 435 info] add c:\users\collinsa\favorites\ [2026-08-13 07:49:10.6705020 UTC-04:00] [2008:7280] [fcmonitor 435 info] add c:\users\collinsa\music\ [2026-08-13 07:49:10.6705048 UTC-04:00] [2008:7280] [fcmonitor 435 info] add c:\users\collinsa\pictures\ [2026-08-13 07:49:10.6705075 UTC-04:00] [2008:7280] [fcmonitor 435 info] add c:\users\collinsa\videos\ [2026-08-13 07:49:10.6705211 UTC-04:00] [2008:7280] [fcmonitor 16 debug] add session=1 ret=1 str=C:\Users\collinsa\Desktop\;C:\Users\collinsa\Documents\;C:\Users\collinsa\Favorites\;C:\Users\collinsa\Music\;C:\Users\collinsa\Pictures\;C:\Users\collinsa\Videos\ [2026-08-13 07:49:10.6705241 UTC-04:00] [2008:7280] [fcmonitor 52 debug] reload monitor folder for session 0 [2026-08-13 07:49:10.6705382 UTC-04:00] [2008:7280] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-13 07:49:10.6705413 UTC-04:00] [2008:7280] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-13 07:49:10.6712710 UTC-04:00] [2008:7280] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 187984302080 499455451136 187984302080 [2026-08-13 07:49:10.6712835 UTC-04:00] [2008:7280] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-13 07:49:10.8169178 UTC-04:00] [2008:7280] [fcmonitor 232 info] queue lock 0x3ac cleanevent 0x3a0 [2026-08-13 07:49:10.8170272 UTC-04:00] [2008:7280] [fcmonitor 245 info] init succeed [2026-08-13 07:49:10.8170312 UTC-04:00] [2008:7280] [fcmonitor 438 info] reading cache [2026-08-13 07:49:10.9452921 UTC-04:00] [2008:7280] [fcmonitor 440 info] getting all proc [2026-08-13 07:49:10.9755498 UTC-04:00] [2008:7280] [fcmonitor 159 debug] getting all proc [2026-08-13 07:49:10.9791005 UTC-04:00] [2008:7280] [fcmonitor 192 warning] GetAllProcTree can't find module 4 System [2026-08-13 07:49:11.0374184 UTC-04:00] [2008:7280] [fcmonitor 192 warning] GetAllProcTree can't find module 100 Registry [2026-08-13 07:49:11.2218991 UTC-04:00] [2008:7280] [fcmonitor 192 warning] GetAllProcTree can't find module 2320 Memory Compression [2026-08-13 07:49:11.6190587 UTC-04:00] [2008:7280] [fcmonitor 192 warning] GetAllProcTree can't find module 8424 net.exe [2026-08-13 07:49:11.6390669 UTC-04:00] [2008:7280] [fcmonitor 192 warning] GetAllProcTree can't find module 8452 net1.exe [2026-08-13 07:49:11.6405209 UTC-04:00] [2008:7280] [fcmonitor 192 warning] GetAllProcTree can't find module 8484 conhost.exe [2026-08-13 07:49:11.6536045 UTC-04:00] [2008:7280] [fcmonitor 192 warning] GetAllProcTree can't find module 8616 HPA.exe [2026-08-13 07:49:11.6558841 UTC-04:00] [2008:7280] [fcmonitor 286 debug] getting all proc finished 131 0 [2026-08-13 07:49:11.6558910 UTC-04:00] [2008:7280] [fcmonitor 442 info] finish [2026-08-13 07:49:11.6559908 UTC-04:00] [2008:7280] [fcmonitor 267 info] heap p 0x000001C177910A40 [2026-08-13 07:49:11.6560265 UTC-04:00] [2008:7280] [fcmonitor 267 info] heap p 0x000001C17792F780 [2026-08-13 07:49:11.6560608 UTC-04:00] [2008:7280] [fcmonitor 267 info] heap p 0x000001C17792FC30 [2026-08-13 07:49:11.6560969 UTC-04:00] [2008:7280] [fcmonitor 267 info] heap p 0x000001C177931E70 [2026-08-13 07:49:11.6561306 UTC-04:00] [2008:7280] [fcmonitor 267 info] heap p 0x000001C177931000 [2026-08-13 07:49:11.6561616 UTC-04:00] [2008:7280] [fcmonitor 267 info] heap p 0x000001C1779319A0 [2026-08-13 07:49:11.6561993 UTC-04:00] [2008:7280] [fcmonitor 267 info] heap p 0x000001C177932340 [2026-08-13 07:49:11.6562302 UTC-04:00] [2008:7280] [fcmonitor 267 info] heap p 0x000001C177932810 [2026-08-13 07:49:11.6920845 UTC-04:00] [2008:8720] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-13 07:49:11.6921766 UTC-04:00] [2008:8724] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-13 07:49:11.6922818 UTC-04:00] [2008:8728] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-13 07:49:11.6923631 UTC-04:00] [2008:8732] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-13 07:49:11.6924705 UTC-04:00] [2008:8736] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-13 07:49:11.6926398 UTC-04:00] [2008:8740] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-13 07:49:11.6927279 UTC-04:00] [2008:8744] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-13 07:49:11.6928048 UTC-04:00] [2008:8748] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-13 07:49:12.5737384 UTC-04:00] [2008:8716] [fcmonitor 475 warning] session 1 not init [2026-08-13 07:49:12.5896423 UTC-04:00] [2008:8716] [fcmonitor 228 info] parsed to C:\Users\collinsa\Desktop\ for session 1 [2026-08-13 07:49:12.5922181 UTC-04:00] [2008:8716] [fcmonitor 228 info] parsed to C:\Users\collinsa\Documents\ for session 1 [2026-08-13 07:49:12.5944757 UTC-04:00] [2008:8716] [fcmonitor 228 info] parsed to C:\Users\collinsa\Favorites\ for session 1 [2026-08-13 07:49:12.5966796 UTC-04:00] [2008:8716] [fcmonitor 228 info] parsed to C:\Users\collinsa\Music\ for session 1 [2026-08-13 07:49:12.5986386 UTC-04:00] [2008:8716] [fcmonitor 228 info] parsed to C:\Users\collinsa\Pictures\ for session 1 [2026-08-13 07:49:12.6009584 UTC-04:00] [2008:8716] [fcmonitor 228 info] parsed to C:\Users\collinsa\Videos\ for session 1 [2026-08-13 07:49:12.6009798 UTC-04:00] [2008:8716] [fcmonitor 435 info] add c:\users\collinsa\desktop\ [2026-08-13 07:49:12.6009857 UTC-04:00] [2008:8716] [fcmonitor 435 info] add c:\users\collinsa\documents\ [2026-08-13 07:49:12.6009887 UTC-04:00] [2008:8716] [fcmonitor 435 info] add c:\users\collinsa\favorites\ [2026-08-13 07:49:12.6009916 UTC-04:00] [2008:8716] [fcmonitor 435 info] add c:\users\collinsa\music\ [2026-08-13 07:49:12.6009942 UTC-04:00] [2008:8716] [fcmonitor 435 info] add c:\users\collinsa\pictures\ [2026-08-13 07:49:12.6010012 UTC-04:00] [2008:8716] [fcmonitor 435 info] add c:\users\collinsa\videos\ [2026-08-13 07:49:14.5725026 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 8548 \SystemRoot\System32\Conhost.exe [2026-08-13 07:49:14.5725231 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 8548 \SystemRoot\System32\Conhost.exe [2026-08-13 07:49:16.5451254 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 9340 \??\C:\Windows\system32\igfxEM.exe [2026-08-13 07:49:16.5451346 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 9340 C:\Windows\system32\igfxEM.exe [2026-08-13 07:49:16.9041809 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 9416 \??\C:\Windows\system32\igfxHK.exe [2026-08-13 07:49:16.9041960 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 9416 C:\Windows\system32\igfxHK.exe [2026-08-13 07:49:17.4720334 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 9484 \??\C:\Windows\system32\igfxTray.exe [2026-08-13 07:49:17.4720442 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 9484 C:\Windows\system32\igfxTray.exe [2026-08-13 07:49:22.2824612 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 10076 \??\C:\Windows\system32\userinit.exe [2026-08-13 07:49:22.2824965 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 10076 C:\Windows\system32\userinit.exe [2026-08-13 07:49:23.1171128 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 10112 \??\C:\Windows\Explorer.EXE [2026-08-13 07:49:23.1171232 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 10112 C:\Windows\Explorer.EXE [2026-08-13 07:49:50.1672089 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 7904 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-13 07:49:50.1672315 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 7904 C:\IMC\MPS\IMCMobil.exe [2026-08-13 07:49:52.3848831 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 11420 \??\C:\Windows\system32\wlrmdr.exe [2026-08-13 07:49:52.3849072 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 11420 C:\Windows\system32\wlrmdr.exe [2026-08-13 07:49:53.6054324 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 11464 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-13 07:49:53.6055873 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 11464 C:\IMC\MPS\iIMCMobl.exe [2026-08-13 07:49:58.9476509 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 11960 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-13 07:49:58.9476621 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 11960 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-13 07:49:59.8214833 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 12152 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-13 07:49:59.8214961 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 12152 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-13 07:50:00.7904632 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 12276 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:50:00.7904927 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 12276 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:50:01.5883397 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 11056 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-13 07:50:01.5883508 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 11056 C:\Windows\SysWOW64\runonce.exe [2026-08-13 07:50:02.0967469 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 11404 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-13 07:50:02.0967595 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 11404 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-13 07:50:03.3810553 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 11692 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-13 07:50:03.3810658 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 11692 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-13 07:50:06.9785011 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 7676 \??\C:\Windows\System32\cmd.exe [2026-08-13 07:50:06.9785111 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 7676 C:\Windows\System32\cmd.exe [2026-08-13 07:50:06.9796657 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 9244 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-13 07:50:06.9796735 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 9244 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-13 07:50:06.9842060 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 11864 \SystemRoot\System32\Conhost.exe [2026-08-13 07:50:06.9842163 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 11864 \SystemRoot\System32\Conhost.exe [2026-08-13 07:50:07.0123097 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 12080 \??\C:\Windows\System32\cmd.exe [2026-08-13 07:50:07.0123190 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 12080 C:\Windows\System32\cmd.exe [2026-08-13 07:50:07.0170783 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 12120 \SystemRoot\System32\Conhost.exe [2026-08-13 07:50:07.0170873 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 12120 \SystemRoot\System32\Conhost.exe [2026-08-13 07:50:07.0334110 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 11312 \??\C:\Windows\System32\cmd.exe [2026-08-13 07:50:07.0334205 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 11312 C:\Windows\System32\cmd.exe [2026-08-13 07:50:07.0355330 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 11336 \SystemRoot\System32\Conhost.exe [2026-08-13 07:50:07.0355430 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 11336 \SystemRoot\System32\Conhost.exe [2026-08-13 07:50:07.8680485 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 10096 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 07:50:07.8680591 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 10096 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 07:50:08.7281776 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 7688 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:50:08.7281875 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 7688 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:50:09.9306918 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 4956 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 07:50:09.9307022 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 4956 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 07:50:11.9674133 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 4712 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 07:50:11.9674520 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 4712 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 07:50:12.3736421 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 12192 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:50:12.3736536 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 12192 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:50:12.3747888 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 11368 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:50:12.3747971 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 11368 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:50:12.3786569 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 10712 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:50:12.3786677 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 10712 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:50:12.3805881 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 7712 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:50:12.3805968 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 7712 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:50:13.9940329 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 9164 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 07:50:13.9940427 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 9164 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 07:50:14.3727870 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 12132 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 07:50:14.3727984 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 12132 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 07:50:14.5567549 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 12248 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 07:50:14.5567641 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 12248 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 07:50:24.7817130 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 12828 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-13 07:50:24.7817311 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 12828 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-13 07:50:39.2467782 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 12416 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:50:39.2468024 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 12416 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:51:11.1855122 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 12856 \??\C:\Windows\splwow64.exe [2026-08-13 07:51:11.1855466 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 12856 C:\Windows\splwow64.exe [2026-08-13 07:51:22.3162582 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 13108 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:51:22.3163202 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 13108 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:51:22.5035313 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 4160 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:51:22.5035487 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 4160 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:51:22.5067420 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 3812 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:51:22.5067508 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 3812 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:51:22.6850824 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 6640 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:51:22.6850919 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 6640 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:51:28.2404538 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 6376 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:51:28.2404637 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 6376 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:51:29.2316540 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 12424 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:51:29.2316648 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 12424 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:51:36.5418155 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 8168 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:51:36.5418430 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 8168 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:51:38.4074243 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 11888 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:51:38.4074340 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 11888 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:52:07.4856178 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 12564 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:52:07.4856417 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 12564 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:52:10.5298241 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 8856 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:52:10.5298347 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 8856 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:54:16.7057240 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 12636 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:54:16.7057722 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 12636 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:54:17.0059759 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 10236 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:54:17.0060838 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 10236 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:56:24.7156639 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 5704 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:56:24.7157230 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 5704 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 07:57:32.9356366 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 12880 \SystemRoot\System32\Conhost.exe [2026-08-13 07:57:32.9356685 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 12880 \SystemRoot\System32\Conhost.exe [2026-08-13 08:41:50.1817635 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 3324 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-13 08:41:50.1817951 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 3324 C:\IMC\RMS\TRAFFIC.EXE [2026-08-13 09:13:52.3077488 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 16352 \??\C:\IMC\RMS\RECORDS.EXE [2026-08-13 09:13:52.3077866 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 16352 C:\IMC\RMS\RECORDS.EXE [2026-08-13 09:14:25.5200105 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 16204 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 09:14:25.5200286 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 16204 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 09:21:29.9892784 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 15528 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 09:21:29.9893165 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 15528 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 09:50:37.9655522 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 16472 \SystemRoot\System32\Conhost.exe [2026-08-13 09:50:37.9655833 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 16472 \SystemRoot\System32\Conhost.exe [2026-08-13 10:36:55.5995909 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 22320 \SystemRoot\System32\Conhost.exe [2026-08-13 10:36:55.5996250 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 22320 \SystemRoot\System32\Conhost.exe [2026-08-13 10:36:55.6308548 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 22360 \SystemRoot\System32\Conhost.exe [2026-08-13 10:36:55.6308646 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 22360 \SystemRoot\System32\Conhost.exe [2026-08-13 10:40:14.8676757 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 21132 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 10:40:14.8677094 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 21132 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 10:40:15.9184704 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 19816 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 10:40:15.9184813 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 19816 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 10:40:17.0948852 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 18560 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 10:40:17.0948957 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 18560 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 10:40:20.8766880 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 21704 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 10:40:20.8766998 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 21704 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 10:40:20.9101578 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 21352 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 10:40:20.9101681 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 21352 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 11:50:37.9803777 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 25756 \SystemRoot\System32\Conhost.exe [2026-08-13 11:50:37.9804124 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 25756 \SystemRoot\System32\Conhost.exe [2026-08-13 12:12:04.4065873 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 26728 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 12:12:04.4066142 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 26728 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 12:12:51.9494143 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 26884 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 12:12:51.9494458 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 26884 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 12:13:17.8028715 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 26440 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 12:13:17.8028961 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 26440 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 13:50:37.9823002 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 31536 \SystemRoot\System32\Conhost.exe [2026-08-13 13:50:37.9823357 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 31536 \SystemRoot\System32\Conhost.exe [2026-08-13 14:08:07.6059476 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 23884 \??\C:\IMC\RMS\RECORDS.EXE [2026-08-13 14:08:07.6059653 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 23884 C:\IMC\RMS\RECORDS.EXE [2026-08-13 14:12:47.2923697 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 31832 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:12:47.2924840 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 31832 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:12:48.2993965 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 8108 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:12:48.2994081 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 8108 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:12:54.8663406 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 36076 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:12:54.8663654 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 36076 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:12:54.9103706 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 36104 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:12:54.9103815 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 36104 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:12:58.0628731 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 36232 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:12:58.0628853 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 36232 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:13:00.3346980 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 36388 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:13:00.3347088 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 36388 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:13:00.4815946 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 36452 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:13:00.4816078 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 36452 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:14:16.1832384 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 35960 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:14:16.1832623 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 35960 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:14:16.4870786 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 34572 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:14:16.4870897 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 34572 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:14:19.7955149 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 35000 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:14:19.7963676 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 35000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:14:20.1889860 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 35216 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:14:20.1889973 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 35216 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:14:20.7397078 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 35192 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:14:20.7397197 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 35192 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:14:29.7305408 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 35988 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:14:29.7305954 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 35988 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:15:05.1727920 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 36664 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:15:05.1728222 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 36664 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:15:08.1948847 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 35556 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:15:08.1948961 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 35556 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:15:08.2370987 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 35856 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:15:08.2371464 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 35856 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:21:43.7238084 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 32904 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:21:43.7238483 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 32904 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:21:44.3117819 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 36072 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:21:44.3117942 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 36072 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:22:01.1178376 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 35684 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:22:01.1178643 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 35684 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:22:01.1633233 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 30248 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:22:01.1633342 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 30248 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:28:35.3861684 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 35132 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:28:35.3862040 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 35132 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:28:38.1651370 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 35880 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:28:38.1651482 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 35880 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:28:47.0044073 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 35500 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:28:47.0044307 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 35500 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:28:47.0373090 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 29920 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:28:47.0373196 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 29920 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:28:48.4575075 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 36252 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:28:48.4575183 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 36252 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:28:48.7056590 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 35148 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:28:48.7056716 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 35148 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 14:44:59.2318360 UTC-04:00] [2008:8716] [fcmonitor 332 debug] proc cache add 25220 \??\C:\Windows\system32\LogonUI.exe [2026-08-13 14:44:59.2318796 UTC-04:00] [2008:8716] [fcmonitor 99 info] add pid 25220 C:\Windows\system32\LogonUI.exe [2026-08-13 14:45:07.6032803 UTC-04:00] [2008:8588] [fcmonitor 90 debug] session change reason=6 session=1 [2026-08-13 14:45:07.6033180 UTC-04:00] [2008:8588] [fcmonitor 117 debug] add reason=6 session=1 ret=1 [2026-08-13 14:46:19.3025802 UTC-04:00] [7508:7200] [fcmonitor 1249 info] (Time Zone: Eastern Standard Time) (Sun Jun 30 22:28:59 2024, 50s) 2026-08-13 14:46:19.291 type: 0x10f size: 512 memory: 0x0000000000000000 [2026-08-13 14:46:19.3036693 UTC-04:00] [7508:7200] [fcmonitor 78 debug] ems_serial FCTEMS8821002497 [2026-08-13 14:46:19.3052305 UTC-04:00] [7508:7200] [fcmonitor 85 debug] fct_serial FCT8000515779876 [2026-08-13 14:46:19.3054122 UTC-04:00] [7508:7200] [fcmonitor 94 debug] fct_uid 4EF5549DB1674A63BE848553987D4AEE [2026-08-13 14:46:19.3054829 UTC-04:00] [7508:7200] [fcmonitor 103 debug] vdom default [2026-08-13 14:46:19.3055017 UTC-04:00] [7508:7200] [fcmonitor 843 info] InitCryptAlg [2026-08-13 14:46:19.3133870 UTC-04:00] [7508:7200] [fcmonitor 41 info] before LoadSettings [2026-08-13 14:46:19.3268509 UTC-04:00] [7508:7200] [fcmonitor 45 info] folder C:\Users\%USERNAME%\Desktop\ [2026-08-13 14:46:19.3268643 UTC-04:00] [7508:7200] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-13 14:46:19.3350856 UTC-04:00] [7508:7200] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-13 14:46:19.3351669 UTC-04:00] [7508:7200] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 0 [2026-08-13 14:46:19.3352318 UTC-04:00] [7508:7200] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 0 [2026-08-13 14:46:19.3352945 UTC-04:00] [7508:7200] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 0 [2026-08-13 14:46:19.3353592 UTC-04:00] [7508:7200] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 0 [2026-08-13 14:46:19.3354196 UTC-04:00] [7508:7200] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 0 [2026-08-13 14:46:19.3354292 UTC-04:00] [7508:7200] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 done [2026-08-13 14:46:19.3354351 UTC-04:00] [7508:7200] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-13 14:46:19.3354454 UTC-04:00] [7508:7200] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-13 14:46:19.3354488 UTC-04:00] [7508:7200] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-13 14:46:19.3354519 UTC-04:00] [7508:7200] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-13 14:46:19.3354551 UTC-04:00] [7508:7200] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-13 14:46:19.3354581 UTC-04:00] [7508:7200] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-13 14:46:19.3354754 UTC-04:00] [7508:7200] [fcmonitor 16 debug] add session=0 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-13 14:46:19.3369802 UTC-04:00] [7508:7200] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-13 14:46:19.3369860 UTC-04:00] [7508:7200] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-13 14:46:19.3374401 UTC-04:00] [7508:7200] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 188139819008 499455451136 188139819008 [2026-08-13 14:46:19.3374507 UTC-04:00] [7508:7200] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-13 14:46:19.4987624 UTC-04:00] [7508:7200] [fcmonitor 232 info] queue lock 0x3a0 cleanevent 0x3a4 [2026-08-13 14:46:19.4988783 UTC-04:00] [7508:7200] [fcmonitor 245 info] init succeed [2026-08-13 14:46:19.4988826 UTC-04:00] [7508:7200] [fcmonitor 438 info] reading cache [2026-08-13 14:46:19.5330722 UTC-04:00] [7508:7200] [fcmonitor 440 info] getting all proc [2026-08-13 14:46:19.5583055 UTC-04:00] [7508:7200] [fcmonitor 159 debug] getting all proc [2026-08-13 14:46:19.5609765 UTC-04:00] [7508:7200] [fcmonitor 192 warning] GetAllProcTree can't find module 4 System [2026-08-13 14:46:19.5839653 UTC-04:00] [7508:7200] [fcmonitor 192 warning] GetAllProcTree can't find module 100 Registry [2026-08-13 14:46:19.9382360 UTC-04:00] [7508:7200] [fcmonitor 192 warning] GetAllProcTree can't find module 2444 Memory Compression [2026-08-13 14:46:20.4279653 UTC-04:00] [7508:7200] [fcmonitor 192 warning] GetAllProcTree can't find module 7280 edgeBroker.exe [2026-08-13 14:46:20.4499141 UTC-04:00] [7508:7200] [fcmonitor 286 debug] getting all proc finished 122 0 [2026-08-13 14:46:20.4499207 UTC-04:00] [7508:7200] [fcmonitor 442 info] finish [2026-08-13 14:46:20.4500008 UTC-04:00] [7508:7200] [fcmonitor 267 info] heap p 0x0000028758B6A560 [2026-08-13 14:46:20.4500396 UTC-04:00] [7508:7200] [fcmonitor 267 info] heap p 0x0000028758B6AA10 [2026-08-13 14:46:20.4500720 UTC-04:00] [7508:7200] [fcmonitor 267 info] heap p 0x0000028758B68140 [2026-08-13 14:46:20.4501076 UTC-04:00] [7508:7200] [fcmonitor 267 info] heap p 0x0000028758B6E940 [2026-08-13 14:46:20.4501384 UTC-04:00] [7508:7200] [fcmonitor 267 info] heap p 0x0000028758B6E470 [2026-08-13 14:46:20.4501730 UTC-04:00] [7508:7200] [fcmonitor 267 info] heap p 0x0000028758B6F2E0 [2026-08-13 14:46:20.4502031 UTC-04:00] [7508:7200] [fcmonitor 267 info] heap p 0x0000028758B6F7B0 [2026-08-13 14:46:20.4502349 UTC-04:00] [7508:7200] [fcmonitor 267 info] heap p 0x0000028758B6DAD0 [2026-08-13 14:46:20.4796982 UTC-04:00] [7508:7300] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-13 14:46:20.4797778 UTC-04:00] [7508:8092] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-13 14:46:20.4798541 UTC-04:00] [7508:8088] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-13 14:46:20.4799856 UTC-04:00] [7508:6764] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-13 14:46:20.4800247 UTC-04:00] [7508:6648] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-13 14:46:20.4800682 UTC-04:00] [7508:7352] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-13 14:46:20.4801041 UTC-04:00] [7508:7292] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-13 14:46:20.4801421 UTC-04:00] [7508:6760] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-13 14:46:41.5280579 UTC-04:00] [7508:5672] [fcmonitor 475 warning] session 1 not init [2026-08-13 14:46:41.5357233 UTC-04:00] [7508:5672] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-13 14:46:41.5358413 UTC-04:00] [7508:5672] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 1 [2026-08-13 14:46:41.5359187 UTC-04:00] [7508:5672] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 1 [2026-08-13 14:46:41.5359918 UTC-04:00] [7508:5672] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 1 [2026-08-13 14:46:41.5360695 UTC-04:00] [7508:5672] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 1 [2026-08-13 14:46:41.5361486 UTC-04:00] [7508:5672] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 1 [2026-08-13 14:46:41.5361637 UTC-04:00] [7508:5672] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-13 14:46:41.5361678 UTC-04:00] [7508:5672] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-13 14:46:41.5361705 UTC-04:00] [7508:5672] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-13 14:46:41.5361739 UTC-04:00] [7508:5672] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-13 14:46:41.5361765 UTC-04:00] [7508:5672] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-13 14:46:41.5361790 UTC-04:00] [7508:5672] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-13 15:37:20.7006089 UTC-04:00] [7508:7304] [fcmonitor 90 debug] session change reason=5 session=1 [2026-08-13 15:37:20.7008084 UTC-04:00] [7508:7304] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-13 15:37:20.7133087 UTC-04:00] [7508:7304] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Desktop\ for session 1 [2026-08-13 15:37:20.7157719 UTC-04:00] [7508:7304] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Documents\ for session 1 [2026-08-13 15:37:20.7179531 UTC-04:00] [7508:7304] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Favorites\ for session 1 [2026-08-13 15:37:20.7210507 UTC-04:00] [7508:7304] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Music\ for session 1 [2026-08-13 15:37:20.7237476 UTC-04:00] [7508:7304] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Pictures\ for session 1 [2026-08-13 15:37:20.7255902 UTC-04:00] [7508:7304] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Videos\ for session 1 [2026-08-13 15:37:20.7256107 UTC-04:00] [7508:7304] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 done [2026-08-13 15:37:20.7256159 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\pfefferm\desktop\ [2026-08-13 15:37:20.7256214 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\pfefferm\documents\ [2026-08-13 15:37:20.7256245 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\pfefferm\favorites\ [2026-08-13 15:37:20.7256272 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\pfefferm\music\ [2026-08-13 15:37:20.7256303 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\pfefferm\pictures\ [2026-08-13 15:37:20.7256332 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\pfefferm\videos\ [2026-08-13 15:37:20.7256440 UTC-04:00] [7508:7304] [fcmonitor 16 debug] add session=1 ret=1 str=C:\Users\pfefferm\Desktop\;C:\Users\pfefferm\Documents\;C:\Users\pfefferm\Favorites\;C:\Users\pfefferm\Music\;C:\Users\pfefferm\Pictures\;C:\Users\pfefferm\Videos\ [2026-08-13 15:37:20.7256571 UTC-04:00] [7508:7304] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-13 15:37:20.7256608 UTC-04:00] [7508:7304] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-13 15:37:20.7259561 UTC-04:00] [7508:7304] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 188130865152 499455451136 188130865152 [2026-08-13 15:37:20.7259628 UTC-04:00] [7508:7304] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-13 15:37:22.8713061 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 11176 \SystemRoot\System32\Conhost.exe [2026-08-13 15:37:22.8713197 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 11176 \SystemRoot\System32\Conhost.exe [2026-08-13 15:37:24.8144421 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 11280 \??\C:\Windows\system32\igfxEM.exe [2026-08-13 15:37:24.8144521 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 11280 C:\Windows\system32\igfxEM.exe [2026-08-13 15:37:25.2121055 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 11372 \??\C:\Windows\system32\igfxHK.exe [2026-08-13 15:37:25.2121168 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 11372 C:\Windows\system32\igfxHK.exe [2026-08-13 15:37:25.4156340 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 11396 \??\C:\Windows\system32\igfxTray.exe [2026-08-13 15:37:25.4156477 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 11396 C:\Windows\system32\igfxTray.exe [2026-08-13 15:37:29.2485662 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 11904 \??\C:\Windows\system32\userinit.exe [2026-08-13 15:37:29.2485767 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 11904 C:\Windows\system32\userinit.exe [2026-08-13 15:37:29.9835976 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 11964 \??\C:\Windows\Explorer.EXE [2026-08-13 15:37:29.9836224 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 11964 C:\Windows\Explorer.EXE [2026-08-13 15:37:59.3202395 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 14176 \??\C:\Windows\system32\wlrmdr.exe [2026-08-13 15:37:59.3202809 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 14176 C:\Windows\system32\wlrmdr.exe [2026-08-13 15:38:08.1264301 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 11916 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-13 15:38:08.1264390 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 11916 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-13 15:38:09.0700586 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 12412 \??\C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-13 15:38:09.0700692 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 12412 C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-13 15:38:10.1182539 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 12676 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 15:38:10.1182755 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 12676 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 15:38:11.3205261 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 9888 \??\C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Win32Bridge.Server.exe [2026-08-13 15:38:11.3205397 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 9888 C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Win32Bridge.Server.exe [2026-08-13 15:38:12.9863773 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 13216 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-13 15:38:12.9863891 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 13216 C:\Windows\SysWOW64\runonce.exe [2026-08-13 15:38:13.4398495 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 9408 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-13 15:38:13.4398602 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 9408 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-13 15:38:14.7831399 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 11388 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-13 15:38:14.7831493 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 11388 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-13 15:38:16.4705215 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 10204 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-13 15:38:16.4705335 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 10204 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-13 15:38:17.7213456 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 14340 \??\C:\Windows\System32\cmd.exe [2026-08-13 15:38:17.7213599 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 14340 C:\Windows\System32\cmd.exe [2026-08-13 15:38:17.8307826 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 14380 \SystemRoot\System32\Conhost.exe [2026-08-13 15:38:17.8307930 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 14380 \SystemRoot\System32\Conhost.exe [2026-08-13 15:38:18.8398263 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 14580 \??\C:\Windows\System32\cmd.exe [2026-08-13 15:38:18.8398432 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 14580 C:\Windows\System32\cmd.exe [2026-08-13 15:38:18.9965749 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 14628 \SystemRoot\System32\Conhost.exe [2026-08-13 15:38:18.9965869 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 14628 \SystemRoot\System32\Conhost.exe [2026-08-13 15:38:19.3685285 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 14732 \??\C:\Windows\System32\cmd.exe [2026-08-13 15:38:19.3685504 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 14732 C:\Windows\System32\cmd.exe [2026-08-13 15:38:19.6375624 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 14800 \SystemRoot\System32\Conhost.exe [2026-08-13 15:38:19.6375730 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 14800 \SystemRoot\System32\Conhost.exe [2026-08-13 15:38:19.7342505 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 14812 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 15:38:19.7342609 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 14812 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 15:38:26.0609984 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 14904 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 15:38:26.0610144 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 14904 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 15:38:26.0627833 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 14800 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 15:38:26.0627960 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 14800 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 15:38:26.0720187 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 10260 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 15:38:26.0720288 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 10260 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 15:38:26.0742394 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 10460 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 15:38:26.0742487 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 10460 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 15:38:26.0913743 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 13576 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 15:38:26.0913846 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 13576 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 15:38:28.9791675 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 14808 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 15:38:28.9791790 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 14808 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 15:38:29.1775594 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 14440 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 15:38:29.1775680 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 14440 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 15:38:41.9330019 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 16048 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-13 15:38:41.9330267 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 16048 C:\IMC\MPS\IMCMobil.exe [2026-08-13 15:38:43.0254906 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 16104 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-13 15:38:43.0255033 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 16104 C:\IMC\MPS\iIMCMobl.exe [2026-08-13 15:38:50.7354626 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 15436 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 15:38:50.7354904 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 15436 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 15:38:59.3893981 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 15584 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-13 15:38:59.3894541 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 15584 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-13 15:39:07.7939524 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 12244 \??\C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-13 15:39:07.7939629 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 12244 C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-13 15:39:10.2250769 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 15924 \??\C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-13 15:39:10.2251008 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 15924 C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-13 15:39:27.4613664 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 13744 \??\C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\FileSyncConfig.exe [2026-08-13 15:39:27.4614067 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 13744 C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\FileSyncConfig.exe [2026-08-13 15:39:29.7891658 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 15880 \??\C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-13 15:39:29.7891911 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 15880 C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-13 15:39:35.2630264 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 9296 \??\C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\OneDrive.Sync.Service.exe [2026-08-13 15:39:35.2630366 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 9296 C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\OneDrive.Sync.Service.exe [2026-08-13 15:40:20.7249186 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 13080 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 15:40:20.7249462 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 13080 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 15:40:25.0812638 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 14640 \??\C:\Windows\splwow64.exe [2026-08-13 15:40:25.0812931 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 14640 C:\Windows\splwow64.exe [2026-08-13 15:41:23.4178363 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 15248 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 15:41:23.4178666 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 15248 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 15:49:12.6774542 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 13304 \??\C:\Windows\SysWOW64\hh.exe [2026-08-13 15:49:12.6774918 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 13304 C:\Windows\SysWOW64\hh.exe [2026-08-13 16:08:02.8761331 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 11056 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-13 16:08:02.8761755 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 11056 C:\IMC\RMS\TRAFFIC.EXE [2026-08-13 16:14:40.7568858 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 12856 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-13 16:14:40.7569182 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 12856 C:\IMC\RMS\TRAFFIC.EXE [2026-08-13 16:16:55.1614145 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 11848 \??\C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe [2026-08-13 16:16:55.1614478 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 11848 C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe [2026-08-13 16:16:55.1776202 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 11136 \SystemRoot\System32\Conhost.exe [2026-08-13 16:16:55.1776314 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 11136 \SystemRoot\System32\Conhost.exe [2026-08-13 16:16:56.4114538 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 15848 \??\C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe [2026-08-13 16:16:56.4114690 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 15848 C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe [2026-08-13 16:25:40.7560797 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 5748 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-13 16:25:40.7561216 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 5748 C:\IMC\RMS\TRAFFIC.EXE [2026-08-13 16:33:09.6334229 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 10324 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-13 16:33:09.6334720 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 10324 C:\IMC\RMS\TRAFFIC.EXE [2026-08-13 16:38:23.3219966 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 10464 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 16:38:23.3220352 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 10464 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 16:38:23.3383477 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 10116 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 16:38:23.3383625 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 10116 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 16:38:23.4470338 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 15652 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 16:38:23.4470475 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 15652 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 16:38:23.6244169 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 17240 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 16:38:23.6244282 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 17240 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 16:38:23.6281830 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 17232 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 16:38:23.6281923 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 17232 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 16:38:23.8929205 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 17252 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 16:38:23.8929307 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 17252 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 16:38:23.9994521 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 3476 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 16:38:23.9994627 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 3476 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 16:38:25.1871046 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 14800 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 16:38:25.1871148 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 14800 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 16:38:25.2181496 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 14412 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 16:38:25.2181603 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 14412 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 16:38:53.6405689 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 17628 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 16:38:53.6405973 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 17628 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 16:40:23.6181062 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 1592 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 16:40:23.6181341 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 1592 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 16:47:50.2669000 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 13772 \SystemRoot\System32\Conhost.exe [2026-08-13 16:47:50.2669384 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 13772 \SystemRoot\System32\Conhost.exe [2026-08-13 18:21:45.6865950 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 21396 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:21:45.6866356 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 21396 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:21:45.7333154 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 19744 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:21:45.7333262 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 19744 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:21:46.0276001 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 21592 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:21:46.0276109 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 21592 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:21:46.0293038 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 23344 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:21:46.0293134 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 23344 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:21:46.2419178 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 22872 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:21:46.2419297 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 22872 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:21:46.2440278 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 15240 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:21:46.2440378 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 15240 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:21:48.2025645 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 23904 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:21:48.2025757 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 23904 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:21:50.2425433 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 24160 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:21:50.2425689 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 24160 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:22:06.7010113 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 24504 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:22:06.7010384 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 24504 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:22:07.0091446 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 22548 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:22:07.0091554 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 22548 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:22:31.0038886 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 20048 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:22:31.0039072 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 20048 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:26:47.2597595 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 23268 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:26:47.2597969 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 23268 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:32:03.8309900 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 23132 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:32:03.8310340 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 23132 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:32:04.1156013 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 18348 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:32:04.1156150 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 18348 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:32:50.5500902 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 21636 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:32:50.5501210 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 21636 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:32:50.8622974 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 24056 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:32:50.8623095 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 24056 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:33:25.2054418 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 24016 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:33:25.2054609 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 24016 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:33:25.3332110 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 24464 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:33:25.3332234 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 24464 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:33:25.5300414 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 21636 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:33:25.5300511 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 21636 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:33:25.5495913 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 21532 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:33:25.5496032 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 21532 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:33:25.6769712 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 24088 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:33:25.6769817 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 24088 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:33:26.0086234 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 23528 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:33:26.0086342 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 23528 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:33:27.7947788 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 15652 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 18:33:27.7947990 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 15652 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 18:33:27.8134988 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 22668 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 18:33:27.8135095 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 22668 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 18:33:55.5168670 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 25108 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:33:55.5168904 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 25108 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:35:25.5243621 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 23692 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:35:25.5243887 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 23692 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 18:47:50.7717230 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 24608 \SystemRoot\System32\Conhost.exe [2026-08-13 18:47:50.7717617 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 24608 \SystemRoot\System32\Conhost.exe [2026-08-13 20:02:08.0275872 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 30140 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:02:08.0276490 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 30140 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:02:08.3548883 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 30312 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:02:08.3548987 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 30312 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:02:08.3560843 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 30320 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:02:08.3560927 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 30320 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:02:08.5471972 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 30348 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:02:08.5472084 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 30348 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:02:24.6781465 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 31264 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:02:24.6781724 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 31264 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:02:28.2220709 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 31420 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:02:28.2220858 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 31420 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:02:28.2831075 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 31448 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:02:28.2831175 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 31448 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:02:30.0601567 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 31584 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:02:30.0643440 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 31584 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:02:30.3649164 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 31660 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:02:30.3649304 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 31660 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:02:53.3089284 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 31144 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:02:53.3089528 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 31144 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:03:11.1270168 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 29960 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:03:11.1270458 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 29960 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:03:11.9447421 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 27984 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:03:11.9447534 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 27984 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:03:11.9460136 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 29996 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:03:11.9460225 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 29996 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:07:25.4715808 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 23648 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:07:25.4716140 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 23648 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:13:26.9481578 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 30988 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:13:26.9482991 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 30988 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:13:27.1065827 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 27496 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:13:27.1065925 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 27496 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:13:27.3531280 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 28724 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:13:27.3531375 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 28724 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:13:27.3543197 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 30812 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:13:27.3543291 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 30812 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:13:27.5281096 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 28600 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:13:27.5281207 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 28600 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:13:27.6598246 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 30168 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:13:27.6598400 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 30168 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:13:28.6289221 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 23776 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:13:28.6289321 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 23776 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:13:28.6300714 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 31104 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:13:28.6300803 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 31104 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:13:28.9677765 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 24092 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:13:28.9677872 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 24092 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:13:29.9705469 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 22616 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 20:13:29.9705713 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 22616 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 20:13:29.9744192 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 24008 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 20:13:29.9744281 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 24008 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 20:13:57.3027133 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 27480 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:13:57.3027383 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 27480 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:15:27.3068446 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 27704 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:15:27.3068859 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 27704 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 20:47:50.8577730 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 33152 \SystemRoot\System32\Conhost.exe [2026-08-13 20:47:50.8578110 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 33152 \SystemRoot\System32\Conhost.exe [2026-08-13 22:44:42.9374400 UTC-04:00] [7508:5672] [fcmonitor 475 warning] session 2 not init [2026-08-13 22:44:42.9470170 UTC-04:00] [7508:5672] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-13 22:44:42.9470907 UTC-04:00] [7508:5672] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-13 22:44:42.9471545 UTC-04:00] [7508:5672] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-13 22:44:42.9472132 UTC-04:00] [7508:5672] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-13 22:44:42.9472707 UTC-04:00] [7508:5672] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-13 22:44:42.9473247 UTC-04:00] [7508:5672] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-13 22:44:42.9473397 UTC-04:00] [7508:5672] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-13 22:44:42.9473427 UTC-04:00] [7508:5672] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-13 22:44:42.9473451 UTC-04:00] [7508:5672] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-13 22:44:42.9473467 UTC-04:00] [7508:5672] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-13 22:44:42.9473483 UTC-04:00] [7508:5672] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-13 22:44:42.9473500 UTC-04:00] [7508:5672] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-13 22:44:43.8594756 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 39056 \??\C:\Windows\system32\LogonUI.exe [2026-08-13 22:44:43.8594872 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 39056 C:\Windows\system32\LogonUI.exe [2026-08-13 22:44:44.0330163 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 12808 \??\C:\Windows\System32\LogonUI.exe [2026-08-13 22:44:44.0330923 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 12808 C:\Windows\System32\LogonUI.exe [2026-08-13 22:44:44.0353366 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 40840 \??\C:\Windows\System32\dwm.exe [2026-08-13 22:44:44.0353450 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 40840 C:\Windows\System32\dwm.exe [2026-08-13 22:44:44.6091430 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 40068 \??\C:\Windows\System32\fontdrvhost.exe [2026-08-13 22:44:44.6091530 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 40068 C:\Windows\System32\fontdrvhost.exe [2026-08-13 22:44:44.8672768 UTC-04:00] [7508:7304] [fcmonitor 90 debug] session change reason=3 session=2 [2026-08-13 22:44:44.8674395 UTC-04:00] [7508:7304] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-13 22:44:44.8824404 UTC-04:00] [7508:7304] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-13 22:44:44.8825569 UTC-04:00] [7508:7304] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-13 22:44:44.8826486 UTC-04:00] [7508:7304] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-13 22:44:44.8827373 UTC-04:00] [7508:7304] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-13 22:44:44.8828538 UTC-04:00] [7508:7304] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-13 22:44:44.8829319 UTC-04:00] [7508:7304] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-13 22:44:44.8829410 UTC-04:00] [7508:7304] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-13 22:44:44.8829466 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-13 22:44:44.8829503 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-13 22:44:44.8829528 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-13 22:44:44.8829551 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-13 22:44:44.8829576 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-13 22:44:44.8829599 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-13 22:44:44.8829742 UTC-04:00] [7508:7304] [fcmonitor 16 debug] add session=2 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-13 22:44:44.8829860 UTC-04:00] [7508:7304] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-13 22:44:44.8829883 UTC-04:00] [7508:7304] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-13 22:44:44.8832861 UTC-04:00] [7508:7304] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 187524743168 499455451136 187524743168 [2026-08-13 22:44:44.8832936 UTC-04:00] [7508:7304] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-13 22:44:49.5475434 UTC-04:00] [7508:7304] [fcmonitor 90 debug] session change reason=6 session=1 [2026-08-13 22:44:49.5475518 UTC-04:00] [7508:7304] [fcmonitor 117 debug] add reason=6 session=1 ret=1 [2026-08-13 22:44:49.9828974 UTC-04:00] [7508:7304] [fcmonitor 90 debug] session change reason=2 session=1 [2026-08-13 22:44:49.9829157 UTC-04:00] [7508:7304] [fcmonitor 117 debug] add reason=2 session=1 ret=1 [2026-08-13 22:44:50.1367382 UTC-04:00] [7508:7304] [fcmonitor 90 debug] session change reason=4 session=2 [2026-08-13 22:44:50.1367478 UTC-04:00] [7508:7304] [fcmonitor 117 debug] add reason=4 session=2 ret=1 [2026-08-13 22:44:50.2437728 UTC-04:00] [7508:7304] [fcmonitor 90 debug] session change reason=1 session=2 [2026-08-13 22:44:50.2439448 UTC-04:00] [7508:7304] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-13 22:44:50.2983324 UTC-04:00] [7508:7304] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-13 22:44:50.2984225 UTC-04:00] [7508:7304] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-13 22:44:50.2986932 UTC-04:00] [7508:7304] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-13 22:44:50.2987792 UTC-04:00] [7508:7304] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-13 22:44:50.2988591 UTC-04:00] [7508:7304] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-13 22:44:50.2990768 UTC-04:00] [7508:7304] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-13 22:44:50.2990868 UTC-04:00] [7508:7304] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-13 22:44:50.2990930 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-13 22:44:50.2990972 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-13 22:44:50.2991002 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-13 22:44:50.2991032 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-13 22:44:50.2991061 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-13 22:44:50.2991091 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-13 22:44:50.2991195 UTC-04:00] [7508:7304] [fcmonitor 16 debug] add session=2 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-13 22:44:50.2991325 UTC-04:00] [7508:7304] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-13 22:44:50.2991359 UTC-04:00] [7508:7304] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-13 22:44:50.2994397 UTC-04:00] [7508:7304] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 187538522112 499455451136 187538522112 [2026-08-13 22:44:50.2994479 UTC-04:00] [7508:7304] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-13 23:10:47.7432900 UTC-04:00] [7508:7304] [fcmonitor 90 debug] session change reason=5 session=2 [2026-08-13 23:10:47.7434654 UTC-04:00] [7508:7304] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-13 23:10:47.7528316 UTC-04:00] [7508:7304] [fcmonitor 228 info] parsed to C:\Users\stengera\Desktop\ for session 2 [2026-08-13 23:10:47.7553853 UTC-04:00] [7508:7304] [fcmonitor 228 info] parsed to C:\Users\stengera\Documents\ for session 2 [2026-08-13 23:10:47.7813980 UTC-04:00] [7508:7304] [fcmonitor 228 info] parsed to C:\Users\stengera\Favorites\ for session 2 [2026-08-13 23:10:47.7844003 UTC-04:00] [7508:7304] [fcmonitor 228 info] parsed to C:\Users\stengera\Music\ for session 2 [2026-08-13 23:10:47.7873545 UTC-04:00] [7508:7304] [fcmonitor 228 info] parsed to C:\Users\stengera\Pictures\ for session 2 [2026-08-13 23:10:47.7902993 UTC-04:00] [7508:7304] [fcmonitor 228 info] parsed to C:\Users\stengera\Videos\ for session 2 [2026-08-13 23:10:47.7903152 UTC-04:00] [7508:7304] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-13 23:10:47.7903399 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\stengera\desktop\ [2026-08-13 23:10:47.7903478 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\stengera\documents\ [2026-08-13 23:10:47.7903511 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\stengera\favorites\ [2026-08-13 23:10:47.7908658 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\stengera\music\ [2026-08-13 23:10:47.7908726 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\stengera\pictures\ [2026-08-13 23:10:47.7908755 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\stengera\videos\ [2026-08-13 23:10:47.7913411 UTC-04:00] [7508:7304] [fcmonitor 16 debug] add session=2 ret=0 str=C:\Users\stengera\Desktop\;C:\Users\stengera\Documents\;C:\Users\stengera\Favorites\;C:\Users\stengera\Music\;C:\Users\stengera\Pictures\;C:\Users\stengera\Videos\ [2026-08-13 23:10:47.7913601 UTC-04:00] [7508:7304] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-13 23:10:47.7913636 UTC-04:00] [7508:7304] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-13 23:10:47.8076883 UTC-04:00] [7508:7304] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 187650719744 499455451136 187650719744 [2026-08-13 23:10:47.8077020 UTC-04:00] [7508:7304] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-13 23:10:48.9038187 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 14064 \SystemRoot\System32\Conhost.exe [2026-08-13 23:10:48.9038370 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 14064 \SystemRoot\System32\Conhost.exe [2026-08-13 23:10:49.6180617 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 39804 \??\C:\Windows\system32\igfxEM.exe [2026-08-13 23:10:49.6180765 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 39804 C:\Windows\system32\igfxEM.exe [2026-08-13 23:10:49.8629858 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 14256 \??\C:\Windows\system32\igfxHK.exe [2026-08-13 23:10:49.8629953 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 14256 C:\Windows\system32\igfxHK.exe [2026-08-13 23:10:50.0076509 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 16276 \??\C:\Windows\system32\igfxTray.exe [2026-08-13 23:10:50.0076760 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 16276 C:\Windows\system32\igfxTray.exe [2026-08-13 23:10:51.5933341 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 40664 \??\C:\Windows\system32\userinit.exe [2026-08-13 23:10:51.5933441 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 40664 C:\Windows\system32\userinit.exe [2026-08-13 23:10:51.7500412 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 32932 \??\C:\Windows\Explorer.EXE [2026-08-13 23:10:51.7500510 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 32932 C:\Windows\Explorer.EXE [2026-08-13 23:11:18.2210022 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 39204 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-13 23:11:18.2210317 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 39204 C:\IMC\MPS\IMCMobil.exe [2026-08-13 23:11:19.7741761 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 40544 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-13 23:11:19.7741876 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 40544 C:\IMC\MPS\iIMCMobl.exe [2026-08-13 23:11:21.6645125 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 29924 \??\C:\Windows\System32\wlrmdr.exe [2026-08-13 23:11:21.6645358 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 29924 C:\Windows\System32\wlrmdr.exe [2026-08-13 23:11:23.1019739 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 37492 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 23:11:23.1019885 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 37492 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 23:11:24.5554475 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 42640 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-13 23:11:24.5554586 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 42640 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-13 23:11:25.1565764 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 12808 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 23:11:25.1565866 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 12808 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 23:11:25.8996362 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 6280 \??\C:\Users\stengera\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-13 23:11:25.8996477 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 6280 C:\Users\stengera\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-13 23:11:26.6183450 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 13352 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:11:26.6183560 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 13352 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:11:27.2066026 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 39392 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 23:11:27.2066132 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 39392 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 23:11:27.6106325 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 10036 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-13 23:11:27.6106433 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 10036 C:\Windows\SysWOW64\runonce.exe [2026-08-13 23:11:28.0712730 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 42916 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-13 23:11:28.0712858 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 42916 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-13 23:11:29.1980982 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 664 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-13 23:11:29.1981083 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 664 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-13 23:11:29.2668536 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 904 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 23:11:29.2668631 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 904 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 23:11:29.6106033 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 42304 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-13 23:11:29.6106133 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 42304 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-13 23:11:30.8131584 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 1032 \??\C:\Windows\System32\cmd.exe [2026-08-13 23:11:30.8131849 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 1032 C:\Windows\System32\cmd.exe [2026-08-13 23:11:30.9594309 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 41324 \SystemRoot\System32\Conhost.exe [2026-08-13 23:11:30.9594421 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 41324 \SystemRoot\System32\Conhost.exe [2026-08-13 23:11:31.2392130 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 15236 \??\C:\Windows\System32\cmd.exe [2026-08-13 23:11:31.2392229 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 15236 C:\Windows\System32\cmd.exe [2026-08-13 23:11:31.3601873 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 42112 \SystemRoot\System32\Conhost.exe [2026-08-13 23:11:31.3601972 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 42112 \SystemRoot\System32\Conhost.exe [2026-08-13 23:11:31.3916681 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 7348 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 23:11:31.3916784 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 7348 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 23:11:31.9517641 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 42668 \??\C:\Windows\System32\cmd.exe [2026-08-13 23:11:31.9517789 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 42668 C:\Windows\System32\cmd.exe [2026-08-13 23:11:32.0480962 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 38304 \SystemRoot\System32\Conhost.exe [2026-08-13 23:11:32.0481079 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 38304 \SystemRoot\System32\Conhost.exe [2026-08-13 23:11:33.5322683 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 30644 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 23:11:33.5322791 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 30644 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 23:11:35.7257594 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 42760 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 23:11:35.7257704 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 42760 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 23:11:36.6199319 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 13300 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:11:36.6199429 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 13300 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:11:37.8448367 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 43052 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 23:11:37.8448469 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 43052 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 23:11:40.0983116 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 43444 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 23:11:40.0983375 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 43444 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 23:11:42.1674635 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 43636 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 23:11:42.1674728 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 43636 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-13 23:11:42.5481088 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 43664 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:11:42.5481204 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 43664 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:11:42.5510864 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 43672 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:11:42.5510968 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 43672 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:11:42.5835667 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 43680 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:11:42.5835768 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 43680 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:11:42.5861920 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 43688 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:11:42.5862030 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 43688 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:11:42.6229470 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 43712 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:11:42.6229577 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 43712 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:11:49.8434811 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 10244 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 23:11:49.8434917 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 10244 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 23:11:49.8905186 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 40736 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 23:11:49.8905432 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 40736 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-13 23:11:55.0302530 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 6268 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-13 23:11:55.0302629 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 6268 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-13 23:12:07.5367793 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 41288 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:12:07.5368029 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 41288 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:12:20.6173177 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 42080 \??\C:\Users\stengera\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-13 23:12:20.6173418 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 42080 C:\Users\stengera\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-13 23:12:28.1244425 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 41304 \??\C:\Users\stengera\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-13 23:12:28.1244536 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 41304 C:\Users\stengera\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-13 23:12:58.8196528 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 31084 \SystemRoot\System32\Conhost.exe [2026-08-13 23:12:58.8196760 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 31084 \SystemRoot\System32\Conhost.exe [2026-08-13 23:12:59.8511651 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 43340 \??\C:\Users\stengera\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\FileSyncConfig.exe [2026-08-13 23:12:59.8511771 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 43340 C:\Users\stengera\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\FileSyncConfig.exe [2026-08-13 23:13:01.4699568 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 41124 \??\C:\Users\stengera\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-13 23:13:01.4699828 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 41124 C:\Users\stengera\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-13 23:13:07.9169642 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 36772 \??\C:\Users\stengera\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\OneDrive.Sync.Service.exe [2026-08-13 23:13:07.9169766 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 36772 C:\Users\stengera\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\OneDrive.Sync.Service.exe [2026-08-13 23:13:37.5403015 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 35128 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:13:37.5403353 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 35128 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:14:25.4753027 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 11932 \??\C:\Windows\splwow64.exe [2026-08-13 23:14:25.4753289 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 11932 C:\Windows\splwow64.exe [2026-08-13 23:14:38.8769576 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 11540 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:14:38.8769817 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 11540 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:14:47.5250898 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 42056 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:14:47.5251204 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 42056 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:14:47.5710307 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 41352 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:14:47.5710416 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 41352 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:14:47.8329307 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 39744 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:14:47.8329425 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 39744 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:14:47.8359732 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 32364 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:14:47.8359828 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 32364 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:14:47.9593505 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 15252 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:14:47.9593608 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 15252 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:15:16.3369675 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 15236 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:15:16.3369946 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 15236 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:15:16.6537063 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 12448 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:15:16.6537192 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 12448 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:15:32.8118811 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 16260 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:15:32.8119087 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 16260 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:19:48.8539699 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 43584 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-13 23:19:48.8539971 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 43584 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 00:29:04.8693975 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 43552 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-14 00:29:04.8694325 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 43552 C:\IMC\RMS\TRAFFIC.EXE [2026-08-14 01:12:58.8089466 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 49100 \SystemRoot\System32\Conhost.exe [2026-08-14 01:12:58.8089815 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 49100 \SystemRoot\System32\Conhost.exe [2026-08-14 03:12:58.7008729 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 55924 \SystemRoot\System32\Conhost.exe [2026-08-14 03:12:58.7009266 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 55924 \SystemRoot\System32\Conhost.exe [2026-08-14 05:03:21.5991877 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 62976 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-14 05:03:21.5992259 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 62976 C:\IMC\RMS\TRAFFIC.EXE [2026-08-14 05:03:36.6012915 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 60712 \??\C:\IMC\MPS\PL.EXE [2026-08-14 05:03:36.6013176 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 60712 C:\IMC\MPS\PL.EXE [2026-08-14 05:04:47.9667739 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 64184 \??\C:\Windows\system32\notepad.exe [2026-08-14 05:04:47.9667984 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 64184 C:\Windows\system32\notepad.exe [2026-08-14 05:12:58.6714677 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 63252 \SystemRoot\System32\Conhost.exe [2026-08-14 05:12:58.6715077 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 63252 \SystemRoot\System32\Conhost.exe [2026-08-14 06:43:09.5099097 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 70068 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:43:09.5099593 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 70068 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:43:09.7299543 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 69964 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:43:09.7299821 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 69964 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:43:09.9329487 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 69920 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:43:09.9329635 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 69920 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:43:09.9364121 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 67684 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:43:09.9364209 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 67684 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:43:10.1276252 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 69288 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:43:10.1276366 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 69288 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:43:10.2622749 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 70156 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:43:10.2622884 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 70156 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:43:13.1821288 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 892 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 06:43:13.1821400 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 892 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 06:43:13.2137488 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 12604 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 06:43:13.2137620 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 12604 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 06:43:15.7379277 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 41264 \??\C:\Windows\System32\LogonUI.exe [2026-08-14 06:43:15.7379392 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 41264 C:\Windows\System32\LogonUI.exe [2026-08-14 06:43:19.1716212 UTC-04:00] [7508:7304] [fcmonitor 90 debug] session change reason=6 session=2 [2026-08-14 06:43:19.1716319 UTC-04:00] [7508:7304] [fcmonitor 117 debug] add reason=6 session=2 ret=1 [2026-08-14 06:43:19.5041433 UTC-04:00] [7508:7304] [fcmonitor 90 debug] session change reason=2 session=2 [2026-08-14 06:43:19.5041501 UTC-04:00] [7508:7304] [fcmonitor 117 debug] add reason=2 session=2 ret=1 [2026-08-14 06:43:19.5820743 UTC-04:00] [7508:5672] [fcmonitor 475 warning] session 3 not init [2026-08-14 06:43:19.6015564 UTC-04:00] [7508:5672] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-14 06:43:19.6016538 UTC-04:00] [7508:5672] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 3 [2026-08-14 06:43:19.6017838 UTC-04:00] [7508:5672] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 3 [2026-08-14 06:43:19.6018687 UTC-04:00] [7508:5672] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 3 [2026-08-14 06:43:19.6019491 UTC-04:00] [7508:5672] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 3 [2026-08-14 06:43:19.6020273 UTC-04:00] [7508:5672] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 3 [2026-08-14 06:43:19.6020408 UTC-04:00] [7508:5672] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-14 06:43:19.6020451 UTC-04:00] [7508:5672] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-14 06:43:19.6020479 UTC-04:00] [7508:5672] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-14 06:43:19.6020508 UTC-04:00] [7508:5672] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-14 06:43:19.6020535 UTC-04:00] [7508:5672] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-14 06:43:19.6020560 UTC-04:00] [7508:5672] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-14 06:43:19.8180621 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 69620 \??\C:\Windows\system32\LogonUI.exe [2026-08-14 06:43:19.8180848 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 69620 C:\Windows\system32\LogonUI.exe [2026-08-14 06:43:19.8235891 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 70168 \??\C:\Windows\system32\dwm.exe [2026-08-14 06:43:19.8236034 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 70168 C:\Windows\system32\dwm.exe [2026-08-14 06:43:19.8669395 UTC-04:00] [7508:7304] [fcmonitor 90 debug] session change reason=1 session=3 [2026-08-14 06:43:19.8671458 UTC-04:00] [7508:7304] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-14 06:43:19.8847612 UTC-04:00] [7508:7304] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-14 06:43:19.8848663 UTC-04:00] [7508:7304] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 3 [2026-08-14 06:43:19.8849606 UTC-04:00] [7508:7304] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 3 [2026-08-14 06:43:19.8850540 UTC-04:00] [7508:7304] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 3 [2026-08-14 06:43:19.8852097 UTC-04:00] [7508:7304] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 3 [2026-08-14 06:43:19.8853006 UTC-04:00] [7508:7304] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 3 [2026-08-14 06:43:19.8853120 UTC-04:00] [7508:7304] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 done [2026-08-14 06:43:19.8853192 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-14 06:43:19.8853249 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-14 06:43:19.8853290 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-14 06:43:19.8853329 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-14 06:43:19.8853365 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-14 06:43:19.8853401 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-14 06:43:19.8853573 UTC-04:00] [7508:7304] [fcmonitor 16 debug] add session=3 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-14 06:43:19.8853752 UTC-04:00] [7508:7304] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-14 06:43:19.8853791 UTC-04:00] [7508:7304] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-14 06:43:19.8855898 UTC-04:00] [7508:7304] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 187051294720 499455451136 187051294720 [2026-08-14 06:43:19.8855983 UTC-04:00] [7508:7304] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-14 06:43:20.1771153 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 41580 \??\C:\Windows\system32\fontdrvhost.exe [2026-08-14 06:43:20.1771264 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 41580 C:\Windows\system32\fontdrvhost.exe [2026-08-14 06:47:37.6595611 UTC-04:00] [7508:7304] [fcmonitor 90 debug] session change reason=5 session=3 [2026-08-14 06:47:37.6597529 UTC-04:00] [7508:7304] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 [2026-08-14 06:47:37.6703489 UTC-04:00] [7508:7304] [fcmonitor 228 info] parsed to C:\Users\collinsa\Desktop\ for session 3 [2026-08-14 06:47:37.6724985 UTC-04:00] [7508:7304] [fcmonitor 228 info] parsed to C:\Users\collinsa\Documents\ for session 3 [2026-08-14 06:47:37.6747268 UTC-04:00] [7508:7304] [fcmonitor 228 info] parsed to C:\Users\collinsa\Favorites\ for session 3 [2026-08-14 06:47:37.6774242 UTC-04:00] [7508:7304] [fcmonitor 228 info] parsed to C:\Users\collinsa\Music\ for session 3 [2026-08-14 06:47:37.6795843 UTC-04:00] [7508:7304] [fcmonitor 228 info] parsed to C:\Users\collinsa\Pictures\ for session 3 [2026-08-14 06:47:37.6822405 UTC-04:00] [7508:7304] [fcmonitor 228 info] parsed to C:\Users\collinsa\Videos\ for session 3 [2026-08-14 06:47:37.6822605 UTC-04:00] [7508:7304] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 3 done [2026-08-14 06:47:37.6822663 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\collinsa\desktop\ [2026-08-14 06:47:37.6822710 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\collinsa\documents\ [2026-08-14 06:47:37.6822744 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\collinsa\favorites\ [2026-08-14 06:47:37.6822776 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\collinsa\music\ [2026-08-14 06:47:37.6822808 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\collinsa\pictures\ [2026-08-14 06:47:37.6822840 UTC-04:00] [7508:7304] [fcmonitor 435 info] add c:\users\collinsa\videos\ [2026-08-14 06:47:37.6823525 UTC-04:00] [7508:7304] [fcmonitor 16 debug] add session=3 ret=0 str=C:\Users\collinsa\Desktop\;C:\Users\collinsa\Documents\;C:\Users\collinsa\Favorites\;C:\Users\collinsa\Music\;C:\Users\collinsa\Pictures\;C:\Users\collinsa\Videos\ [2026-08-14 06:47:37.6823700 UTC-04:00] [7508:7304] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-14 06:47:37.6823738 UTC-04:00] [7508:7304] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-14 06:47:37.6833751 UTC-04:00] [7508:7304] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 187050385408 499455451136 187050385408 [2026-08-14 06:47:37.6833846 UTC-04:00] [7508:7304] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-14 06:47:38.1836804 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 40144 \SystemRoot\System32\Conhost.exe [2026-08-14 06:47:38.1836985 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 40144 \SystemRoot\System32\Conhost.exe [2026-08-14 06:47:38.5910908 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 70352 \??\C:\Windows\system32\igfxEM.exe [2026-08-14 06:47:38.5911024 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 70352 C:\Windows\system32\igfxEM.exe [2026-08-14 06:47:38.6463927 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 41828 \??\C:\Windows\system32\igfxHK.exe [2026-08-14 06:47:38.6464047 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 41828 C:\Windows\system32\igfxHK.exe [2026-08-14 06:47:38.6878110 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 69344 \??\C:\Windows\system32\igfxTray.exe [2026-08-14 06:47:38.6878205 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 69344 C:\Windows\system32\igfxTray.exe [2026-08-14 06:47:39.1177858 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 41472 \??\C:\Windows\system32\userinit.exe [2026-08-14 06:47:39.1177972 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 41472 C:\Windows\system32\userinit.exe [2026-08-14 06:47:39.2664796 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 42856 \??\C:\Windows\Explorer.EXE [2026-08-14 06:47:39.2664915 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 42856 C:\Windows\Explorer.EXE [2026-08-14 06:47:57.4153648 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 70840 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-14 06:47:57.4153897 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 70840 C:\IMC\MPS\IMCMobil.exe [2026-08-14 06:47:58.7982118 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 44012 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-14 06:47:58.7982208 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 44012 C:\IMC\MPS\iIMCMobl.exe [2026-08-14 06:48:00.4606996 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 43688 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-14 06:48:00.4607259 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 43688 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-14 06:48:02.2644686 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 70492 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-14 06:48:02.2644794 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 70492 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-14 06:48:03.0962086 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 31408 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:03.0962189 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 31408 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:03.5794096 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 42228 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:03.5794211 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 42228 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:03.9328228 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 12476 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:03.9328350 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 12476 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:03.9346471 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 70816 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:03.9346557 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 70816 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:04.1363300 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 12556 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:04.1363405 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 12556 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:04.1985968 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 39056 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:04.1986085 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 39056 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:05.3103392 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 40096 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 06:48:05.3103491 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 40096 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 06:48:06.8477591 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 41636 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-14 06:48:06.8477740 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 41636 C:\Windows\SysWOW64\runonce.exe [2026-08-14 06:48:07.3439028 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 71236 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-14 06:48:07.3439139 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 71236 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-14 06:48:07.3631707 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 63544 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 06:48:07.3631813 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 63544 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 06:48:07.6612634 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 42684 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:07.6612748 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 42684 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:07.7383635 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 71444 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-14 06:48:07.7383739 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 71444 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-14 06:48:08.1832099 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 71852 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:08.1832208 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 71852 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:08.2317104 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 71860 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:08.2317216 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 71860 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:08.2345088 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 71868 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:08.2345188 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 71868 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:08.9990066 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 72080 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-14 06:48:08.9990172 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 72080 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-14 06:48:09.1722379 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 72100 \??\C:\Windows\system32\wlrmdr.exe [2026-08-14 06:48:09.1722486 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 72100 C:\Windows\system32\wlrmdr.exe [2026-08-14 06:48:09.6027728 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 72168 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 06:48:09.6027839 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 72168 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 06:48:11.7667281 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 72412 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 06:48:11.7667501 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 72412 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 06:48:13.9532606 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 72560 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 06:48:13.9532702 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 72560 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 06:48:16.0147874 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 41736 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 06:48:16.0147978 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 41736 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 06:48:18.1016818 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 70848 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 06:48:18.1016917 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 70848 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 06:48:20.1446269 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 72124 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 06:48:20.1446530 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 72124 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 06:48:20.6197456 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 43816 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:20.6197563 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 43816 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:22.2547849 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 71784 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 06:48:22.2547967 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 71784 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 06:48:22.4791591 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 69620 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:22.4791715 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 69620 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:26.9740678 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 72832 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 06:48:26.9740785 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 72832 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 06:48:26.9914170 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 72844 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 06:48:26.9914270 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 72844 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 06:48:33.8852001 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 73396 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:33.8852367 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 73396 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:48:34.2613202 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 73448 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-14 06:48:34.2613340 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 73448 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-14 06:49:02.2077800 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 71116 \??\C:\Windows\splwow64.exe [2026-08-14 06:49:02.2078037 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 71116 C:\Windows\splwow64.exe [2026-08-14 06:49:04.0817371 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 73208 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:49:04.0817486 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 73208 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:50:03.8829622 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 70704 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:50:03.8829941 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 70704 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:53:09.7007941 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 40376 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:53:09.7008257 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 40376 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 06:54:33.0852709 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 43544 \??\C:\Windows\SysWOW64\hh.exe [2026-08-14 06:54:33.0852990 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 43544 C:\Windows\SysWOW64\hh.exe [2026-08-14 07:06:09.6881210 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 37492 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 07:06:09.6881634 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 37492 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 07:06:09.9651926 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 70184 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 07:06:09.9652170 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 70184 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 07:08:02.6638198 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 66956 \??\C:\IMC\RMS\RECORDS.EXE [2026-08-14 07:08:02.6638544 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 66956 C:\IMC\RMS\RECORDS.EXE [2026-08-14 07:11:13.8480664 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 73192 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\OneDrive.Sync.Service.exe [2026-08-14 07:11:13.8480922 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 73192 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\26.134.0713.0007\OneDrive.Sync.Service.exe [2026-08-14 07:12:06.0673742 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 70100 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 07:12:06.0673973 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 70100 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 07:12:58.6745657 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 73352 \SystemRoot\System32\Conhost.exe [2026-08-14 07:12:58.6745977 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 73352 \SystemRoot\System32\Conhost.exe [2026-08-14 07:14:36.3358083 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 70380 \??\C:\IMC\RMS\RMSIGNON.EXE [2026-08-14 07:14:36.3358362 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 70380 C:\IMC\RMS\RMSIGNON.EXE [2026-08-14 07:14:36.9554583 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 12096 \??\C:\IMC\RMS\Records.exe [2026-08-14 07:14:36.9554677 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 12096 C:\IMC\RMS\Records.exe [2026-08-14 07:26:18.8305352 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 72932 \??\C:\IMC\RMS\RECORDS.EXE [2026-08-14 07:26:18.8305841 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 72932 C:\IMC\RMS\RECORDS.EXE [2026-08-14 08:21:02.9323975 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 77008 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:21:02.9324378 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 77008 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:21:05.3887835 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 77164 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:21:05.3887951 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 77164 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:21:09.8764043 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 77392 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:21:09.8764300 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 77392 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:21:09.9100745 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 77420 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:21:09.9100845 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 77420 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:21:12.7256755 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 77608 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:21:12.7273370 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 77608 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:21:12.9262196 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 77684 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:21:12.9262585 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 77684 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:21:18.9776067 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 77028 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:21:18.9776178 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 77028 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:29:48.8770844 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 78824 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:29:48.8771305 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 78824 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:29:48.9721086 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 75172 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:29:48.9721896 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 75172 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:29:54.2791316 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 78868 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:29:54.2791588 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 78868 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:29:54.8381887 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 78920 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:29:54.8381995 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 78920 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:29:59.1006900 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 79328 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:29:59.1006992 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 79328 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:29:59.1018722 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 79336 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:29:59.1018813 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 79336 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:30:00.0820102 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 79436 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:30:00.0820381 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 79436 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:30:00.4764220 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 79496 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:30:00.4764379 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 79496 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:30:01.6932918 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 79724 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:30:01.6933023 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 79724 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:30:01.6959026 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 79732 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:30:01.6959117 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 79732 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:30:04.7656699 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 79252 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 08:30:04.7656817 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 79252 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 08:30:05.3170684 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 41276 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 08:30:05.3170793 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 41276 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 08:30:05.5399464 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 79984 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 08:30:05.5399583 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 79984 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 08:30:05.5510202 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 79992 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 08:30:05.5510314 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 79992 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 08:30:05.9547417 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 80100 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 08:30:05.9547545 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 80100 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 08:30:06.2213022 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 80140 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 08:30:06.2213193 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 80140 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 08:30:26.2212756 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 79048 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:30:26.2212990 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 79048 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:30:58.0058363 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 76028 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:30:58.0058648 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 76028 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:30:58.6365322 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 79192 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:30:58.6365429 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 79192 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:31:00.5665763 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 79000 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:31:00.5665994 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 79000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:31:28.8931490 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 77548 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:31:28.8931768 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 77548 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:31:29.2228146 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 78508 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:31:29.2228248 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 78508 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:31:29.4339652 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 78564 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:31:29.4339809 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 78564 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:31:29.5969039 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 80760 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:31:29.5969153 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 80760 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:32:00.2468074 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 12816 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:32:00.2468328 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 12816 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:32:00.2502954 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 78752 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:32:00.2503049 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 78752 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:32:00.2522253 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 79724 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:32:00.2522342 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 79724 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:32:31.4915998 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 79040 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:32:31.4917820 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 79040 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:32:31.5120149 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 77820 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:32:31.5120259 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 77820 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:33:02.5930600 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 80460 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:33:02.5930865 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 80460 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:33:02.6160269 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 78400 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:33:02.6160370 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 78400 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:33:02.8715995 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 78428 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:33:02.8716148 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 78428 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:35:35.6615397 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 78324 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:35:35.6615668 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 78324 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:35:35.7077470 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 77792 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:35:35.7077595 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 77792 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:36:17.3936055 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 78344 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 08:36:17.3936347 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 78344 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 08:36:20.1929520 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 77224 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 08:36:20.1929766 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 77224 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:12:58.6809819 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 81488 \SystemRoot\System32\Conhost.exe [2026-08-14 09:12:58.6810270 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 81488 \SystemRoot\System32\Conhost.exe [2026-08-14 09:14:16.9822720 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 81564 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-14 09:14:16.9823353 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 81564 C:\Windows\SysWOW64\WerFault.exe [2026-08-14 09:14:30.8630247 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 78624 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-14 09:14:30.8630729 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 78624 C:\IMC\MPS\IMCMobil.exe [2026-08-14 09:14:31.4884816 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 79020 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-14 09:14:31.4884892 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 79020 C:\IMC\MPS\iIMCMobl.exe [2026-08-14 09:14:39.2375852 UTC-04:00] [7508:5672] [fcmonitor 332 debug] proc cache add 74188 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-14 09:14:39.2375966 UTC-04:00] [7508:5672] [fcmonitor 99 info] add pid 74188 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-14 09:16:23.6557440 UTC-04:00] [2968:8068] [fcmonitor 1249 info] (Time Zone: Eastern Standard Time) (Sun Jun 30 22:28:59 2024, 70s) 2026-08-14 09:16:23.643 type: 0x10f size: 512 memory: 0x0000000000000000 [2026-08-14 09:16:23.6569460 UTC-04:00] [2968:8068] [fcmonitor 78 debug] ems_serial FCTEMS8821002497 [2026-08-14 09:16:23.6600820 UTC-04:00] [2968:8068] [fcmonitor 85 debug] fct_serial FCT8000515779876 [2026-08-14 09:16:23.6604295 UTC-04:00] [2968:8068] [fcmonitor 94 debug] fct_uid 4EF5549DB1674A63BE848553987D4AEE [2026-08-14 09:16:23.6604818 UTC-04:00] [2968:8068] [fcmonitor 103 debug] vdom default [2026-08-14 09:16:23.6604978 UTC-04:00] [2968:8068] [fcmonitor 843 info] InitCryptAlg [2026-08-14 09:16:23.6617817 UTC-04:00] [2968:8068] [fcmonitor 41 info] before LoadSettings [2026-08-14 09:16:23.6619512 UTC-04:00] [2968:8068] [fcmonitor 45 info] folder C:\Users\%USERNAME%\Desktop\ [2026-08-14 09:16:23.6619621 UTC-04:00] [2968:8068] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-14 09:16:23.6994605 UTC-04:00] [2968:8068] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-14 09:16:23.6995442 UTC-04:00] [2968:8068] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 0 [2026-08-14 09:16:23.6996115 UTC-04:00] [2968:8068] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 0 [2026-08-14 09:16:23.6996873 UTC-04:00] [2968:8068] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 0 [2026-08-14 09:16:23.6997670 UTC-04:00] [2968:8068] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 0 [2026-08-14 09:16:23.6998477 UTC-04:00] [2968:8068] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 0 [2026-08-14 09:16:23.6998680 UTC-04:00] [2968:8068] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 done [2026-08-14 09:16:23.6998794 UTC-04:00] [2968:8068] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-14 09:16:23.6998959 UTC-04:00] [2968:8068] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-14 09:16:23.6999031 UTC-04:00] [2968:8068] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-14 09:16:23.6999107 UTC-04:00] [2968:8068] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-14 09:16:23.6999203 UTC-04:00] [2968:8068] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-14 09:16:23.6999299 UTC-04:00] [2968:8068] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-14 09:16:23.6999622 UTC-04:00] [2968:8068] [fcmonitor 16 debug] add session=0 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-14 09:16:23.7230188 UTC-04:00] [2968:8068] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-14 09:16:23.7304725 UTC-04:00] [2968:8068] [fcmonitor 228 info] parsed to C:\Users\collinsa\Desktop\ for session 1 [2026-08-14 09:16:23.7325969 UTC-04:00] [2968:8068] [fcmonitor 228 info] parsed to C:\Users\collinsa\Documents\ for session 1 [2026-08-14 09:16:23.7347507 UTC-04:00] [2968:8068] [fcmonitor 228 info] parsed to C:\Users\collinsa\Favorites\ for session 1 [2026-08-14 09:16:23.7371989 UTC-04:00] [2968:8068] [fcmonitor 228 info] parsed to C:\Users\collinsa\Music\ for session 1 [2026-08-14 09:16:23.7392600 UTC-04:00] [2968:8068] [fcmonitor 228 info] parsed to C:\Users\collinsa\Pictures\ for session 1 [2026-08-14 09:16:23.7414205 UTC-04:00] [2968:8068] [fcmonitor 228 info] parsed to C:\Users\collinsa\Videos\ for session 1 [2026-08-14 09:16:23.7414375 UTC-04:00] [2968:8068] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 done [2026-08-14 09:16:23.7414436 UTC-04:00] [2968:8068] [fcmonitor 435 info] add c:\users\collinsa\desktop\ [2026-08-14 09:16:23.7414479 UTC-04:00] [2968:8068] [fcmonitor 435 info] add c:\users\collinsa\documents\ [2026-08-14 09:16:23.7414513 UTC-04:00] [2968:8068] [fcmonitor 435 info] add c:\users\collinsa\favorites\ [2026-08-14 09:16:23.7414544 UTC-04:00] [2968:8068] [fcmonitor 435 info] add c:\users\collinsa\music\ [2026-08-14 09:16:23.7414573 UTC-04:00] [2968:8068] [fcmonitor 435 info] add c:\users\collinsa\pictures\ [2026-08-14 09:16:23.7414606 UTC-04:00] [2968:8068] [fcmonitor 435 info] add c:\users\collinsa\videos\ [2026-08-14 09:16:23.7414748 UTC-04:00] [2968:8068] [fcmonitor 16 debug] add session=1 ret=1 str=C:\Users\collinsa\Desktop\;C:\Users\collinsa\Documents\;C:\Users\collinsa\Favorites\;C:\Users\collinsa\Music\;C:\Users\collinsa\Pictures\;C:\Users\collinsa\Videos\ [2026-08-14 09:16:23.7414784 UTC-04:00] [2968:8068] [fcmonitor 52 debug] reload monitor folder for session 0 [2026-08-14 09:16:23.7414952 UTC-04:00] [2968:8068] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-14 09:16:23.7414990 UTC-04:00] [2968:8068] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-14 09:16:23.7615139 UTC-04:00] [2968:8068] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 186547666944 499455451136 186547666944 [2026-08-14 09:16:23.7616692 UTC-04:00] [2968:8068] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-14 09:16:23.9591124 UTC-04:00] [2968:8068] [fcmonitor 232 info] queue lock 0x384 cleanevent 0x398 [2026-08-14 09:16:23.9592188 UTC-04:00] [2968:8068] [fcmonitor 245 info] init succeed [2026-08-14 09:16:23.9592223 UTC-04:00] [2968:8068] [fcmonitor 438 info] reading cache [2026-08-14 09:16:24.0293709 UTC-04:00] [2968:8068] [fcmonitor 440 info] getting all proc [2026-08-14 09:16:24.0514066 UTC-04:00] [2968:8068] [fcmonitor 159 debug] getting all proc [2026-08-14 09:16:24.0543834 UTC-04:00] [2968:8068] [fcmonitor 192 warning] GetAllProcTree can't find module 4 System [2026-08-14 09:16:24.0699369 UTC-04:00] [2968:8068] [fcmonitor 192 warning] GetAllProcTree can't find module 100 Registry [2026-08-14 09:16:24.5592471 UTC-04:00] [2968:8068] [fcmonitor 192 warning] GetAllProcTree can't find module 2452 Memory Compression [2026-08-14 09:16:25.1516179 UTC-04:00] [2968:8068] [fcmonitor 192 warning] GetAllProcTree can't find module 8124 net.exe [2026-08-14 09:16:25.1529628 UTC-04:00] [2968:8068] [fcmonitor 192 warning] GetAllProcTree can't find module 8388 net1.exe [2026-08-14 09:16:25.1936550 UTC-04:00] [2968:8068] [fcmonitor 192 warning] GetAllProcTree can't find module 8424 conhost.exe [2026-08-14 09:16:25.1951317 UTC-04:00] [2968:8068] [fcmonitor 286 debug] getting all proc finished 132 0 [2026-08-14 09:16:25.1951379 UTC-04:00] [2968:8068] [fcmonitor 442 info] finish [2026-08-14 09:16:25.1952597 UTC-04:00] [2968:8068] [fcmonitor 267 info] heap p 0x000001842C7029E0 [2026-08-14 09:16:25.1953197 UTC-04:00] [2968:8068] [fcmonitor 267 info] heap p 0x000001842C748750 [2026-08-14 09:16:25.1953566 UTC-04:00] [2968:8068] [fcmonitor 267 info] heap p 0x000001842C719160 [2026-08-14 09:16:25.1953954 UTC-04:00] [2968:8068] [fcmonitor 267 info] heap p 0x000001842C1162C0 [2026-08-14 09:16:25.1954334 UTC-04:00] [2968:8068] [fcmonitor 267 info] heap p 0x000001842C114F80 [2026-08-14 09:16:25.1954680 UTC-04:00] [2968:8068] [fcmonitor 267 info] heap p 0x000001842C115450 [2026-08-14 09:16:25.1955042 UTC-04:00] [2968:8068] [fcmonitor 267 info] heap p 0x000001842C115920 [2026-08-14 09:16:25.1955377 UTC-04:00] [2968:8068] [fcmonitor 267 info] heap p 0x000001842C116790 [2026-08-14 09:16:25.2471597 UTC-04:00] [2968:8712] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 09:16:25.2472357 UTC-04:00] [2968:8716] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 09:16:25.2473070 UTC-04:00] [2968:8720] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 09:16:25.2473764 UTC-04:00] [2968:8724] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 09:16:25.2474638 UTC-04:00] [2968:8728] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 09:16:25.2475325 UTC-04:00] [2968:8732] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 09:16:25.2476029 UTC-04:00] [2968:8736] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 09:16:25.2476721 UTC-04:00] [2968:8740] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 09:16:25.6291044 UTC-04:00] [2968:8708] [fcmonitor 475 warning] session 1 not init [2026-08-14 09:16:25.6353291 UTC-04:00] [2968:8708] [fcmonitor 228 info] parsed to C:\Users\collinsa\Desktop\ for session 1 [2026-08-14 09:16:25.6370570 UTC-04:00] [2968:8708] [fcmonitor 228 info] parsed to C:\Users\collinsa\Documents\ for session 1 [2026-08-14 09:16:25.6389819 UTC-04:00] [2968:8708] [fcmonitor 228 info] parsed to C:\Users\collinsa\Favorites\ for session 1 [2026-08-14 09:16:25.6407419 UTC-04:00] [2968:8708] [fcmonitor 228 info] parsed to C:\Users\collinsa\Music\ for session 1 [2026-08-14 09:16:25.6424762 UTC-04:00] [2968:8708] [fcmonitor 228 info] parsed to C:\Users\collinsa\Pictures\ for session 1 [2026-08-14 09:16:25.6442707 UTC-04:00] [2968:8708] [fcmonitor 228 info] parsed to C:\Users\collinsa\Videos\ for session 1 [2026-08-14 09:16:25.6442867 UTC-04:00] [2968:8708] [fcmonitor 435 info] add c:\users\collinsa\desktop\ [2026-08-14 09:16:25.6442915 UTC-04:00] [2968:8708] [fcmonitor 435 info] add c:\users\collinsa\documents\ [2026-08-14 09:16:25.6442965 UTC-04:00] [2968:8708] [fcmonitor 435 info] add c:\users\collinsa\favorites\ [2026-08-14 09:16:25.6442992 UTC-04:00] [2968:8708] [fcmonitor 435 info] add c:\users\collinsa\music\ [2026-08-14 09:16:25.6443019 UTC-04:00] [2968:8708] [fcmonitor 435 info] add c:\users\collinsa\pictures\ [2026-08-14 09:16:25.6443046 UTC-04:00] [2968:8708] [fcmonitor 435 info] add c:\users\collinsa\videos\ [2026-08-14 09:16:28.2360856 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 8404 \SystemRoot\System32\Conhost.exe [2026-08-14 09:16:28.2360961 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 8404 \SystemRoot\System32\Conhost.exe [2026-08-14 09:16:30.2723346 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 9320 \??\C:\Windows\system32\igfxEM.exe [2026-08-14 09:16:30.2723452 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 9320 C:\Windows\system32\igfxEM.exe [2026-08-14 09:16:32.1930137 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 9616 \??\C:\Windows\system32\igfxHK.exe [2026-08-14 09:16:32.1930235 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 9616 C:\Windows\system32\igfxHK.exe [2026-08-14 09:16:32.6952594 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 9696 \??\C:\Windows\system32\igfxTray.exe [2026-08-14 09:16:32.6952699 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 9696 C:\Windows\system32\igfxTray.exe [2026-08-14 09:16:36.3315505 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 10196 \??\C:\Windows\system32\userinit.exe [2026-08-14 09:16:36.3315852 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 10196 C:\Windows\system32\userinit.exe [2026-08-14 09:16:36.9718590 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 10220 \??\C:\Windows\Explorer.EXE [2026-08-14 09:16:36.9718731 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 10220 C:\Windows\Explorer.EXE [2026-08-14 09:17:04.3604341 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 11692 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-14 09:17:04.3604753 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 11692 C:\IMC\MPS\IMCMobil.exe [2026-08-14 09:17:06.3927713 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 12000 \??\C:\Windows\system32\wlrmdr.exe [2026-08-14 09:17:06.3927848 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 12000 C:\Windows\system32\wlrmdr.exe [2026-08-14 09:17:10.6550269 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 11252 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-14 09:17:10.6550361 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 11252 C:\IMC\MPS\iIMCMobl.exe [2026-08-14 09:17:15.0303097 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 12252 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-14 09:17:15.0303478 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 12252 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-14 09:17:16.1049802 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 12012 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-14 09:17:16.1049910 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 12012 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-14 09:17:17.2056539 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 2388 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:17:17.2056631 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 2388 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:17:18.3952225 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 2652 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-14 09:17:18.3952326 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 2652 C:\Windows\SysWOW64\runonce.exe [2026-08-14 09:17:20.6229350 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 1536 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-14 09:17:20.6229457 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 1536 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-14 09:17:22.2322599 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 5836 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-14 09:17:22.2322702 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 5836 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-14 09:17:22.7279337 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 6288 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-14 09:17:22.7279667 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 6288 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-14 09:17:29.0045831 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 4564 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:17:29.0046060 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 4564 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:17:32.1705395 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 12540 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 09:17:32.1705502 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 12540 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 09:17:33.1476826 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 12648 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:17:33.1476934 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 12648 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:17:33.1489038 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 12656 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:17:33.1489128 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 12656 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:17:33.1635255 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 12664 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:17:33.1635362 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 12664 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:17:33.1657426 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 12672 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:17:33.1657570 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 12672 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:17:34.2105554 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 12908 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 09:17:34.2105766 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 12908 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 09:17:36.2791305 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 12496 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 09:17:36.2791451 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 12496 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 09:17:38.3397864 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 9052 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 09:17:38.3397964 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 9052 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 09:17:38.6600422 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 12944 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 09:17:38.6600521 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 12944 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 09:17:48.0611683 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 1552 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-14 09:17:48.0611967 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 1552 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-14 09:17:59.8513691 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 3392 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:17:59.8513921 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 3392 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:18:41.1107877 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 12244 \??\C:\Windows\splwow64.exe [2026-08-14 09:18:41.1108135 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 12244 C:\Windows\splwow64.exe [2026-08-14 09:18:51.4501922 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 9612 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:18:51.4502161 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 9612 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:18:51.7187171 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 7600 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:18:51.7187326 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 7600 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:18:51.7206332 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 5508 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:18:51.7206427 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 5508 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:18:51.8589053 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 11404 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:18:51.8589161 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 11404 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:18:54.3952190 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 12456 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:18:54.3974389 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 12456 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:18:55.2608405 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 13032 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:18:55.2608550 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 13032 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:19:04.9779936 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 8592 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:19:04.9780270 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 8592 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:19:07.9267030 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 9312 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:19:07.9267141 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 9312 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:19:10.8511903 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 6504 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:19:10.8512010 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 6504 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:19:10.8524208 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 6632 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:19:10.8524299 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 6632 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:19:12.2764750 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 6904 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:19:12.2764868 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 6904 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:19:15.1120413 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 4412 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:19:15.1120703 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 4412 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:19:16.3270693 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 3008 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:19:16.3270804 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 3008 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:19:16.4090608 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 5888 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:19:16.4090716 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 5888 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:19:29.8438716 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 1408 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:19:29.8439132 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 1408 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:19:36.6836671 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 3256 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:19:36.6836860 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 3256 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:23:09.0460496 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 5772 \SystemRoot\System32\Conhost.exe [2026-08-14 09:23:09.0460952 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 5772 \SystemRoot\System32\Conhost.exe [2026-08-14 09:23:55.7722492 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 10444 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:23:55.7722770 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 10444 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 09:36:09.2236433 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 2200 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-14 09:36:09.2236785 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 2200 C:\IMC\RMS\TRAFFIC.EXE [2026-08-14 09:41:09.5885963 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 3280 \??\C:\IMC\MPS\CHECKS.EXE [2026-08-14 09:41:09.5886277 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 3280 C:\IMC\MPS\CHECKS.EXE [2026-08-14 10:26:13.4680196 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 13596 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-14 10:26:13.4680591 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 13596 C:\IMC\RMS\TRAFFIC.EXE [2026-08-14 10:27:39.7194659 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 14352 \??\C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe [2026-08-14 10:27:39.7195130 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 14352 C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe [2026-08-14 10:27:39.7357466 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 14972 \SystemRoot\System32\Conhost.exe [2026-08-14 10:27:39.7357568 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 14972 \SystemRoot\System32\Conhost.exe [2026-08-14 10:27:40.4466769 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 13376 \??\C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe [2026-08-14 10:27:40.4466889 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 13376 C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe [2026-08-14 10:47:01.5627796 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 16400 \SystemRoot\System32\Conhost.exe [2026-08-14 10:47:01.5628178 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 16400 \SystemRoot\System32\Conhost.exe [2026-08-14 10:47:01.5641392 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 16456 \SystemRoot\System32\Conhost.exe [2026-08-14 10:47:01.5641486 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 16456 \SystemRoot\System32\Conhost.exe [2026-08-14 11:05:53.4756727 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 2356 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-14 11:05:53.4757195 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 2356 C:\IMC\RMS\TRAFFIC.EXE [2026-08-14 11:17:50.7955475 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 17700 \SystemRoot\System32\Conhost.exe [2026-08-14 11:17:50.7956338 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 17700 \SystemRoot\System32\Conhost.exe [2026-08-14 11:29:15.5900163 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 19744 \??\C:\Windows\system32\rundll32.exe [2026-08-14 11:29:15.5900539 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 19744 C:\Windows\system32\rundll32.exe [2026-08-14 11:50:34.0717045 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 19984 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 11:50:34.0717508 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 19984 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 11:50:35.2644062 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 17756 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 11:50:35.2644187 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 17756 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 11:50:40.1087276 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 20864 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 11:50:40.1087382 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 20864 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 11:50:40.1438083 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 20892 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 11:50:40.1438199 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 20892 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 13:17:50.8741503 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 24772 \SystemRoot\System32\Conhost.exe [2026-08-14 13:17:50.8741856 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 24772 \SystemRoot\System32\Conhost.exe [2026-08-14 13:18:18.3049344 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 25396 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 13:18:18.3049635 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 25396 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 13:18:18.5831477 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 26360 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 13:18:18.5831557 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 26360 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 13:18:18.7910525 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 21360 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 13:18:18.7910785 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 21360 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 13:18:18.7923390 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 26632 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 13:18:18.7923482 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 26632 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 13:18:18.9657911 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 26748 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 13:18:18.9658215 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 26748 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 13:18:19.2189029 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 26884 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 13:18:19.2189128 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 26884 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-14 14:07:13.2532053 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 26416 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-14 14:07:13.2532461 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 26416 C:\IMC\RMS\TRAFFIC.EXE [2026-08-14 14:44:08.2906616 UTC-04:00] [2968:8708] [fcmonitor 332 debug] proc cache add 32272 \??\C:\Windows\system32\LogonUI.exe [2026-08-14 14:44:08.2928304 UTC-04:00] [2968:8708] [fcmonitor 99 info] add pid 32272 C:\Windows\system32\LogonUI.exe [2026-08-14 14:44:26.2721151 UTC-04:00] [2968:8544] [fcmonitor 90 debug] session change reason=6 session=1 [2026-08-14 14:44:26.2721529 UTC-04:00] [2968:8544] [fcmonitor 117 debug] add reason=6 session=1 ret=1 [2026-08-14 14:45:36.8438281 UTC-04:00] [7572:7580] [fcmonitor 1249 info] (Time Zone: Eastern Standard Time) (Sun Jun 30 22:28:59 2024, 50s) 2026-08-14 14:45:36.841 type: 0x10f size: 512 memory: 0x0000000000000000 [2026-08-14 14:45:36.8451053 UTC-04:00] [7572:7580] [fcmonitor 78 debug] ems_serial FCTEMS8821002497 [2026-08-14 14:45:36.8465490 UTC-04:00] [7572:7580] [fcmonitor 85 debug] fct_serial FCT8000515779876 [2026-08-14 14:45:36.8467424 UTC-04:00] [7572:7580] [fcmonitor 94 debug] fct_uid 4EF5549DB1674A63BE848553987D4AEE [2026-08-14 14:45:36.8467829 UTC-04:00] [7572:7580] [fcmonitor 103 debug] vdom default [2026-08-14 14:45:36.8468088 UTC-04:00] [7572:7580] [fcmonitor 843 info] InitCryptAlg [2026-08-14 14:45:36.8475654 UTC-04:00] [7572:7580] [fcmonitor 41 info] before LoadSettings [2026-08-14 14:45:36.8477072 UTC-04:00] [7572:7580] [fcmonitor 45 info] folder C:\Users\%USERNAME%\Desktop\ [2026-08-14 14:45:36.8477159 UTC-04:00] [7572:7580] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-14 14:45:36.8553970 UTC-04:00] [7572:7580] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-14 14:45:36.8554793 UTC-04:00] [7572:7580] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 0 [2026-08-14 14:45:36.8555443 UTC-04:00] [7572:7580] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 0 [2026-08-14 14:45:36.8556059 UTC-04:00] [7572:7580] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 0 [2026-08-14 14:45:36.8556669 UTC-04:00] [7572:7580] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 0 [2026-08-14 14:45:36.8557274 UTC-04:00] [7572:7580] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 0 [2026-08-14 14:45:36.8557373 UTC-04:00] [7572:7580] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 done [2026-08-14 14:45:36.8557433 UTC-04:00] [7572:7580] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-14 14:45:36.8557531 UTC-04:00] [7572:7580] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-14 14:45:36.8557565 UTC-04:00] [7572:7580] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-14 14:45:36.8557594 UTC-04:00] [7572:7580] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-14 14:45:36.8557625 UTC-04:00] [7572:7580] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-14 14:45:36.8557654 UTC-04:00] [7572:7580] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-14 14:45:36.8557831 UTC-04:00] [7572:7580] [fcmonitor 16 debug] add session=0 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-14 14:45:36.8740190 UTC-04:00] [7572:7580] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-14 14:45:36.8740254 UTC-04:00] [7572:7580] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-14 14:45:36.9232181 UTC-04:00] [7572:7580] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 186776424448 499455451136 186776424448 [2026-08-14 14:45:36.9232298 UTC-04:00] [7572:7580] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-14 14:45:37.1435316 UTC-04:00] [7572:7580] [fcmonitor 232 info] queue lock 0x3a0 cleanevent 0x3a4 [2026-08-14 14:45:37.1436307 UTC-04:00] [7572:7580] [fcmonitor 245 info] init succeed [2026-08-14 14:45:37.1436350 UTC-04:00] [7572:7580] [fcmonitor 438 info] reading cache [2026-08-14 14:45:37.1797414 UTC-04:00] [7572:7580] [fcmonitor 440 info] getting all proc [2026-08-14 14:45:37.2083951 UTC-04:00] [7572:7580] [fcmonitor 159 debug] getting all proc [2026-08-14 14:45:37.2110210 UTC-04:00] [7572:7580] [fcmonitor 192 warning] GetAllProcTree can't find module 4 System [2026-08-14 14:45:37.2785643 UTC-04:00] [7572:7580] [fcmonitor 192 warning] GetAllProcTree can't find module 100 Registry [2026-08-14 14:45:37.5547122 UTC-04:00] [7572:7580] [fcmonitor 192 warning] GetAllProcTree can't find module 2284 Memory Compression [2026-08-14 14:45:37.9519166 UTC-04:00] [7572:7580] [fcmonitor 192 warning] GetAllProcTree can't find module 3464 net1.exe [2026-08-14 14:45:37.9533509 UTC-04:00] [7572:7580] [fcmonitor 192 warning] GetAllProcTree can't find module 3296 conhost.exe [2026-08-14 14:45:37.9570220 UTC-04:00] [7572:7580] [fcmonitor 286 debug] getting all proc finished 122 0 [2026-08-14 14:45:37.9570290 UTC-04:00] [7572:7580] [fcmonitor 442 info] finish [2026-08-14 14:45:37.9571278 UTC-04:00] [7572:7580] [fcmonitor 267 info] heap p 0x000001403D590A20 [2026-08-14 14:45:37.9571653 UTC-04:00] [7572:7580] [fcmonitor 267 info] heap p 0x000001403D5860D0 [2026-08-14 14:45:37.9571979 UTC-04:00] [7572:7580] [fcmonitor 267 info] heap p 0x000001403D5B0410 [2026-08-14 14:45:37.9572326 UTC-04:00] [7572:7580] [fcmonitor 267 info] heap p 0x000001403D5A9DC0 [2026-08-14 14:45:37.9572634 UTC-04:00] [7572:7580] [fcmonitor 267 info] heap p 0x000001403D5AA290 [2026-08-14 14:45:37.9572958 UTC-04:00] [7572:7580] [fcmonitor 267 info] heap p 0x000001403D5AC440 [2026-08-14 14:45:37.9573250 UTC-04:00] [7572:7580] [fcmonitor 267 info] heap p 0x000001403D5AC910 [2026-08-14 14:45:37.9573578 UTC-04:00] [7572:7580] [fcmonitor 267 info] heap p 0x000001403D5ABF70 [2026-08-14 14:45:37.9660223 UTC-04:00] [7572:6624] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 14:45:37.9661641 UTC-04:00] [7572:6620] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 14:45:37.9662450 UTC-04:00] [7572:7236] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 14:45:37.9663198 UTC-04:00] [7572:7288] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 14:45:37.9664186 UTC-04:00] [7572:6996] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 14:45:37.9664884 UTC-04:00] [7572:6988] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 14:45:37.9668680 UTC-04:00] [7572:6752] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 14:45:37.9670227 UTC-04:00] [7572:6760] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 14:45:58.6298254 UTC-04:00] [7572:6616] [fcmonitor 475 warning] session 1 not init [2026-08-14 14:45:58.6359946 UTC-04:00] [7572:6616] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-14 14:45:58.6360558 UTC-04:00] [7572:6616] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 1 [2026-08-14 14:45:58.6361075 UTC-04:00] [7572:6616] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 1 [2026-08-14 14:45:58.6361591 UTC-04:00] [7572:6616] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 1 [2026-08-14 14:45:58.6362081 UTC-04:00] [7572:6616] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 1 [2026-08-14 14:45:58.6362569 UTC-04:00] [7572:6616] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 1 [2026-08-14 14:45:58.6362674 UTC-04:00] [7572:6616] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-14 14:45:58.6362703 UTC-04:00] [7572:6616] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-14 14:45:58.6362719 UTC-04:00] [7572:6616] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-14 14:45:58.6362738 UTC-04:00] [7572:6616] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-14 14:45:58.6362753 UTC-04:00] [7572:6616] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-14 14:45:58.6362768 UTC-04:00] [7572:6616] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-14 15:47:47.1805615 UTC-04:00] [7572:7972] [fcmonitor 90 debug] session change reason=5 session=1 [2026-08-14 15:47:47.1807534 UTC-04:00] [7572:7972] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-14 15:47:47.1876387 UTC-04:00] [7572:7972] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Desktop\ for session 1 [2026-08-14 15:47:47.1895734 UTC-04:00] [7572:7972] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Documents\ for session 1 [2026-08-14 15:47:47.1914776 UTC-04:00] [7572:7972] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Favorites\ for session 1 [2026-08-14 15:47:47.1936898 UTC-04:00] [7572:7972] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Music\ for session 1 [2026-08-14 15:47:47.1970870 UTC-04:00] [7572:7972] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Pictures\ for session 1 [2026-08-14 15:47:47.1988656 UTC-04:00] [7572:7972] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Videos\ for session 1 [2026-08-14 15:47:47.1988800 UTC-04:00] [7572:7972] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 done [2026-08-14 15:47:47.1988852 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\pfefferm\desktop\ [2026-08-14 15:47:47.1988897 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\pfefferm\documents\ [2026-08-14 15:47:47.1988924 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\pfefferm\favorites\ [2026-08-14 15:47:47.1988952 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\pfefferm\music\ [2026-08-14 15:47:47.1988978 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\pfefferm\pictures\ [2026-08-14 15:47:47.1989005 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\pfefferm\videos\ [2026-08-14 15:47:47.1989376 UTC-04:00] [7572:7972] [fcmonitor 16 debug] add session=1 ret=1 str=C:\Users\pfefferm\Desktop\;C:\Users\pfefferm\Documents\;C:\Users\pfefferm\Favorites\;C:\Users\pfefferm\Music\;C:\Users\pfefferm\Pictures\;C:\Users\pfefferm\Videos\ [2026-08-14 15:47:47.1989523 UTC-04:00] [7572:7972] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-14 15:47:47.1989558 UTC-04:00] [7572:7972] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-14 15:47:47.1992176 UTC-04:00] [7572:7972] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 186755702784 499455451136 186755702784 [2026-08-14 15:47:47.1992241 UTC-04:00] [7572:7972] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-14 15:47:49.3730531 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 12304 \SystemRoot\System32\Conhost.exe [2026-08-14 15:47:49.3730695 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 12304 \SystemRoot\System32\Conhost.exe [2026-08-14 15:47:50.3913183 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 12420 \??\C:\Windows\system32\igfxEM.exe [2026-08-14 15:47:50.3913283 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 12420 C:\Windows\system32\igfxEM.exe [2026-08-14 15:47:50.5905235 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 12436 \??\C:\Windows\system32\igfxHK.exe [2026-08-14 15:47:50.5905340 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 12436 C:\Windows\system32\igfxHK.exe [2026-08-14 15:47:50.7246848 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 12452 \??\C:\Windows\system32\igfxTray.exe [2026-08-14 15:47:50.7246952 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 12452 C:\Windows\system32\igfxTray.exe [2026-08-14 15:47:53.6010412 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 12980 \??\C:\Windows\system32\userinit.exe [2026-08-14 15:47:53.6010518 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 12980 C:\Windows\system32\userinit.exe [2026-08-14 15:47:54.3159062 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 13036 \??\C:\Windows\Explorer.EXE [2026-08-14 15:47:54.3159151 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 13036 C:\Windows\Explorer.EXE [2026-08-14 15:48:23.7228531 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 10656 \??\C:\Windows\system32\wlrmdr.exe [2026-08-14 15:48:23.7228962 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 10656 C:\Windows\system32\wlrmdr.exe [2026-08-14 15:48:25.3259732 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 2788 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-14 15:48:25.3259838 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 2788 C:\IMC\MPS\IMCMobil.exe [2026-08-14 15:48:27.3508650 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 14872 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-14 15:48:27.3508881 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 14872 C:\IMC\MPS\iIMCMobl.exe [2026-08-14 15:48:29.6607482 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 1036 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-14 15:48:29.6607627 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 1036 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-14 15:48:30.7106195 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 15320 \??\C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-14 15:48:30.7106294 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 15320 C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-14 15:48:32.3314027 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 10436 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 15:48:32.3314148 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 10436 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 15:48:33.9718937 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 12300 \??\C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Win32Bridge.Server.exe [2026-08-14 15:48:33.9719098 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 12300 C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Win32Bridge.Server.exe [2026-08-14 15:48:34.8015297 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 11316 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-14 15:48:34.8015399 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 11316 C:\Windows\SysWOW64\runonce.exe [2026-08-14 15:48:35.3155706 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 11748 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-14 15:48:35.3155830 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 11748 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-14 15:48:37.2871144 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 14628 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-14 15:48:37.2871372 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 14628 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-14 15:48:37.6293223 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 9236 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-14 15:48:37.6293365 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 9236 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-14 15:48:40.1852726 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 13416 \??\C:\Windows\System32\cmd.exe [2026-08-14 15:48:40.1852852 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 13416 C:\Windows\System32\cmd.exe [2026-08-14 15:48:40.3998546 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 13600 \SystemRoot\System32\Conhost.exe [2026-08-14 15:48:40.3998677 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 13600 \SystemRoot\System32\Conhost.exe [2026-08-14 15:48:41.3417787 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 10276 \??\C:\Windows\System32\cmd.exe [2026-08-14 15:48:41.3417877 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 10276 C:\Windows\System32\cmd.exe [2026-08-14 15:48:41.4503046 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 11144 \SystemRoot\System32\Conhost.exe [2026-08-14 15:48:41.4503144 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 11144 \SystemRoot\System32\Conhost.exe [2026-08-14 15:48:42.0353550 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 14448 \??\C:\Windows\System32\cmd.exe [2026-08-14 15:48:42.0353672 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 14448 C:\Windows\System32\cmd.exe [2026-08-14 15:48:42.1811693 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 11444 \SystemRoot\System32\Conhost.exe [2026-08-14 15:48:42.1811814 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 11444 \SystemRoot\System32\Conhost.exe [2026-08-14 15:48:43.6744231 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 15428 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 15:48:43.6744335 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 15428 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 15:48:49.3187685 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 16156 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 15:48:49.3187948 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 16156 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 15:48:49.7953586 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 16280 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 15:48:49.7953696 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 16280 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 15:48:49.7965305 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 16288 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 15:48:49.7965392 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 16288 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 15:48:49.8341349 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 16304 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 15:48:49.8341458 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 16304 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 15:48:49.8369821 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 16312 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 15:48:49.8369965 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 16312 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 15:48:49.8396338 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 16336 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 15:48:49.8396437 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 16336 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 15:48:49.9084442 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 16356 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 15:48:49.9084541 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 16356 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 15:48:51.0186064 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 15980 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 15:48:51.0186219 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 15980 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 15:48:51.3624255 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 12224 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 15:48:51.3624359 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 12224 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 15:48:53.3984934 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 12628 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 15:48:53.3985065 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 12628 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 15:48:55.4281885 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 16476 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 15:48:55.4281986 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 16476 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 15:49:00.2738938 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 16904 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 15:49:00.2739149 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 16904 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 15:49:00.4796767 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 16916 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 15:49:00.4796869 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 16916 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 15:49:14.5729336 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 13156 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 15:49:14.5729639 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 13156 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 15:49:14.6361024 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 16776 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-14 15:49:14.6361127 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 16776 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-14 15:50:05.7236842 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 11216 \??\C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-14 15:50:05.7237139 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 11216 C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-14 15:50:08.9846724 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 16984 \??\C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-14 15:50:08.9846962 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 16984 C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-14 15:50:28.2468695 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 15068 \??\C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\FileSyncConfig.exe [2026-08-14 15:50:28.2469015 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 15068 C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\FileSyncConfig.exe [2026-08-14 15:50:29.8724735 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 3012 \??\C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-14 15:50:29.8725160 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 3012 C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-14 15:50:35.5262594 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 16992 \??\C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\OneDrive.Sync.Service.exe [2026-08-14 15:50:35.5262704 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 16992 C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\OneDrive.Sync.Service.exe [2026-08-14 15:50:44.5642576 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 16344 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 15:50:44.5642844 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 16344 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:03:12.3120054 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 12656 \??\C:\Windows\splwow64.exe [2026-08-14 16:03:12.3120378 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 12656 C:\Windows\splwow64.exe [2026-08-14 16:17:22.4783556 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 14040 \??\C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-14 16:17:22.4783896 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 14040 C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-14 16:17:56.4623955 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 12252 \??\C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-14 16:17:56.4624221 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 12252 C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-14 16:23:57.1641710 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 11012 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-14 16:23:57.1642169 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 11012 C:\Windows\SysWOW64\WerFault.exe [2026-08-14 16:24:06.8461809 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 14456 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-14 16:24:06.8462743 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 14456 C:\Windows\SysWOW64\WerFault.exe [2026-08-14 16:24:12.5190191 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 10784 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:24:12.5190306 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 10784 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:24:12.6786397 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 15304 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:24:12.6786484 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 15304 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:24:57.6921644 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 9964 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:24:57.6921907 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 9964 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:29:14.9036942 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 14556 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:29:14.9037213 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 14556 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:37:14.2631954 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 15132 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:37:14.2632266 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 15132 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:37:16.5174052 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 13400 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:37:16.5174301 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 13400 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:37:17.3473911 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 12888 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:37:17.3474013 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 12888 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:37:18.2316168 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 17456 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:37:18.2316279 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 17456 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:37:19.7809552 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 17592 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:37:19.7809668 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 17592 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:37:21.7621672 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 17748 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:37:21.7621772 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 17748 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:38:01.5330822 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 15144 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:38:01.5331111 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 15144 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:38:01.7058085 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 17688 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:38:01.7058193 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 17688 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:38:01.8768772 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 17612 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:38:01.8768884 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 17612 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:38:01.8790787 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 14876 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:38:01.8790888 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 14876 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:38:02.0139979 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 17216 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:38:02.0140079 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 17216 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:38:02.1609820 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 13096 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:38:02.1609923 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 13096 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:38:03.4638218 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 17572 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 16:38:03.4638320 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 17572 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 16:38:03.4948904 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 15976 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 16:38:03.4949002 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 15976 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 16:38:31.8823985 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 16280 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:38:31.8824243 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 16280 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:40:01.8751661 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 15580 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:40:01.8752092 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 15580 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 16:47:07.1568754 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 13124 \SystemRoot\System32\Conhost.exe [2026-08-14 16:47:07.1569109 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 13124 \SystemRoot\System32\Conhost.exe [2026-08-14 17:25:47.2108160 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 19984 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-14 17:25:47.2108513 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 19984 C:\IMC\RMS\TRAFFIC.EXE [2026-08-14 18:22:08.9444875 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 22428 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-14 18:22:08.9445237 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 22428 C:\IMC\RMS\TRAFFIC.EXE [2026-08-14 18:47:08.6212310 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 25572 \SystemRoot\System32\Conhost.exe [2026-08-14 18:47:08.6212649 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 25572 \SystemRoot\System32\Conhost.exe [2026-08-14 20:38:03.4425416 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 30688 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:38:03.4425790 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 30688 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:38:03.4734930 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 32176 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:38:03.4735080 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 32176 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:38:03.6473621 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 32460 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:38:03.6473724 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 32460 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:38:03.8802172 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 31804 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:38:03.8802291 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 31804 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:38:03.8814966 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 32356 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:38:03.8815042 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 32356 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:38:04.1718311 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 28948 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:38:04.1718425 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 28948 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:38:04.3040461 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 30900 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:38:04.3040564 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 30900 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:38:05.1630155 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 32076 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:38:05.1630260 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 32076 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:38:05.1834442 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 31356 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:38:05.1834553 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 31356 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:38:05.5581598 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 32892 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:38:05.5581716 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 32892 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:38:06.5690774 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 33076 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 20:38:06.5690874 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 33076 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 20:38:06.6013414 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 33096 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 20:38:06.6013545 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 33096 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 20:38:33.8575361 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 32980 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:38:33.8575661 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 32980 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:40:03.8535774 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 26888 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:40:03.8536047 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 26888 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 20:47:08.6439719 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 33500 \SystemRoot\System32\Conhost.exe [2026-08-14 20:47:08.6440021 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 33500 \SystemRoot\System32\Conhost.exe [2026-08-14 21:07:16.9021826 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 33436 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-14 21:07:16.9022204 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 33436 C:\IMC\RMS\TRAFFIC.EXE [2026-08-14 22:45:31.9382052 UTC-04:00] [7572:6616] [fcmonitor 475 warning] session 2 not init [2026-08-14 22:45:31.9495742 UTC-04:00] [7572:6616] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-14 22:45:31.9496526 UTC-04:00] [7572:6616] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-14 22:45:31.9497137 UTC-04:00] [7572:6616] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-14 22:45:31.9497711 UTC-04:00] [7572:6616] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-14 22:45:31.9498260 UTC-04:00] [7572:6616] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-14 22:45:31.9498787 UTC-04:00] [7572:6616] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-14 22:45:31.9498908 UTC-04:00] [7572:6616] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-14 22:45:31.9498935 UTC-04:00] [7572:6616] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-14 22:45:31.9498952 UTC-04:00] [7572:6616] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-14 22:45:31.9498971 UTC-04:00] [7572:6616] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-14 22:45:31.9498991 UTC-04:00] [7572:6616] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-14 22:45:31.9499009 UTC-04:00] [7572:6616] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-14 22:45:32.8489342 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 41000 \??\C:\Windows\system32\LogonUI.exe [2026-08-14 22:45:32.8489494 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 41000 C:\Windows\system32\LogonUI.exe [2026-08-14 22:45:33.0676175 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 41100 \??\C:\Windows\System32\LogonUI.exe [2026-08-14 22:45:33.0676310 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 41100 C:\Windows\System32\LogonUI.exe [2026-08-14 22:45:33.0688550 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 41108 \??\C:\Windows\System32\dwm.exe [2026-08-14 22:45:33.0688644 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 41108 C:\Windows\System32\dwm.exe [2026-08-14 22:45:33.7238408 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 41424 \??\C:\Windows\System32\fontdrvhost.exe [2026-08-14 22:45:33.7238533 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 41424 C:\Windows\System32\fontdrvhost.exe [2026-08-14 22:45:34.3179227 UTC-04:00] [7572:7972] [fcmonitor 90 debug] session change reason=3 session=2 [2026-08-14 22:45:34.3180913 UTC-04:00] [7572:7972] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-14 22:45:34.3509066 UTC-04:00] [7572:7972] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-14 22:45:34.3510053 UTC-04:00] [7572:7972] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-14 22:45:34.3510875 UTC-04:00] [7572:7972] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-14 22:45:34.3511658 UTC-04:00] [7572:7972] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-14 22:45:34.3512428 UTC-04:00] [7572:7972] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-14 22:45:34.3513194 UTC-04:00] [7572:7972] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-14 22:45:34.3513295 UTC-04:00] [7572:7972] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-14 22:45:34.3513355 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-14 22:45:34.3513397 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-14 22:45:34.3513428 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-14 22:45:34.3513457 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-14 22:45:34.3513487 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-14 22:45:34.3513516 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-14 22:45:34.3513666 UTC-04:00] [7572:7972] [fcmonitor 16 debug] add session=2 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-14 22:45:34.3513805 UTC-04:00] [7572:7972] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-14 22:45:34.3513834 UTC-04:00] [7572:7972] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-14 22:45:34.3516819 UTC-04:00] [7572:7972] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 185841352704 499455451136 185841352704 [2026-08-14 22:45:34.3516905 UTC-04:00] [7572:7972] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-14 22:45:55.5724758 UTC-04:00] [7572:7972] [fcmonitor 90 debug] session change reason=6 session=1 [2026-08-14 22:45:55.5725015 UTC-04:00] [7572:7972] [fcmonitor 117 debug] add reason=6 session=1 ret=1 [2026-08-14 22:45:56.0243916 UTC-04:00] [7572:7972] [fcmonitor 90 debug] session change reason=2 session=1 [2026-08-14 22:45:56.0243991 UTC-04:00] [7572:7972] [fcmonitor 117 debug] add reason=2 session=1 ret=1 [2026-08-14 22:45:56.0675647 UTC-04:00] [7572:7972] [fcmonitor 90 debug] session change reason=4 session=2 [2026-08-14 22:45:56.0675749 UTC-04:00] [7572:7972] [fcmonitor 117 debug] add reason=4 session=2 ret=1 [2026-08-14 22:45:56.2130692 UTC-04:00] [7572:7972] [fcmonitor 90 debug] session change reason=1 session=2 [2026-08-14 22:45:56.2132149 UTC-04:00] [7572:7972] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-14 22:45:56.2373312 UTC-04:00] [7572:7972] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-14 22:45:56.2374236 UTC-04:00] [7572:7972] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-14 22:45:56.2375063 UTC-04:00] [7572:7972] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-14 22:45:56.2375823 UTC-04:00] [7572:7972] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-14 22:45:56.2376602 UTC-04:00] [7572:7972] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-14 22:45:56.2377347 UTC-04:00] [7572:7972] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-14 22:45:56.2377435 UTC-04:00] [7572:7972] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-14 22:45:56.2377500 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-14 22:45:56.2377540 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-14 22:45:56.2377569 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-14 22:45:56.2377596 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-14 22:45:56.2377622 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-14 22:45:56.2377647 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-14 22:45:56.2377756 UTC-04:00] [7572:7972] [fcmonitor 16 debug] add session=2 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-14 22:45:56.2377881 UTC-04:00] [7572:7972] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-14 22:45:56.2377909 UTC-04:00] [7572:7972] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-14 22:45:56.2379621 UTC-04:00] [7572:7972] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 185849090048 499455451136 185849090048 [2026-08-14 22:45:56.2379689 UTC-04:00] [7572:7972] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-14 23:06:04.5448107 UTC-04:00] [7572:7972] [fcmonitor 90 debug] session change reason=5 session=2 [2026-08-14 23:06:04.5450262 UTC-04:00] [7572:7972] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-14 23:06:04.5534986 UTC-04:00] [7572:7972] [fcmonitor 228 info] parsed to C:\Users\cloughec\Desktop\ for session 2 [2026-08-14 23:06:04.5554441 UTC-04:00] [7572:7972] [fcmonitor 228 info] parsed to C:\Users\cloughec\Documents\ for session 2 [2026-08-14 23:06:04.5574144 UTC-04:00] [7572:7972] [fcmonitor 228 info] parsed to C:\Users\cloughec\Favorites\ for session 2 [2026-08-14 23:06:04.5598084 UTC-04:00] [7572:7972] [fcmonitor 228 info] parsed to C:\Users\cloughec\Music\ for session 2 [2026-08-14 23:06:04.5620967 UTC-04:00] [7572:7972] [fcmonitor 228 info] parsed to C:\Users\cloughec\Pictures\ for session 2 [2026-08-14 23:06:04.5639242 UTC-04:00] [7572:7972] [fcmonitor 228 info] parsed to C:\Users\cloughec\Videos\ for session 2 [2026-08-14 23:06:04.5639394 UTC-04:00] [7572:7972] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-14 23:06:04.5639456 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\cloughec\desktop\ [2026-08-14 23:06:04.5639502 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\cloughec\documents\ [2026-08-14 23:06:04.5639532 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\cloughec\favorites\ [2026-08-14 23:06:04.5639561 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\cloughec\music\ [2026-08-14 23:06:04.5639590 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\cloughec\pictures\ [2026-08-14 23:06:04.5639635 UTC-04:00] [7572:7972] [fcmonitor 435 info] add c:\users\cloughec\videos\ [2026-08-14 23:06:04.5639741 UTC-04:00] [7572:7972] [fcmonitor 16 debug] add session=2 ret=0 str=C:\Users\cloughec\Desktop\;C:\Users\cloughec\Documents\;C:\Users\cloughec\Favorites\;C:\Users\cloughec\Music\;C:\Users\cloughec\Pictures\;C:\Users\cloughec\Videos\ [2026-08-14 23:06:04.5639883 UTC-04:00] [7572:7972] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-14 23:06:04.5639916 UTC-04:00] [7572:7972] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-14 23:06:04.5642195 UTC-04:00] [7572:7972] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 185916018688 499455451136 185916018688 [2026-08-14 23:06:04.5642378 UTC-04:00] [7572:7972] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-14 23:06:05.6605266 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 41240 \SystemRoot\System32\Conhost.exe [2026-08-14 23:06:05.6605411 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 41240 \SystemRoot\System32\Conhost.exe [2026-08-14 23:06:07.3706401 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 16612 \??\C:\Windows\system32\userinit.exe [2026-08-14 23:06:07.3706500 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 16612 C:\Windows\system32\userinit.exe [2026-08-14 23:06:07.3721774 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 10808 \??\C:\Windows\system32\igfxEM.exe [2026-08-14 23:06:07.3721903 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 10808 C:\Windows\system32\igfxEM.exe [2026-08-14 23:06:07.5608968 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 10844 \??\C:\Windows\system32\igfxHK.exe [2026-08-14 23:06:07.5609096 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 10844 C:\Windows\system32\igfxHK.exe [2026-08-14 23:06:07.6587653 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 14088 \??\C:\Windows\Explorer.EXE [2026-08-14 23:06:07.6587766 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 14088 C:\Windows\Explorer.EXE [2026-08-14 23:06:07.7071852 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 41784 \??\C:\Windows\system32\igfxTray.exe [2026-08-14 23:06:07.7071966 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 41784 C:\Windows\system32\igfxTray.exe [2026-08-14 23:06:37.4905368 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 13232 \??\C:\Windows\System32\wlrmdr.exe [2026-08-14 23:06:37.4905611 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 13232 C:\Windows\System32\wlrmdr.exe [2026-08-14 23:06:40.0902971 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 40716 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-14 23:06:40.0903199 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 40716 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-14 23:06:41.2726871 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 4408 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-14 23:06:41.2726974 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 4408 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-14 23:06:41.9288879 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 12136 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-14 23:06:41.9288987 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 12136 C:\IMC\MPS\IMCMobil.exe [2026-08-14 23:06:41.9737021 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 16620 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.251.23\MicrosoftEdgeUpdateCore.exe [2026-08-14 23:06:41.9737124 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 16620 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.251.23\MicrosoftEdgeUpdateCore.exe [2026-08-14 23:06:42.5474117 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 256 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-14 23:06:42.5474218 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 256 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-14 23:06:42.6894674 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 35708 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:06:42.6894941 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 35708 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:06:43.2570456 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 43040 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-14 23:06:43.2570554 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 43040 C:\IMC\MPS\iIMCMobl.exe [2026-08-14 23:06:43.3038307 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 43056 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-14 23:06:43.3038442 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 43056 C:\Windows\SysWOW64\runonce.exe [2026-08-14 23:06:44.1180301 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 43228 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-14 23:06:44.1180422 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 43228 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-14 23:06:45.0321502 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 43300 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-14 23:06:45.0321622 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 43300 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-14 23:06:45.6009125 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 43356 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-14 23:06:45.6009240 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 43356 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-14 23:06:50.9521666 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 43532 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 23:06:50.9521921 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 43532 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 23:06:52.2880766 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 43684 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:06:52.2880889 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 43684 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:06:53.0569978 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 44028 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 23:06:53.0570082 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 44028 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 23:06:55.1585271 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 43328 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 23:06:55.1585390 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 43328 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 23:06:57.2185825 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 43572 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 23:06:57.2185941 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 43572 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 23:06:57.7618731 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 43860 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:06:57.7618875 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 43860 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:06:57.7636931 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 43928 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:06:57.7637019 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 43928 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:06:57.8061872 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 43916 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:06:57.8062119 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 43916 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:06:57.8082081 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 42144 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:06:57.8082173 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 42144 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:06:57.8575771 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 43792 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:06:57.8575898 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 43792 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:06:59.2756029 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 44088 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 23:06:59.2756156 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 44088 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 23:07:01.3276341 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 44172 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 23:07:01.3276509 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 44172 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-14 23:07:03.0461698 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 44308 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 23:07:03.0461825 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 44308 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 23:07:03.0779475 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 44324 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 23:07:03.0779580 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 44324 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 23:07:23.0546323 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 44948 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:07:23.0546578 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 44948 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:07:29.3343491 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 43500 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-14 23:07:29.3343750 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 43500 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-14 23:07:35.0831598 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 43068 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-14 23:07:35.0831708 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 43068 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-14 23:07:50.1848500 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 17816 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\FileSyncConfig.exe [2026-08-14 23:07:50.1848755 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 17816 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\FileSyncConfig.exe [2026-08-14 23:07:51.4208184 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 32460 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-14 23:07:51.4208263 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 32460 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-14 23:07:54.9056898 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 42424 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:07:54.9057003 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 42424 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:07:56.6028595 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 44736 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\OneDrive.Sync.Service.exe [2026-08-14 23:07:56.6028701 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 44736 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\OneDrive.Sync.Service.exe [2026-08-14 23:08:13.0518775 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 44124 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-14 23:08:13.0519046 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 44124 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-14 23:08:53.0566884 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 43604 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:08:53.0567187 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 43604 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:00.4850100 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 34296 \??\C:\Windows\splwow64.exe [2026-08-14 23:09:00.4850348 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 34296 C:\Windows\splwow64.exe [2026-08-14 23:09:09.2106000 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 42836 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:09.2106288 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 42836 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:09.2867996 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 43168 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:09.2868109 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 43168 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:10.7210864 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 40696 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:10.7210964 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 40696 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:10.7223614 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 42272 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:10.7223699 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 42272 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:10.7287148 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 16556 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:10.7287252 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 16556 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:13.3610618 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 41912 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:13.3610746 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 41912 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:13.5813286 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 14204 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:13.5813392 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 14204 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:15.5010050 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 38812 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:15.5010168 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 38812 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:19.0263201 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 44308 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:19.0263469 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 44308 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:20.3739415 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 44084 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:20.3739526 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 44084 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:20.4242392 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 43600 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:20.4242507 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 43600 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:54.1904037 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 42656 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:54.1904332 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 42656 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:54.6435160 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 42168 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:09:54.6435276 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 42168 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:10:51.2272522 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 40052 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:10:51.2272825 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 40052 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:10:51.4641822 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 44228 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:10:51.4641921 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 44228 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:10:55.3429177 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 42008 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:10:55.3429311 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 42008 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:10:56.7581415 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 41388 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:10:56.7581649 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 41388 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:11:05.8580197 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 40388 \??\C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-14 23:11:05.8580439 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 40388 C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-14 23:14:10.8008258 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 38924 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:14:10.8008637 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 38924 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:14:51.3445870 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 41372 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\Install\{2537E798-6616-446B-9A94-83F269221047}\MicrosoftEdgeUpdateSetup_X [2026-08-14 23:14:51.3446349 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 41372 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\Install\{2537E798-6616-446B-9A94-83F269221047}\MicrosoftEdgeUpdateSetup_X [2026-08-14 23:14:51.4437805 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 44236 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-14 23:14:51.4437925 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 44236 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-14 23:14:52.1273277 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 14056 \??\C:\Users\cloughec\AppData\Local\Temp\EUF969.tmp\MicrosoftEdgeUpdate.exe [2026-08-14 23:14:52.1273409 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 14056 C:\Users\cloughec\AppData\Local\Temp\EUF969.tmp\MicrosoftEdgeUpdate.exe [2026-08-14 23:14:52.5868568 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 9624 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-14 23:14:52.5868674 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 9624 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-14 23:14:52.6779004 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 11784 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.257.13\MicrosoftEdgeUpdateComRegisterShell64.exe [2026-08-14 23:14:52.6779134 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 11784 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.257.13\MicrosoftEdgeUpdateComRegisterShell64.exe [2026-08-14 23:14:52.8962320 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 12792 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.257.13\MicrosoftEdgeUpdateComRegisterShell64.exe [2026-08-14 23:14:52.8962437 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 12792 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.257.13\MicrosoftEdgeUpdateComRegisterShell64.exe [2026-08-14 23:14:52.9960168 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 17688 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.257.13\MicrosoftEdgeUpdateComRegisterShell64.exe [2026-08-14 23:14:52.9960287 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 17688 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.257.13\MicrosoftEdgeUpdateComRegisterShell64.exe [2026-08-14 23:14:53.5471088 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 15176 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-14 23:14:53.5471197 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 15176 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-14 23:18:43.7948908 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 41736 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-14 23:18:43.7949258 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 41736 C:\IMC\MPS\IMCMobil.exe [2026-08-14 23:18:44.4437430 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 41580 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-14 23:18:44.4437514 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 41580 C:\IMC\MPS\iIMCMobl.exe [2026-08-14 23:18:53.1045586 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 620 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-14 23:18:53.1045929 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 620 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-14 23:20:14.3065148 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 44088 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-14 23:20:14.3065368 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 44088 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-14 23:20:45.9327887 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 12436 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:20:45.9328158 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 12436 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:20:46.1382604 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 12168 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:20:46.1382768 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 12168 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:20:46.3853196 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 10656 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:20:46.3853310 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 10656 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:20:46.3868190 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 41584 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:20:46.3868297 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 41584 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:20:46.5295434 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 11032 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:20:46.5295537 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 11032 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:20:46.8439465 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 42356 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:20:46.8439581 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 42356 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:20:48.3039418 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 33108 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 23:20:48.3039665 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 33108 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 23:20:48.3342192 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 9828 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 23:20:48.3342305 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 9828 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 23:20:52.2912243 UTC-04:00] [7572:6616] [fcmonitor 332 debug] proc cache add 44028 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-14 23:20:52.2912378 UTC-04:00] [7572:6616] [fcmonitor 99 info] add pid 44028 C:\Windows\SysWOW64\WerFault.exe [2026-08-14 23:22:27.2424110 UTC-04:00] [2164:1608] [fcmonitor 1249 info] (Time Zone: Eastern Standard Time) (Sun Jun 30 22:28:59 2024, 59s) 2026-08-14 23:22:27.233 type: 0x10f size: 512 memory: 0x0000000000000000 [2026-08-14 23:22:27.2433404 UTC-04:00] [2164:1608] [fcmonitor 78 debug] ems_serial FCTEMS8821002497 [2026-08-14 23:22:27.2451710 UTC-04:00] [2164:1608] [fcmonitor 85 debug] fct_serial FCT8000515779876 [2026-08-14 23:22:27.2453586 UTC-04:00] [2164:1608] [fcmonitor 94 debug] fct_uid 4EF5549DB1674A63BE848553987D4AEE [2026-08-14 23:22:27.2453960 UTC-04:00] [2164:1608] [fcmonitor 103 debug] vdom default [2026-08-14 23:22:27.2454094 UTC-04:00] [2164:1608] [fcmonitor 843 info] InitCryptAlg [2026-08-14 23:22:27.2464610 UTC-04:00] [2164:1608] [fcmonitor 41 info] before LoadSettings [2026-08-14 23:22:27.2466211 UTC-04:00] [2164:1608] [fcmonitor 45 info] folder C:\Users\%USERNAME%\Desktop\ [2026-08-14 23:22:27.2466322 UTC-04:00] [2164:1608] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-14 23:22:27.2581089 UTC-04:00] [2164:1608] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-14 23:22:27.2581794 UTC-04:00] [2164:1608] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 0 [2026-08-14 23:22:27.2582425 UTC-04:00] [2164:1608] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 0 [2026-08-14 23:22:27.2583024 UTC-04:00] [2164:1608] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 0 [2026-08-14 23:22:27.2583635 UTC-04:00] [2164:1608] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 0 [2026-08-14 23:22:27.2584222 UTC-04:00] [2164:1608] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 0 [2026-08-14 23:22:27.2584322 UTC-04:00] [2164:1608] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 done [2026-08-14 23:22:27.2584380 UTC-04:00] [2164:1608] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-14 23:22:27.2584490 UTC-04:00] [2164:1608] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-14 23:22:27.2584572 UTC-04:00] [2164:1608] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-14 23:22:27.2584606 UTC-04:00] [2164:1608] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-14 23:22:27.2584638 UTC-04:00] [2164:1608] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-14 23:22:27.2584703 UTC-04:00] [2164:1608] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-14 23:22:27.2584882 UTC-04:00] [2164:1608] [fcmonitor 16 debug] add session=0 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-14 23:22:27.2744519 UTC-04:00] [2164:1608] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-14 23:22:27.2810891 UTC-04:00] [2164:1608] [fcmonitor 228 info] parsed to C:\Users\cloughec\Desktop\ for session 1 [2026-08-14 23:22:27.2832443 UTC-04:00] [2164:1608] [fcmonitor 228 info] parsed to C:\Users\cloughec\Documents\ for session 1 [2026-08-14 23:22:27.2853079 UTC-04:00] [2164:1608] [fcmonitor 228 info] parsed to C:\Users\cloughec\Favorites\ for session 1 [2026-08-14 23:22:27.2965193 UTC-04:00] [2164:1608] [fcmonitor 228 info] parsed to C:\Users\cloughec\Music\ for session 1 [2026-08-14 23:22:27.2985269 UTC-04:00] [2164:1608] [fcmonitor 228 info] parsed to C:\Users\cloughec\Pictures\ for session 1 [2026-08-14 23:22:27.3003110 UTC-04:00] [2164:1608] [fcmonitor 228 info] parsed to C:\Users\cloughec\Videos\ for session 1 [2026-08-14 23:22:27.3003254 UTC-04:00] [2164:1608] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 done [2026-08-14 23:22:27.3003307 UTC-04:00] [2164:1608] [fcmonitor 435 info] add c:\users\cloughec\desktop\ [2026-08-14 23:22:27.3003349 UTC-04:00] [2164:1608] [fcmonitor 435 info] add c:\users\cloughec\documents\ [2026-08-14 23:22:27.3003379 UTC-04:00] [2164:1608] [fcmonitor 435 info] add c:\users\cloughec\favorites\ [2026-08-14 23:22:27.3003406 UTC-04:00] [2164:1608] [fcmonitor 435 info] add c:\users\cloughec\music\ [2026-08-14 23:22:27.3003432 UTC-04:00] [2164:1608] [fcmonitor 435 info] add c:\users\cloughec\pictures\ [2026-08-14 23:22:27.3003458 UTC-04:00] [2164:1608] [fcmonitor 435 info] add c:\users\cloughec\videos\ [2026-08-14 23:22:27.3003580 UTC-04:00] [2164:1608] [fcmonitor 16 debug] add session=1 ret=1 str=C:\Users\cloughec\Desktop\;C:\Users\cloughec\Documents\;C:\Users\cloughec\Favorites\;C:\Users\cloughec\Music\;C:\Users\cloughec\Pictures\;C:\Users\cloughec\Videos\ [2026-08-14 23:22:27.3003607 UTC-04:00] [2164:1608] [fcmonitor 52 debug] reload monitor folder for session 0 [2026-08-14 23:22:27.3003740 UTC-04:00] [2164:1608] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-14 23:22:27.3003770 UTC-04:00] [2164:1608] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-14 23:22:27.3008473 UTC-04:00] [2164:1608] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 185299791872 499455451136 185299791872 [2026-08-14 23:22:27.3008554 UTC-04:00] [2164:1608] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-14 23:22:27.4417334 UTC-04:00] [2164:1608] [fcmonitor 232 info] queue lock 0x38c cleanevent 0x3ac [2026-08-14 23:22:27.4418642 UTC-04:00] [2164:1608] [fcmonitor 245 info] init succeed [2026-08-14 23:22:27.4418698 UTC-04:00] [2164:1608] [fcmonitor 438 info] reading cache [2026-08-14 23:22:27.5082835 UTC-04:00] [2164:1608] [fcmonitor 440 info] getting all proc [2026-08-14 23:22:27.5645061 UTC-04:00] [2164:1608] [fcmonitor 159 debug] getting all proc [2026-08-14 23:22:27.5674262 UTC-04:00] [2164:1608] [fcmonitor 192 warning] GetAllProcTree can't find module 4 System [2026-08-14 23:22:27.6189908 UTC-04:00] [2164:1608] [fcmonitor 192 warning] GetAllProcTree can't find module 100 Registry [2026-08-14 23:22:27.8955183 UTC-04:00] [2164:1608] [fcmonitor 192 warning] GetAllProcTree can't find module 2420 Memory Compression [2026-08-14 23:22:28.4701280 UTC-04:00] [2164:1608] [fcmonitor 192 warning] GetAllProcTree can't find module 8228 net1.exe [2026-08-14 23:22:28.4739912 UTC-04:00] [2164:1608] [fcmonitor 286 debug] getting all proc finished 128 0 [2026-08-14 23:22:28.4740010 UTC-04:00] [2164:1608] [fcmonitor 442 info] finish [2026-08-14 23:22:28.4741445 UTC-04:00] [2164:1608] [fcmonitor 267 info] heap p 0x0000021D978531C0 [2026-08-14 23:22:28.4742114 UTC-04:00] [2164:1608] [fcmonitor 267 info] heap p 0x0000021D97FDBF70 [2026-08-14 23:22:28.4742727 UTC-04:00] [2164:1608] [fcmonitor 267 info] heap p 0x0000021D97FDC420 [2026-08-14 23:22:28.4743407 UTC-04:00] [2164:1608] [fcmonitor 267 info] heap p 0x0000021D97FF5A30 [2026-08-14 23:22:28.4743990 UTC-04:00] [2164:1608] [fcmonitor 267 info] heap p 0x0000021D97FF3880 [2026-08-14 23:22:28.4744610 UTC-04:00] [2164:1608] [fcmonitor 267 info] heap p 0x0000021D97FF5F00 [2026-08-14 23:22:28.4745220 UTC-04:00] [2164:1608] [fcmonitor 267 info] heap p 0x0000021D97FF7240 [2026-08-14 23:22:28.4745803 UTC-04:00] [2164:1608] [fcmonitor 267 info] heap p 0x0000021D97FF3D50 [2026-08-14 23:22:28.4833099 UTC-04:00] [2164:8416] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 23:22:28.4833865 UTC-04:00] [2164:8420] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 23:22:28.4834571 UTC-04:00] [2164:8424] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 23:22:28.4835276 UTC-04:00] [2164:8428] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 23:22:28.4836117 UTC-04:00] [2164:8432] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 23:22:28.4837147 UTC-04:00] [2164:8436] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 23:22:28.4842224 UTC-04:00] [2164:8440] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 23:22:28.4842999 UTC-04:00] [2164:8444] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-14 23:22:28.9530590 UTC-04:00] [2164:8412] [fcmonitor 475 warning] session 1 not init [2026-08-14 23:22:28.9604014 UTC-04:00] [2164:8412] [fcmonitor 228 info] parsed to C:\Users\cloughec\Desktop\ for session 1 [2026-08-14 23:22:28.9623361 UTC-04:00] [2164:8412] [fcmonitor 228 info] parsed to C:\Users\cloughec\Documents\ for session 1 [2026-08-14 23:22:28.9642366 UTC-04:00] [2164:8412] [fcmonitor 228 info] parsed to C:\Users\cloughec\Favorites\ for session 1 [2026-08-14 23:22:28.9661300 UTC-04:00] [2164:8412] [fcmonitor 228 info] parsed to C:\Users\cloughec\Music\ for session 1 [2026-08-14 23:22:28.9680430 UTC-04:00] [2164:8412] [fcmonitor 228 info] parsed to C:\Users\cloughec\Pictures\ for session 1 [2026-08-14 23:22:28.9699597 UTC-04:00] [2164:8412] [fcmonitor 228 info] parsed to C:\Users\cloughec\Videos\ for session 1 [2026-08-14 23:22:28.9699745 UTC-04:00] [2164:8412] [fcmonitor 435 info] add c:\users\cloughec\desktop\ [2026-08-14 23:22:28.9699792 UTC-04:00] [2164:8412] [fcmonitor 435 info] add c:\users\cloughec\documents\ [2026-08-14 23:22:28.9699829 UTC-04:00] [2164:8412] [fcmonitor 435 info] add c:\users\cloughec\favorites\ [2026-08-14 23:22:28.9699862 UTC-04:00] [2164:8412] [fcmonitor 435 info] add c:\users\cloughec\music\ [2026-08-14 23:22:28.9699897 UTC-04:00] [2164:8412] [fcmonitor 435 info] add c:\users\cloughec\pictures\ [2026-08-14 23:22:28.9699930 UTC-04:00] [2164:8412] [fcmonitor 435 info] add c:\users\cloughec\videos\ [2026-08-14 23:22:30.6704303 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 9168 \SystemRoot\System32\Conhost.exe [2026-08-14 23:22:30.6704416 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 9168 \SystemRoot\System32\Conhost.exe [2026-08-14 23:22:33.3208965 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 9268 \??\C:\Windows\system32\igfxEM.exe [2026-08-14 23:22:33.3209126 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 9268 C:\Windows\system32\igfxEM.exe [2026-08-14 23:22:34.2310880 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 9344 \??\C:\Windows\system32\igfxHK.exe [2026-08-14 23:22:34.2311029 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 9344 C:\Windows\system32\igfxHK.exe [2026-08-14 23:22:34.5509888 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 9380 \??\C:\Windows\system32\igfxTray.exe [2026-08-14 23:22:34.5509987 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 9380 C:\Windows\system32\igfxTray.exe [2026-08-14 23:22:35.6319685 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 9596 \??\C:\Windows\system32\userinit.exe [2026-08-14 23:22:35.6323411 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 9596 C:\Windows\system32\userinit.exe [2026-08-14 23:22:37.2543950 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 9892 \??\C:\Windows\Explorer.EXE [2026-08-14 23:22:37.2544070 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 9892 C:\Windows\Explorer.EXE [2026-08-14 23:23:05.7583799 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 12200 \??\C:\Windows\system32\wlrmdr.exe [2026-08-14 23:23:05.7584098 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 12200 C:\Windows\system32\wlrmdr.exe [2026-08-14 23:23:18.4901150 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 10888 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-14 23:23:18.4901349 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 10888 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-14 23:23:19.2085484 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 12248 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-14 23:23:19.2085585 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 12248 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-14 23:23:20.2866284 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 11700 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.257.13\MicrosoftEdgeUpdateCore.exe [2026-08-14 23:23:20.2866388 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 11700 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.257.13\MicrosoftEdgeUpdateCore.exe [2026-08-14 23:23:20.6544037 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 11468 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:23:20.6544143 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 11468 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:23:21.3959032 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 4204 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-14 23:23:21.3959121 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 4204 C:\Windows\SysWOW64\runonce.exe [2026-08-14 23:23:21.5687062 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 2620 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-14 23:23:21.5687160 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 2620 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-14 23:23:22.6302395 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 6952 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-14 23:23:22.6302529 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 6952 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-14 23:23:25.4737867 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 9636 \??\C:\Windows\System32\cmd.exe [2026-08-14 23:23:25.4737965 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 9636 C:\Windows\System32\cmd.exe [2026-08-14 23:23:25.5826018 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 10800 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-14 23:23:25.5826120 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 10800 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-14 23:23:25.7245158 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 10724 \??\C:\Windows\System32\cmd.exe [2026-08-14 23:23:25.7245300 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 10724 C:\Windows\System32\cmd.exe [2026-08-14 23:23:25.8638145 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 11292 \SystemRoot\System32\Conhost.exe [2026-08-14 23:23:25.8638247 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 11292 \SystemRoot\System32\Conhost.exe [2026-08-14 23:23:25.8802247 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 11280 \SystemRoot\System32\Conhost.exe [2026-08-14 23:23:25.8802361 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 11280 \SystemRoot\System32\Conhost.exe [2026-08-14 23:23:25.9576511 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 11276 \??\C:\Windows\System32\cmd.exe [2026-08-14 23:23:25.9576610 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 11276 C:\Windows\System32\cmd.exe [2026-08-14 23:23:26.1140370 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 8120 \SystemRoot\System32\Conhost.exe [2026-08-14 23:23:26.1140476 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 8120 \SystemRoot\System32\Conhost.exe [2026-08-14 23:23:28.6203257 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 9004 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:23:28.6203481 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 9004 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:23:32.3172537 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 6436 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 23:23:32.3172640 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 6436 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 23:23:32.4659858 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 10932 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 23:23:32.4659953 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 10932 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-14 23:23:32.4885364 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 12260 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:23:32.4885466 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 12260 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:23:32.4901327 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 7320 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:23:32.4901419 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 7320 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:23:32.5049767 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 7296 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:23:32.5049870 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 7296 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:23:32.5069797 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 11704 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:23:32.5069888 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 11704 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:23:59.1439101 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 2820 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:23:59.1439335 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 2820 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:24:23.6996191 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 9420 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-14 23:24:23.6996452 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 9420 C:\IMC\MPS\IMCMobil.exe [2026-08-14 23:24:24.7456967 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 8904 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-14 23:24:24.7457063 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 8904 C:\IMC\MPS\iIMCMobl.exe [2026-08-14 23:24:32.0398183 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 8488 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:24:32.0398430 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 8488 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:24:38.6605639 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 11772 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-14 23:24:38.6605861 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 11772 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-14 23:24:49.0726394 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 4372 \??\C:\Windows\splwow64.exe [2026-08-14 23:24:49.0726647 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 4372 C:\Windows\splwow64.exe [2026-08-14 23:25:30.2034083 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 6992 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:25:30.2034463 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 6992 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-14 23:28:11.4864080 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 5216 \SystemRoot\System32\Conhost.exe [2026-08-14 23:28:11.4864601 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 5216 \SystemRoot\System32\Conhost.exe [2026-08-15 01:11:57.6867111 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 13588 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:11:57.6867576 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 13588 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:11:57.8743979 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 13484 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:11:57.8744085 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 13484 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:11:57.8823356 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 15856 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:11:57.8823447 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 15856 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:11:58.0105106 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 16400 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:11:58.0105214 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 16400 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:12:04.5231159 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 17160 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:12:04.5231415 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 17160 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:12:13.6077106 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 16732 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:12:13.6077474 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 16732 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:12:42.8724335 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 16076 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:12:42.8724851 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 16076 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:14:56.5141856 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 17216 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:14:56.5142292 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 17216 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:14:58.1579919 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 17632 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:14:58.1580031 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 17632 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:15:05.9911357 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 17784 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:15:05.9911672 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 17784 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:15:10.5385073 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 17444 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:15:10.5385344 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 17444 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:15:10.5823896 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 17012 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:15:10.5823999 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 17012 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:15:37.8337035 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 16116 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:15:37.8337276 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 16116 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:15:38.0512634 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 16128 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:15:38.0512741 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 16128 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:15:41.4363421 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 15064 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:15:41.4366154 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 15064 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:15:43.2517377 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 17804 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:15:43.2517487 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 17804 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:15:43.4353344 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 17768 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:15:43.4353423 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 17768 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:16:59.0211362 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 18344 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:16:59.0211653 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 18344 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:19:56.7262860 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 16652 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:19:56.7263937 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 16652 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:19:56.7529891 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 17124 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:19:56.7530013 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 17124 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:22:11.2712927 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 16152 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:22:11.2713257 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 16152 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:22:11.5123539 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 17472 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:22:11.5123652 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 17472 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:22:11.7943130 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 18188 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:22:11.7943247 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 18188 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:23:55.1752091 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 16784 \SystemRoot\System32\Conhost.exe [2026-08-15 01:23:55.1752716 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 16784 \SystemRoot\System32\Conhost.exe [2026-08-15 01:25:34.3102892 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 18100 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-15 01:25:34.3103138 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 18100 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-15 01:25:34.6649614 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 18460 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-15 01:25:34.6649734 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 18460 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-15 01:25:34.7755865 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 18768 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-15 01:25:34.7755969 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 18768 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-15 01:25:34.7769352 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 18776 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-15 01:25:34.7769441 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 18776 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-15 01:25:35.2419581 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 19024 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-15 01:25:35.2419686 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 19024 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-15 01:25:35.3965144 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 19084 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-15 01:25:35.3965242 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 19084 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-15 01:28:03.1601617 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 17912 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:28:03.1602197 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 17912 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:28:06.5078795 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 19320 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:28:06.5078910 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 19320 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:28:06.5388815 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 17360 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:28:06.5388923 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 17360 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:28:18.3596599 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 17332 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-15 01:28:18.3596842 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 17332 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe [2026-08-15 01:29:03.7795605 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 14564 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:29:03.7795854 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 14564 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:29:03.8264948 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 13664 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:29:03.8265080 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 13664 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:33:32.0038904 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 15496 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:33:32.0039315 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 15496 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:33:35.5345215 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 520 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:33:35.5345326 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 520 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:33:35.5627725 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 17284 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:33:35.5628038 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 17284 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:36:32.3456452 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 20064 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:36:32.3456743 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 20064 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:36:33.2131564 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 19452 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:36:33.2131672 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 19452 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:36:39.0885122 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 20272 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:36:39.0885384 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 20272 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:36:39.1253906 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 20336 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:36:39.1254013 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 20336 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:37:01.8418313 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 18220 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:37:01.8418567 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 18220 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:37:03.8256429 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 15224 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:37:03.8256554 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 15224 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:37:03.8564754 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 19904 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 01:37:03.8564865 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 19904 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 03:23:55.1887609 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 22900 \SystemRoot\System32\Conhost.exe [2026-08-15 03:23:55.1887971 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 22900 \SystemRoot\System32\Conhost.exe [2026-08-15 03:29:59.3948294 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 26968 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 03:29:59.3949096 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 26968 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 03:30:08.6029392 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 24980 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 03:30:08.6029645 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 24980 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 03:30:08.6490431 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 25348 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 03:30:08.6490568 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 25348 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 03:57:16.4499785 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 26860 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 03:57:16.4500191 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 26860 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 03:57:16.4860576 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 28316 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 03:57:16.4861019 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 28316 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 03:57:16.7794165 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 28180 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 03:57:16.7794275 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 28180 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 03:57:17.0415811 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 28720 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 03:57:17.0415919 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 28720 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 03:57:25.4819771 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 28980 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 03:57:25.4820004 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 28980 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:04:40.9060067 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 21112 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:04:40.9090806 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 21112 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:04:41.1551390 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 28940 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:04:41.1551492 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 28940 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:05:18.5565893 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 28532 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:05:18.5567180 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 28532 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:05:21.5917186 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 28264 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:05:21.5917310 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 28264 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:05:21.6368248 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 27316 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:05:21.6368356 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 27316 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:14:04.4028577 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 28276 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:14:04.4028947 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 28276 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:14:07.3393574 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 28352 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:14:07.3393679 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 28352 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:14:14.7881859 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 29844 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:14:14.7882107 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 29844 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:14:14.8231628 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 29872 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:14:14.8231763 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 29872 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:58:12.6627226 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 31984 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:58:12.6627751 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 31984 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:58:12.9199466 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 31928 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 04:58:12.9199576 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 31928 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 05:05:21.0666549 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 31260 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 05:05:21.0667064 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 31260 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 05:05:21.1039447 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 33736 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 05:05:21.1039551 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 33736 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 05:07:57.0334558 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 31992 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-15 05:07:57.0334806 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 31992 C:\IMC\RMS\TRAFFIC.EXE [2026-08-15 05:12:48.6550765 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 26800 \??\C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe [2026-08-15 05:12:48.6551129 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 26800 C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe [2026-08-15 05:12:48.6568844 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 33452 \SystemRoot\System32\Conhost.exe [2026-08-15 05:12:48.6569011 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 33452 \SystemRoot\System32\Conhost.exe [2026-08-15 05:12:49.3973763 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 33608 \??\C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe [2026-08-15 05:12:49.3973867 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 33608 C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe [2026-08-15 05:23:55.1959020 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 34312 \SystemRoot\System32\Conhost.exe [2026-08-15 05:23:55.1959383 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 34312 \SystemRoot\System32\Conhost.exe [2026-08-15 05:47:07.5853401 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 35104 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 05:47:07.5853991 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 35104 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 05:47:09.9355983 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 35980 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 05:47:09.9356245 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 35980 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 05:47:20.3390746 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 36444 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 05:47:20.3390973 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 36444 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 05:47:20.3769210 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 36472 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 05:47:20.3769343 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 36472 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 05:47:22.5663310 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 36664 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 05:47:22.5663415 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 36664 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 05:47:22.6041927 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 36692 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 05:47:22.6042048 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 36692 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 06:30:33.5477106 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 36296 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 06:30:33.5477465 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 36296 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 06:30:33.6728814 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 37928 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 06:30:33.6728914 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 37928 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 06:30:33.8315027 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 37368 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 06:30:33.8315127 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 37368 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 06:30:33.8359074 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 30972 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 06:30:33.8359164 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 30972 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 06:30:34.0041405 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 38048 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 06:30:34.0041508 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 38048 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 06:30:34.2570600 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 38236 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 06:30:34.2570717 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 38236 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 06:30:36.8092748 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 2900 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 06:30:36.8092847 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 2900 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 06:30:36.8394985 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 10700 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 06:30:36.8395085 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 10700 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 06:30:38.0868792 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 38788 \??\C:\Windows\system32\LogonUI.exe [2026-08-15 06:30:38.0868899 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 38788 C:\Windows\system32\LogonUI.exe [2026-08-15 06:30:47.4702181 UTC-04:00] [2164:8364] [fcmonitor 90 debug] session change reason=6 session=1 [2026-08-15 06:30:47.4702560 UTC-04:00] [2164:8364] [fcmonitor 117 debug] add reason=6 session=1 ret=1 [2026-08-15 06:30:47.8728441 UTC-04:00] [2164:8364] [fcmonitor 90 debug] session change reason=2 session=1 [2026-08-15 06:30:47.8728502 UTC-04:00] [2164:8364] [fcmonitor 117 debug] add reason=2 session=1 ret=1 [2026-08-15 06:30:47.9772525 UTC-04:00] [2164:8412] [fcmonitor 475 warning] session 2 not init [2026-08-15 06:30:47.9953540 UTC-04:00] [2164:8412] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-15 06:30:47.9954396 UTC-04:00] [2164:8412] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-15 06:30:47.9955157 UTC-04:00] [2164:8412] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-15 06:30:47.9955888 UTC-04:00] [2164:8412] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-15 06:30:47.9956595 UTC-04:00] [2164:8412] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-15 06:30:47.9957309 UTC-04:00] [2164:8412] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-15 06:30:47.9957445 UTC-04:00] [2164:8412] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-15 06:30:47.9957482 UTC-04:00] [2164:8412] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-15 06:30:47.9957509 UTC-04:00] [2164:8412] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-15 06:30:47.9957535 UTC-04:00] [2164:8412] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-15 06:30:47.9957572 UTC-04:00] [2164:8412] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-15 06:30:47.9957599 UTC-04:00] [2164:8412] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-15 06:30:49.3849042 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 36692 \??\C:\Windows\system32\LogonUI.exe [2026-08-15 06:30:49.3849281 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 36692 C:\Windows\system32\LogonUI.exe [2026-08-15 06:30:49.3860076 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 36680 \??\C:\Windows\system32\dwm.exe [2026-08-15 06:30:49.3860151 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 36680 C:\Windows\system32\dwm.exe [2026-08-15 06:30:49.4820046 UTC-04:00] [2164:8364] [fcmonitor 90 debug] session change reason=1 session=2 [2026-08-15 06:30:49.4821388 UTC-04:00] [2164:8364] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-15 06:30:49.4936490 UTC-04:00] [2164:8364] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-15 06:30:49.4937438 UTC-04:00] [2164:8364] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-15 06:30:49.4938146 UTC-04:00] [2164:8364] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-15 06:30:49.4938829 UTC-04:00] [2164:8364] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-15 06:30:49.4939512 UTC-04:00] [2164:8364] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-15 06:30:49.4940197 UTC-04:00] [2164:8364] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-15 06:30:49.4940290 UTC-04:00] [2164:8364] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-15 06:30:49.4940344 UTC-04:00] [2164:8364] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-15 06:30:49.4940381 UTC-04:00] [2164:8364] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-15 06:30:49.4940409 UTC-04:00] [2164:8364] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-15 06:30:49.4940433 UTC-04:00] [2164:8364] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-15 06:30:49.4940474 UTC-04:00] [2164:8364] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-15 06:30:49.4940500 UTC-04:00] [2164:8364] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-15 06:30:49.4940637 UTC-04:00] [2164:8364] [fcmonitor 16 debug] add session=2 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-15 06:30:49.4940770 UTC-04:00] [2164:8364] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-15 06:30:49.4940801 UTC-04:00] [2164:8364] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-15 06:30:49.4942484 UTC-04:00] [2164:8364] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 185790316544 499455451136 185790316544 [2026-08-15 06:30:49.4942552 UTC-04:00] [2164:8364] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-15 06:30:49.7889184 UTC-04:00] [2164:8412] [fcmonitor 332 debug] proc cache add 38436 \??\C:\Windows\system32\fontdrvhost.exe [2026-08-15 06:30:49.7889294 UTC-04:00] [2164:8412] [fcmonitor 99 info] add pid 38436 C:\Windows\system32\fontdrvhost.exe [2026-08-15 07:46:50.8870468 UTC-04:00] [8664:8668] [fcmonitor 1249 info] (Time Zone: Eastern Standard Time) (Sun Jun 30 22:28:59 2024, 69s) 2026-08-15 07:46:50.878 type: 0x10f size: 512 memory: 0x0000000000000000 [2026-08-15 07:46:50.8881534 UTC-04:00] [8664:8668] [fcmonitor 78 debug] ems_serial FCTEMS8821002497 [2026-08-15 07:46:50.8896917 UTC-04:00] [8664:8668] [fcmonitor 85 debug] fct_serial FCT8000515779876 [2026-08-15 07:46:50.8898449 UTC-04:00] [8664:8668] [fcmonitor 94 debug] fct_uid 4EF5549DB1674A63BE848553987D4AEE [2026-08-15 07:46:50.8898828 UTC-04:00] [8664:8668] [fcmonitor 103 debug] vdom default [2026-08-15 07:46:50.8898969 UTC-04:00] [8664:8668] [fcmonitor 843 info] InitCryptAlg [2026-08-15 07:46:50.8906084 UTC-04:00] [8664:8668] [fcmonitor 41 info] before LoadSettings [2026-08-15 07:46:50.8907377 UTC-04:00] [8664:8668] [fcmonitor 45 info] folder C:\Users\%USERNAME%\Desktop\ [2026-08-15 07:46:50.8907465 UTC-04:00] [8664:8668] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-15 07:46:50.9197804 UTC-04:00] [8664:8668] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-15 07:46:50.9198645 UTC-04:00] [8664:8668] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 0 [2026-08-15 07:46:50.9199276 UTC-04:00] [8664:8668] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 0 [2026-08-15 07:46:50.9199889 UTC-04:00] [8664:8668] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 0 [2026-08-15 07:46:50.9200512 UTC-04:00] [8664:8668] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 0 [2026-08-15 07:46:50.9201101 UTC-04:00] [8664:8668] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 0 [2026-08-15 07:46:50.9201198 UTC-04:00] [8664:8668] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 done [2026-08-15 07:46:50.9201256 UTC-04:00] [8664:8668] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-15 07:46:50.9201355 UTC-04:00] [8664:8668] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-15 07:46:50.9201392 UTC-04:00] [8664:8668] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-15 07:46:50.9201427 UTC-04:00] [8664:8668] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-15 07:46:50.9201459 UTC-04:00] [8664:8668] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-15 07:46:50.9201491 UTC-04:00] [8664:8668] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-15 07:46:50.9201663 UTC-04:00] [8664:8668] [fcmonitor 16 debug] add session=0 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-15 07:46:51.0026280 UTC-04:00] [8664:8668] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-15 07:46:51.0175921 UTC-04:00] [8664:8668] [fcmonitor 228 info] parsed to C:\Users\collinsa\Desktop\ for session 1 [2026-08-15 07:46:51.0196893 UTC-04:00] [8664:8668] [fcmonitor 228 info] parsed to C:\Users\collinsa\Documents\ for session 1 [2026-08-15 07:46:51.0242543 UTC-04:00] [8664:8668] [fcmonitor 228 info] parsed to C:\Users\collinsa\Favorites\ for session 1 [2026-08-15 07:46:51.0384156 UTC-04:00] [8664:8668] [fcmonitor 228 info] parsed to C:\Users\collinsa\Music\ for session 1 [2026-08-15 07:46:51.0401478 UTC-04:00] [8664:8668] [fcmonitor 228 info] parsed to C:\Users\collinsa\Pictures\ for session 1 [2026-08-15 07:46:51.0418640 UTC-04:00] [8664:8668] [fcmonitor 228 info] parsed to C:\Users\collinsa\Videos\ for session 1 [2026-08-15 07:46:51.0418785 UTC-04:00] [8664:8668] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 done [2026-08-15 07:46:51.0418834 UTC-04:00] [8664:8668] [fcmonitor 435 info] add c:\users\collinsa\desktop\ [2026-08-15 07:46:51.0418876 UTC-04:00] [8664:8668] [fcmonitor 435 info] add c:\users\collinsa\documents\ [2026-08-15 07:46:51.0418907 UTC-04:00] [8664:8668] [fcmonitor 435 info] add c:\users\collinsa\favorites\ [2026-08-15 07:46:51.0418935 UTC-04:00] [8664:8668] [fcmonitor 435 info] add c:\users\collinsa\music\ [2026-08-15 07:46:51.0418961 UTC-04:00] [8664:8668] [fcmonitor 435 info] add c:\users\collinsa\pictures\ [2026-08-15 07:46:51.0418989 UTC-04:00] [8664:8668] [fcmonitor 435 info] add c:\users\collinsa\videos\ [2026-08-15 07:46:51.0419106 UTC-04:00] [8664:8668] [fcmonitor 16 debug] add session=1 ret=1 str=C:\Users\collinsa\Desktop\;C:\Users\collinsa\Documents\;C:\Users\collinsa\Favorites\;C:\Users\collinsa\Music\;C:\Users\collinsa\Pictures\;C:\Users\collinsa\Videos\ [2026-08-15 07:46:51.0419135 UTC-04:00] [8664:8668] [fcmonitor 52 debug] reload monitor folder for session 0 [2026-08-15 07:46:51.0419266 UTC-04:00] [8664:8668] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-15 07:46:51.0419295 UTC-04:00] [8664:8668] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-15 07:46:51.0425828 UTC-04:00] [8664:8668] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 185863360512 499455451136 185863360512 [2026-08-15 07:46:51.0425959 UTC-04:00] [8664:8668] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-15 07:46:51.2097406 UTC-04:00] [8664:8668] [fcmonitor 232 info] queue lock 0x3b8 cleanevent 0x3bc [2026-08-15 07:46:51.2098416 UTC-04:00] [8664:8668] [fcmonitor 245 info] init succeed [2026-08-15 07:46:51.2098461 UTC-04:00] [8664:8668] [fcmonitor 438 info] reading cache [2026-08-15 07:46:51.2450989 UTC-04:00] [8664:8668] [fcmonitor 440 info] getting all proc [2026-08-15 07:46:51.2623999 UTC-04:00] [8664:8668] [fcmonitor 159 debug] getting all proc [2026-08-15 07:46:51.2657139 UTC-04:00] [8664:8668] [fcmonitor 192 warning] GetAllProcTree can't find module 4 System [2026-08-15 07:46:51.2903583 UTC-04:00] [8664:8668] [fcmonitor 192 warning] GetAllProcTree can't find module 100 Registry [2026-08-15 07:46:51.4745926 UTC-04:00] [8664:8668] [fcmonitor 192 warning] GetAllProcTree can't find module 2424 Memory Compression [2026-08-15 07:46:52.5091092 UTC-04:00] [8664:8668] [fcmonitor 286 debug] getting all proc finished 130 0 [2026-08-15 07:46:52.5091214 UTC-04:00] [8664:8668] [fcmonitor 442 info] finish [2026-08-15 07:46:52.5092541 UTC-04:00] [8664:8668] [fcmonitor 267 info] heap p 0x00000121DDC31E00 [2026-08-15 07:46:52.5093126 UTC-04:00] [8664:8668] [fcmonitor 267 info] heap p 0x00000121DDC322B0 [2026-08-15 07:46:52.5093691 UTC-04:00] [8664:8668] [fcmonitor 267 info] heap p 0x00000121DDC32760 [2026-08-15 07:46:52.5095145 UTC-04:00] [8664:8668] [fcmonitor 267 info] heap p 0x00000121DDC55E30 [2026-08-15 07:46:52.5096113 UTC-04:00] [8664:8668] [fcmonitor 267 info] heap p 0x00000121DDC55490 [2026-08-15 07:46:52.5096634 UTC-04:00] [8664:8668] [fcmonitor 267 info] heap p 0x00000121DDC567D0 [2026-08-15 07:46:52.5097165 UTC-04:00] [8664:8668] [fcmonitor 267 info] heap p 0x00000121DDC56CA0 [2026-08-15 07:46:52.5097701 UTC-04:00] [8664:8668] [fcmonitor 267 info] heap p 0x00000121DDC55960 [2026-08-15 07:46:52.5738177 UTC-04:00] [8664:9312] [fcmonitor 475 warning] session 1 not init [2026-08-15 07:46:52.5743635 UTC-04:00] [8664:9316] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 07:46:52.5746376 UTC-04:00] [8664:9320] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 07:46:52.5747625 UTC-04:00] [8664:9324] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 07:46:52.5755521 UTC-04:00] [8664:9328] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 07:46:52.5757315 UTC-04:00] [8664:9332] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 07:46:52.5761373 UTC-04:00] [8664:9336] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 07:46:52.5763334 UTC-04:00] [8664:9340] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 07:46:52.5763656 UTC-04:00] [8664:9344] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 07:46:52.5844628 UTC-04:00] [8664:9312] [fcmonitor 228 info] parsed to C:\Users\collinsa\Desktop\ for session 1 [2026-08-15 07:46:52.5864310 UTC-04:00] [8664:9312] [fcmonitor 228 info] parsed to C:\Users\collinsa\Documents\ for session 1 [2026-08-15 07:46:52.5884555 UTC-04:00] [8664:9312] [fcmonitor 228 info] parsed to C:\Users\collinsa\Favorites\ for session 1 [2026-08-15 07:46:52.6861610 UTC-04:00] [8664:9312] [fcmonitor 228 info] parsed to C:\Users\collinsa\Music\ for session 1 [2026-08-15 07:46:52.6885869 UTC-04:00] [8664:9312] [fcmonitor 228 info] parsed to C:\Users\collinsa\Pictures\ for session 1 [2026-08-15 07:46:52.6906911 UTC-04:00] [8664:9312] [fcmonitor 228 info] parsed to C:\Users\collinsa\Videos\ for session 1 [2026-08-15 07:46:52.6907090 UTC-04:00] [8664:9312] [fcmonitor 435 info] add c:\users\collinsa\desktop\ [2026-08-15 07:46:52.6907155 UTC-04:00] [8664:9312] [fcmonitor 435 info] add c:\users\collinsa\documents\ [2026-08-15 07:46:52.6907187 UTC-04:00] [8664:9312] [fcmonitor 435 info] add c:\users\collinsa\favorites\ [2026-08-15 07:46:52.6907217 UTC-04:00] [8664:9312] [fcmonitor 435 info] add c:\users\collinsa\music\ [2026-08-15 07:46:52.6907247 UTC-04:00] [8664:9312] [fcmonitor 435 info] add c:\users\collinsa\pictures\ [2026-08-15 07:46:52.6907276 UTC-04:00] [8664:9312] [fcmonitor 435 info] add c:\users\collinsa\videos\ [2026-08-15 07:46:53.4295786 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 9536 \SystemRoot\System32\Conhost.exe [2026-08-15 07:46:53.4295892 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 9536 \SystemRoot\System32\Conhost.exe [2026-08-15 07:46:57.1947976 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 9864 \??\C:\Windows\system32\igfxEM.exe [2026-08-15 07:46:57.1948115 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 9864 C:\Windows\system32\igfxEM.exe [2026-08-15 07:46:58.3085124 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 10032 \??\C:\Windows\system32\igfxHK.exe [2026-08-15 07:46:58.3085231 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 10032 C:\Windows\system32\igfxHK.exe [2026-08-15 07:46:58.6685746 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 10048 \??\C:\Windows\system32\igfxTray.exe [2026-08-15 07:46:58.6685857 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 10048 C:\Windows\system32\igfxTray.exe [2026-08-15 07:46:59.7985262 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 10200 \??\C:\Windows\system32\userinit.exe [2026-08-15 07:46:59.7985368 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 10200 C:\Windows\system32\userinit.exe [2026-08-15 07:47:01.1275771 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 9632 \??\C:\Windows\Explorer.EXE [2026-08-15 07:47:01.1275901 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 9632 C:\Windows\Explorer.EXE [2026-08-15 07:47:25.6305263 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 12116 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-15 07:47:25.6307202 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 12116 C:\IMC\MPS\IMCMobil.exe [2026-08-15 07:47:29.8780402 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 6860 \??\C:\Windows\system32\wlrmdr.exe [2026-08-15 07:47:29.8780503 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 6860 C:\Windows\system32\wlrmdr.exe [2026-08-15 07:47:30.0903048 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 6368 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-15 07:47:30.0903142 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 6368 C:\IMC\MPS\iIMCMobl.exe [2026-08-15 07:47:38.2639159 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 9608 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-15 07:47:38.2639426 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 9608 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-15 07:47:39.4989748 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 12248 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-15 07:47:39.4989859 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 12248 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-15 07:47:41.0248851 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 7568 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 07:47:41.0248957 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 7568 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 07:47:41.1389837 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 6812 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 07:47:41.1389978 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 6812 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 07:47:42.0248089 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 6804 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-15 07:47:42.0248383 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 6804 C:\Windows\SysWOW64\runonce.exe [2026-08-15 07:47:42.9309767 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 12240 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-15 07:47:42.9309893 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 12240 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-15 07:47:43.1036331 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 1192 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 07:47:43.1036432 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 1192 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 07:47:44.1966683 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 11972 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-15 07:47:44.1966800 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 11972 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-15 07:47:45.1527775 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 10228 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-15 07:47:45.1527879 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 10228 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-15 07:47:45.1820093 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 10204 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 07:47:45.1820204 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 10204 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 07:47:47.2921657 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 3176 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 07:47:47.2921756 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 3176 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 07:47:49.3786612 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 11360 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 07:47:49.3786730 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 11360 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 07:47:50.2626900 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 11940 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 07:47:50.2627025 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 11940 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 07:47:51.4494989 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 3148 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 07:47:51.4495210 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 3148 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 07:47:54.0781514 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 12336 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 07:47:54.0781654 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 12336 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 07:47:54.0811898 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 12344 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 07:47:54.0812057 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 12344 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 07:47:54.1059112 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 12376 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 07:47:54.1059219 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 12376 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 07:47:54.1081392 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 12384 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 07:47:54.1081549 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 12384 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 07:47:58.3237766 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 12940 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 07:47:58.3237877 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 12940 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 07:47:58.6880387 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 12972 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 07:47:58.6880495 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 12972 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 07:48:03.7973889 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 12768 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-15 07:48:03.7974137 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 12768 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-15 07:48:20.7150708 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 12408 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 07:48:20.7151032 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 12408 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 07:48:31.1942838 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 2388 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-15 07:48:31.1943131 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 2388 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-15 07:48:34.9285434 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 12032 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-15 07:48:34.9285858 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 12032 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-15 07:48:53.1879020 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 5644 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\FileSyncConfig.exe [2026-08-15 07:48:53.1879283 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 5644 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\FileSyncConfig.exe [2026-08-15 07:48:54.8411553 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 1988 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-15 07:48:54.8411659 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 1988 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-15 07:48:55.1847718 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 9888 \??\C:\Windows\splwow64.exe [2026-08-15 07:48:55.1847842 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 9888 C:\Windows\splwow64.exe [2026-08-15 07:49:00.2326194 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 6436 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\OneDrive.Sync.Service.exe [2026-08-15 07:49:00.2326314 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 6436 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\OneDrive.Sync.Service.exe [2026-08-15 07:49:50.7155606 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 2100 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 07:49:50.7155945 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 2100 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 07:50:08.8734101 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 8080 \SystemRoot\System32\Conhost.exe [2026-08-15 07:50:08.8734366 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 8080 \SystemRoot\System32\Conhost.exe [2026-08-15 08:11:12.9597713 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 2640 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:12.9598776 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 2640 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:13.1735149 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 3612 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:13.1735257 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 3612 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:13.1764252 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 8148 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:13.1764350 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 8148 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:13.3529350 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 12148 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:13.3529461 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 12148 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:17.3103347 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 9552 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:17.3103459 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 9552 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:17.3933829 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 12548 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:17.3933999 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 12548 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:17.4644943 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 8544 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:17.4645056 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 8544 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:20.7444766 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 1228 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:20.7444894 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 1228 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:23.9083703 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 8116 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:23.9083935 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 8116 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:24.6564396 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 1616 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:24.6564494 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 1616 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:24.7628831 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 10260 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:24.7628936 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 10260 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:25.9485542 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 9372 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:25.9485657 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 9372 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:30.0559668 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 9832 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:30.0559837 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 9832 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:30.0934358 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 6700 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:30.0934468 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 6700 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:30.1435186 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 2108 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:30.1435294 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 2108 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:58.1513402 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 4700 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:11:58.1513599 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 4700 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:14:40.7974853 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 3812 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:14:40.7975457 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 3812 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:14:40.8440935 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 12988 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:14:40.8441732 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 12988 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:14:46.6634948 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 5508 \??\C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-15 08:14:46.6635227 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 5508 C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-15 08:15:12.0496842 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 10900 \??\C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-15 08:15:12.0498187 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 10900 C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-15 08:16:14.4689708 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 3580 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:16:14.4690126 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 3580 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 08:22:56.1145943 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 13728 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-15 08:22:56.1146458 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 13728 C:\Windows\SysWOW64\WerFault.exe [2026-08-15 08:31:57.5922835 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 13592 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 08:31:57.5923488 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 13592 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 08:31:57.8732629 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 14032 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 08:31:57.8732737 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 14032 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 08:32:04.0262070 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 9928 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 08:32:04.0262399 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 9928 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 08:32:04.0278601 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 1544 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 08:32:04.0278686 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 1544 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 08:32:04.0416466 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 5560 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 08:32:04.0416581 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 5560 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 08:32:04.0433343 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 12444 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 08:32:04.0433453 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 12444 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 08:34:58.4028760 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 13716 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 08:34:58.4029230 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 13716 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 08:48:29.7154664 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 15020 \??\C:\IMC\RMS\RMSIGNON.EXE [2026-08-15 08:48:29.7154995 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 15020 C:\IMC\RMS\RMSIGNON.EXE [2026-08-15 08:48:30.3890403 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 8296 \??\C:\IMC\RMS\Records.exe [2026-08-15 08:48:30.3890505 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 8296 C:\IMC\RMS\Records.exe [2026-08-15 09:06:18.8132208 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 16052 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:06:18.8139538 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 16052 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:06:24.1418920 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 16088 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:06:24.1419345 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 16088 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:06:40.5165550 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 13564 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:06:40.5165797 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 13564 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:06:40.5632609 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 17268 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:06:40.5632752 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 17268 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:27:30.3809115 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 17544 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-15 09:27:30.3809650 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 17544 C:\Windows\SysWOW64\WerFault.exe [2026-08-15 09:27:42.3652095 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 17828 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-15 09:27:42.3652340 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 17828 C:\IMC\MPS\IMCMobil.exe [2026-08-15 09:27:42.9855898 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 17944 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-15 09:27:42.9856010 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 17944 C:\IMC\MPS\iIMCMobl.exe [2026-08-15 09:27:50.0480102 UTC-04:00] [8664:9312] [fcmonitor 332 debug] proc cache add 11360 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-15 09:27:50.0480222 UTC-04:00] [8664:9312] [fcmonitor 99 info] add pid 11360 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-15 09:29:55.2285748 UTC-04:00] [8644:8648] [fcmonitor 1249 info] (Time Zone: Eastern Standard Time) (Sun Jun 30 22:28:59 2024, 63s) 2026-08-15 09:29:55.191 type: 0x10f size: 512 memory: 0x0000000000000000 [2026-08-15 09:29:55.2326158 UTC-04:00] [8644:8648] [fcmonitor 78 debug] ems_serial FCTEMS8821002497 [2026-08-15 09:29:55.2341401 UTC-04:00] [8644:8648] [fcmonitor 85 debug] fct_serial FCT8000515779876 [2026-08-15 09:29:55.2343282 UTC-04:00] [8644:8648] [fcmonitor 94 debug] fct_uid 4EF5549DB1674A63BE848553987D4AEE [2026-08-15 09:29:55.2343702 UTC-04:00] [8644:8648] [fcmonitor 103 debug] vdom default [2026-08-15 09:29:55.2343837 UTC-04:00] [8644:8648] [fcmonitor 843 info] InitCryptAlg [2026-08-15 09:29:55.2351508 UTC-04:00] [8644:8648] [fcmonitor 41 info] before LoadSettings [2026-08-15 09:29:55.2352920 UTC-04:00] [8644:8648] [fcmonitor 45 info] folder C:\Users\%USERNAME%\Desktop\ [2026-08-15 09:29:55.2353003 UTC-04:00] [8644:8648] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-15 09:29:55.2442716 UTC-04:00] [8644:8648] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-15 09:29:55.2443448 UTC-04:00] [8644:8648] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 0 [2026-08-15 09:29:55.2444145 UTC-04:00] [8644:8648] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 0 [2026-08-15 09:29:55.2444800 UTC-04:00] [8644:8648] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 0 [2026-08-15 09:29:55.2445453 UTC-04:00] [8644:8648] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 0 [2026-08-15 09:29:55.2446097 UTC-04:00] [8644:8648] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 0 [2026-08-15 09:29:55.2446186 UTC-04:00] [8644:8648] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 done [2026-08-15 09:29:55.2446246 UTC-04:00] [8644:8648] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-15 09:29:55.2446369 UTC-04:00] [8644:8648] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-15 09:29:55.2446403 UTC-04:00] [8644:8648] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-15 09:29:55.2446433 UTC-04:00] [8644:8648] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-15 09:29:55.2446465 UTC-04:00] [8644:8648] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-15 09:29:55.2446495 UTC-04:00] [8644:8648] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-15 09:29:55.2446649 UTC-04:00] [8644:8648] [fcmonitor 16 debug] add session=0 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-15 09:29:55.2777410 UTC-04:00] [8644:8648] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-15 09:29:55.3264643 UTC-04:00] [8644:8648] [fcmonitor 228 info] parsed to C:\Users\collinsa\Desktop\ for session 1 [2026-08-15 09:29:55.3284765 UTC-04:00] [8644:8648] [fcmonitor 228 info] parsed to C:\Users\collinsa\Documents\ for session 1 [2026-08-15 09:29:55.3303645 UTC-04:00] [8644:8648] [fcmonitor 228 info] parsed to C:\Users\collinsa\Favorites\ for session 1 [2026-08-15 09:29:55.3330801 UTC-04:00] [8644:8648] [fcmonitor 228 info] parsed to C:\Users\collinsa\Music\ for session 1 [2026-08-15 09:29:55.3573275 UTC-04:00] [8644:8648] [fcmonitor 228 info] parsed to C:\Users\collinsa\Pictures\ for session 1 [2026-08-15 09:29:55.3592620 UTC-04:00] [8644:8648] [fcmonitor 228 info] parsed to C:\Users\collinsa\Videos\ for session 1 [2026-08-15 09:29:55.3592774 UTC-04:00] [8644:8648] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 done [2026-08-15 09:29:55.3592833 UTC-04:00] [8644:8648] [fcmonitor 435 info] add c:\users\collinsa\desktop\ [2026-08-15 09:29:55.3592877 UTC-04:00] [8644:8648] [fcmonitor 435 info] add c:\users\collinsa\documents\ [2026-08-15 09:29:55.3592909 UTC-04:00] [8644:8648] [fcmonitor 435 info] add c:\users\collinsa\favorites\ [2026-08-15 09:29:55.3592937 UTC-04:00] [8644:8648] [fcmonitor 435 info] add c:\users\collinsa\music\ [2026-08-15 09:29:55.3592964 UTC-04:00] [8644:8648] [fcmonitor 435 info] add c:\users\collinsa\pictures\ [2026-08-15 09:29:55.3592994 UTC-04:00] [8644:8648] [fcmonitor 435 info] add c:\users\collinsa\videos\ [2026-08-15 09:29:55.3593114 UTC-04:00] [8644:8648] [fcmonitor 16 debug] add session=1 ret=1 str=C:\Users\collinsa\Desktop\;C:\Users\collinsa\Documents\;C:\Users\collinsa\Favorites\;C:\Users\collinsa\Music\;C:\Users\collinsa\Pictures\;C:\Users\collinsa\Videos\ [2026-08-15 09:29:55.3593143 UTC-04:00] [8644:8648] [fcmonitor 52 debug] reload monitor folder for session 0 [2026-08-15 09:29:55.3593278 UTC-04:00] [8644:8648] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-15 09:29:55.3593309 UTC-04:00] [8644:8648] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-15 09:29:55.3935142 UTC-04:00] [8644:8648] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 184231895040 499455451136 184231895040 [2026-08-15 09:29:55.3935264 UTC-04:00] [8644:8648] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-15 09:29:55.6346929 UTC-04:00] [8644:8648] [fcmonitor 232 info] queue lock 0x3a0 cleanevent 0x3a4 [2026-08-15 09:29:55.6348037 UTC-04:00] [8644:8648] [fcmonitor 245 info] init succeed [2026-08-15 09:29:55.6348069 UTC-04:00] [8644:8648] [fcmonitor 438 info] reading cache [2026-08-15 09:29:55.6711567 UTC-04:00] [8644:8648] [fcmonitor 440 info] getting all proc [2026-08-15 09:29:55.6927881 UTC-04:00] [8644:8648] [fcmonitor 159 debug] getting all proc [2026-08-15 09:29:55.6962047 UTC-04:00] [8644:8648] [fcmonitor 192 warning] GetAllProcTree can't find module 4 System [2026-08-15 09:29:55.7874304 UTC-04:00] [8644:8648] [fcmonitor 192 warning] GetAllProcTree can't find module 100 Registry [2026-08-15 09:29:56.1471560 UTC-04:00] [8644:8648] [fcmonitor 192 warning] GetAllProcTree can't find module 2388 Memory Compression [2026-08-15 09:29:56.7328701 UTC-04:00] [8644:8648] [fcmonitor 192 warning] GetAllProcTree can't find module 9044 net1.exe [2026-08-15 09:29:56.7364661 UTC-04:00] [8644:8648] [fcmonitor 286 debug] getting all proc finished 138 0 [2026-08-15 09:29:56.7364731 UTC-04:00] [8644:8648] [fcmonitor 442 info] finish [2026-08-15 09:29:56.7365754 UTC-04:00] [8644:8648] [fcmonitor 267 info] heap p 0x00000280FFCCEA30 [2026-08-15 09:29:56.7366138 UTC-04:00] [8644:8648] [fcmonitor 267 info] heap p 0x00000280802C0440 [2026-08-15 09:29:56.7366473 UTC-04:00] [8644:8648] [fcmonitor 267 info] heap p 0x00000280802C08F0 [2026-08-15 09:29:56.7366818 UTC-04:00] [8644:8648] [fcmonitor 267 info] heap p 0x00000280802A39C0 [2026-08-15 09:29:56.7367134 UTC-04:00] [8644:8648] [fcmonitor 267 info] heap p 0x00000280802A1CE0 [2026-08-15 09:29:56.7367468 UTC-04:00] [8644:8648] [fcmonitor 267 info] heap p 0x00000280802A0E70 [2026-08-15 09:29:56.7367775 UTC-04:00] [8644:8648] [fcmonitor 267 info] heap p 0x00000280802A2B50 [2026-08-15 09:29:56.7368134 UTC-04:00] [8644:8648] [fcmonitor 267 info] heap p 0x00000280802A1340 [2026-08-15 09:29:56.7543551 UTC-04:00] [8644:3176] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 09:29:56.7545056 UTC-04:00] [8644:7960] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 09:29:56.7546146 UTC-04:00] [8644:4688] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 09:29:56.7547416 UTC-04:00] [8644:4548] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 09:29:56.7548914 UTC-04:00] [8644:1624] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 09:29:56.7549671 UTC-04:00] [8644:7676] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 09:29:56.7550362 UTC-04:00] [8644:7824] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 09:29:56.7551067 UTC-04:00] [8644:7944] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 09:29:58.7071034 UTC-04:00] [8644:7904] [fcmonitor 475 warning] session 1 not init [2026-08-15 09:29:58.7177142 UTC-04:00] [8644:7904] [fcmonitor 228 info] parsed to C:\Users\collinsa\Desktop\ for session 1 [2026-08-15 09:29:58.7198802 UTC-04:00] [8644:7904] [fcmonitor 228 info] parsed to C:\Users\collinsa\Documents\ for session 1 [2026-08-15 09:29:58.7215418 UTC-04:00] [8644:7904] [fcmonitor 228 info] parsed to C:\Users\collinsa\Favorites\ for session 1 [2026-08-15 09:29:58.7233209 UTC-04:00] [8644:7904] [fcmonitor 228 info] parsed to C:\Users\collinsa\Music\ for session 1 [2026-08-15 09:29:58.7250275 UTC-04:00] [8644:7904] [fcmonitor 228 info] parsed to C:\Users\collinsa\Pictures\ for session 1 [2026-08-15 09:29:58.7266981 UTC-04:00] [8644:7904] [fcmonitor 228 info] parsed to C:\Users\collinsa\Videos\ for session 1 [2026-08-15 09:29:58.7267123 UTC-04:00] [8644:7904] [fcmonitor 435 info] add c:\users\collinsa\desktop\ [2026-08-15 09:29:58.7267179 UTC-04:00] [8644:7904] [fcmonitor 435 info] add c:\users\collinsa\documents\ [2026-08-15 09:29:58.7267210 UTC-04:00] [8644:7904] [fcmonitor 435 info] add c:\users\collinsa\favorites\ [2026-08-15 09:29:58.7267240 UTC-04:00] [8644:7904] [fcmonitor 435 info] add c:\users\collinsa\music\ [2026-08-15 09:29:58.7267269 UTC-04:00] [8644:7904] [fcmonitor 435 info] add c:\users\collinsa\pictures\ [2026-08-15 09:29:58.7267300 UTC-04:00] [8644:7904] [fcmonitor 435 info] add c:\users\collinsa\videos\ [2026-08-15 09:30:00.1995918 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 9476 \SystemRoot\System32\Conhost.exe [2026-08-15 09:30:00.1996021 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 9476 \SystemRoot\System32\Conhost.exe [2026-08-15 09:30:02.5233997 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 9792 \??\C:\Windows\system32\igfxEM.exe [2026-08-15 09:30:02.5234240 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 9792 C:\Windows\system32\igfxEM.exe [2026-08-15 09:30:02.8104575 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 9812 \??\C:\Windows\system32\igfxHK.exe [2026-08-15 09:30:02.8104697 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 9812 C:\Windows\system32\igfxHK.exe [2026-08-15 09:30:03.2208927 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 9900 \??\C:\Windows\system32\igfxTray.exe [2026-08-15 09:30:03.2209037 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 9900 C:\Windows\system32\igfxTray.exe [2026-08-15 09:30:07.7932334 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 9248 \??\C:\Windows\system32\userinit.exe [2026-08-15 09:30:07.7932443 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 9248 C:\Windows\system32\userinit.exe [2026-08-15 09:30:08.5737608 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 10256 \??\C:\Windows\Explorer.EXE [2026-08-15 09:30:08.5737746 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 10256 C:\Windows\Explorer.EXE [2026-08-15 09:30:33.2583957 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 12108 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-15 09:30:33.2584206 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 12108 C:\IMC\MPS\IMCMobil.exe [2026-08-15 09:30:37.2289494 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 5032 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-15 09:30:37.2289668 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 5032 C:\IMC\MPS\iIMCMobl.exe [2026-08-15 09:30:37.8828246 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 5568 \??\C:\Windows\system32\wlrmdr.exe [2026-08-15 09:30:37.8828356 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 5568 C:\Windows\system32\wlrmdr.exe [2026-08-15 09:30:44.4499706 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 4356 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-15 09:30:44.4499916 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 4356 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-15 09:30:45.5439278 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 4988 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-15 09:30:45.5439372 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 4988 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-15 09:30:47.1359896 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 2108 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:30:47.1360001 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 2108 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:30:48.0140737 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 2500 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 09:30:48.0140839 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 2500 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 09:30:48.5107225 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 11368 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-15 09:30:48.5107321 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 11368 C:\Windows\SysWOW64\runonce.exe [2026-08-15 09:30:49.0469374 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 1596 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-15 09:30:49.0469475 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 1596 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-15 09:30:50.0941953 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 5372 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 09:30:50.0942046 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 5372 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 09:30:51.0849123 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 11268 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-15 09:30:51.0849221 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 11268 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-15 09:30:51.4686608 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 4432 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-15 09:30:51.4686839 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 4432 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-15 09:30:52.1758929 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 1200 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 09:30:52.1759058 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 1200 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 09:30:52.9097737 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 11752 \??\C:\Windows\System32\cmd.exe [2026-08-15 09:30:52.9097829 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 11752 C:\Windows\System32\cmd.exe [2026-08-15 09:30:53.1720234 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 11960 \SystemRoot\System32\Conhost.exe [2026-08-15 09:30:53.1720338 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 11960 \SystemRoot\System32\Conhost.exe [2026-08-15 09:30:54.4220073 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 11612 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 09:30:54.4220174 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 11612 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 09:30:54.6180699 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 11652 \??\C:\Windows\System32\cmd.exe [2026-08-15 09:30:54.6180804 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 11652 C:\Windows\System32\cmd.exe [2026-08-15 09:30:54.7812349 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 12252 \SystemRoot\System32\Conhost.exe [2026-08-15 09:30:54.7812469 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 12252 \SystemRoot\System32\Conhost.exe [2026-08-15 09:30:55.2577262 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 7452 \??\C:\Windows\System32\cmd.exe [2026-08-15 09:30:55.2577371 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 7452 C:\Windows\System32\cmd.exe [2026-08-15 09:30:55.3125350 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 632 \SystemRoot\System32\Conhost.exe [2026-08-15 09:30:55.3125445 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 632 \SystemRoot\System32\Conhost.exe [2026-08-15 09:30:56.5609717 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 8212 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 09:30:56.5609816 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 8212 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 09:30:56.9373888 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 12276 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:30:56.9374018 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 12276 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:30:58.6538418 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 10728 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 09:30:58.6538544 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 10728 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 09:31:00.7579741 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 8256 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 09:31:00.7579888 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 8256 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 09:31:00.7596481 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 3340 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:31:00.7596569 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 3340 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:31:00.7613314 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 2796 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:31:00.7613404 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 2796 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:31:00.7654209 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 9512 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:31:00.7654326 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 9512 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:31:00.7681286 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 12300 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:31:00.7681458 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 12300 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:31:06.4803922 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 13212 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 09:31:06.4804163 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 13212 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 09:31:06.6693568 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 13236 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 09:31:06.6693661 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 13236 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 09:31:12.3398791 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 12672 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-15 09:31:12.3399120 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 12672 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-15 09:31:27.3561501 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 11076 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:31:27.3561873 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 11076 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:32:11.2314089 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 7848 \??\C:\Windows\splwow64.exe [2026-08-15 09:32:11.2314387 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 7848 C:\Windows\splwow64.exe [2026-08-15 09:32:23.7895008 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 9656 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:32:23.7895250 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 9656 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:32:24.0691640 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 7000 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:32:24.0691751 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 7000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:32:24.0724077 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 1216 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:32:24.0724887 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 1216 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:32:24.2424937 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 11696 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:32:24.2425047 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 11696 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:32:31.0813534 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 12748 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:32:31.0813671 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 12748 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:32:33.5359216 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 8524 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:32:33.5359447 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 8524 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:32:34.5312543 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 10096 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:32:34.5312666 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 10096 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:32:42.8622417 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 13068 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:32:42.8622808 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 13068 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:32:42.9197191 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 2452 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:32:42.9197294 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 2452 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:32:57.3604877 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 7468 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:32:57.3605110 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 7468 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:33:09.0460961 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 1420 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:33:09.0461141 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 1420 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:35:22.3747184 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 3608 \SystemRoot\System32\Conhost.exe [2026-08-15 09:35:22.3747678 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 3608 \SystemRoot\System32\Conhost.exe [2026-08-15 09:37:26.6874584 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 8508 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:37:26.6875134 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 8508 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:52:14.7022843 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 5808 \??\C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-15 09:52:14.7023219 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 5808 C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-15 09:52:21.1530725 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 12516 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:52:21.1530844 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 12516 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:52:21.2294097 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 7508 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:52:21.2294221 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 7508 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:52:22.9888922 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 10504 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 09:52:22.9889165 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 10504 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 10:42:14.3799025 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 14432 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 10:42:14.3799458 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 14432 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 10:42:14.6438644 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 15304 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 10:42:14.6438749 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 15304 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 10:42:21.0079221 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 15560 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-15 10:42:21.0079322 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 15560 C:\IMC\RMS\TRAFFIC.EXE [2026-08-15 10:42:22.0471702 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 15712 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 10:42:22.0472069 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 15712 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 10:42:22.0487535 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 15720 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 10:42:22.0487643 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 15720 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 10:42:22.1015561 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 15760 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 10:42:22.1015731 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 15760 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 10:42:22.1050250 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 15776 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 10:42:22.1050408 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 15776 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 10:48:32.2506875 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 17212 \SystemRoot\System32\Conhost.exe [2026-08-15 10:48:32.2507389 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 17212 \SystemRoot\System32\Conhost.exe [2026-08-15 10:48:32.3136532 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 17316 \SystemRoot\System32\Conhost.exe [2026-08-15 10:48:32.3136636 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 17316 \SystemRoot\System32\Conhost.exe [2026-08-15 10:59:51.0413861 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 15156 \??\C:\Windows\SysWOW64\hh.exe [2026-08-15 10:59:51.0414138 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 15156 C:\Windows\SysWOW64\hh.exe [2026-08-15 10:59:59.5479336 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 15540 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 10:59:59.5479677 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 15540 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 11:03:22.8389257 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 16632 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-15 11:03:22.8389485 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 16632 C:\IMC\RMS\TRAFFIC.EXE [2026-08-15 11:14:50.2501212 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 15372 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-15 11:14:50.2502090 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 15372 C:\IMC\RMS\TRAFFIC.EXE [2026-08-15 11:16:33.1984805 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 18176 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:16:33.1985071 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 18176 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:16:34.3006469 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 16404 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:16:34.3006575 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 16404 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:16:38.2184021 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 11948 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:16:38.2184129 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 11948 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:16:41.4562639 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 17204 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:16:41.4562745 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 17204 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:16:41.4962533 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 18424 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:16:41.4962640 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 18424 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:17:16.2969510 UTC-04:00] [8644:7904] [fcmonitor 332 debug] proc cache add 19232 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-15 11:17:16.2969793 UTC-04:00] [8644:7904] [fcmonitor 99 info] add pid 19232 C:\Windows\SysWOW64\WerFault.exe [2026-08-15 11:19:16.2838858 UTC-04:00] [7892:7888] [fcmonitor 1249 info] (Time Zone: Eastern Standard Time) (Sun Jun 30 22:28:59 2024, 59s) 2026-08-15 11:19:16.272 type: 0x10f size: 512 memory: 0x0000000000000000 [2026-08-15 11:19:16.2850080 UTC-04:00] [7892:7888] [fcmonitor 78 debug] ems_serial FCTEMS8821002497 [2026-08-15 11:19:16.2866518 UTC-04:00] [7892:7888] [fcmonitor 85 debug] fct_serial FCT8000515779876 [2026-08-15 11:19:16.2868473 UTC-04:00] [7892:7888] [fcmonitor 94 debug] fct_uid 4EF5549DB1674A63BE848553987D4AEE [2026-08-15 11:19:16.2868935 UTC-04:00] [7892:7888] [fcmonitor 103 debug] vdom default [2026-08-15 11:19:16.2869105 UTC-04:00] [7892:7888] [fcmonitor 843 info] InitCryptAlg [2026-08-15 11:19:16.2878271 UTC-04:00] [7892:7888] [fcmonitor 41 info] before LoadSettings [2026-08-15 11:19:16.2879860 UTC-04:00] [7892:7888] [fcmonitor 45 info] folder C:\Users\%USERNAME%\Desktop\ [2026-08-15 11:19:16.2879958 UTC-04:00] [7892:7888] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-15 11:19:16.2964964 UTC-04:00] [7892:7888] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-15 11:19:16.2966165 UTC-04:00] [7892:7888] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 0 [2026-08-15 11:19:16.2967230 UTC-04:00] [7892:7888] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 0 [2026-08-15 11:19:16.2968151 UTC-04:00] [7892:7888] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 0 [2026-08-15 11:19:16.2969007 UTC-04:00] [7892:7888] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 0 [2026-08-15 11:19:16.2970189 UTC-04:00] [7892:7888] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 0 [2026-08-15 11:19:16.2970391 UTC-04:00] [7892:7888] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 done [2026-08-15 11:19:16.2970498 UTC-04:00] [7892:7888] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-15 11:19:16.2970644 UTC-04:00] [7892:7888] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-15 11:19:16.2970683 UTC-04:00] [7892:7888] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-15 11:19:16.2970736 UTC-04:00] [7892:7888] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-15 11:19:16.2970823 UTC-04:00] [7892:7888] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-15 11:19:16.2970923 UTC-04:00] [7892:7888] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-15 11:19:16.2971251 UTC-04:00] [7892:7888] [fcmonitor 16 debug] add session=0 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-15 11:19:16.3736026 UTC-04:00] [7892:7888] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-15 11:19:16.3974368 UTC-04:00] [7892:7888] [fcmonitor 228 info] parsed to C:\Users\collinsa\Desktop\ for session 1 [2026-08-15 11:19:16.4003466 UTC-04:00] [7892:7888] [fcmonitor 228 info] parsed to C:\Users\collinsa\Documents\ for session 1 [2026-08-15 11:19:16.4049237 UTC-04:00] [7892:7888] [fcmonitor 228 info] parsed to C:\Users\collinsa\Favorites\ for session 1 [2026-08-15 11:19:16.4066711 UTC-04:00] [7892:7888] [fcmonitor 228 info] parsed to C:\Users\collinsa\Music\ for session 1 [2026-08-15 11:19:16.4084055 UTC-04:00] [7892:7888] [fcmonitor 228 info] parsed to C:\Users\collinsa\Pictures\ for session 1 [2026-08-15 11:19:16.4101896 UTC-04:00] [7892:7888] [fcmonitor 228 info] parsed to C:\Users\collinsa\Videos\ for session 1 [2026-08-15 11:19:16.4102043 UTC-04:00] [7892:7888] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 done [2026-08-15 11:19:16.4102095 UTC-04:00] [7892:7888] [fcmonitor 435 info] add c:\users\collinsa\desktop\ [2026-08-15 11:19:16.4102134 UTC-04:00] [7892:7888] [fcmonitor 435 info] add c:\users\collinsa\documents\ [2026-08-15 11:19:16.4102161 UTC-04:00] [7892:7888] [fcmonitor 435 info] add c:\users\collinsa\favorites\ [2026-08-15 11:19:16.4102183 UTC-04:00] [7892:7888] [fcmonitor 435 info] add c:\users\collinsa\music\ [2026-08-15 11:19:16.4102209 UTC-04:00] [7892:7888] [fcmonitor 435 info] add c:\users\collinsa\pictures\ [2026-08-15 11:19:16.4102235 UTC-04:00] [7892:7888] [fcmonitor 435 info] add c:\users\collinsa\videos\ [2026-08-15 11:19:16.4102352 UTC-04:00] [7892:7888] [fcmonitor 16 debug] add session=1 ret=1 str=C:\Users\collinsa\Desktop\;C:\Users\collinsa\Documents\;C:\Users\collinsa\Favorites\;C:\Users\collinsa\Music\;C:\Users\collinsa\Pictures\;C:\Users\collinsa\Videos\ [2026-08-15 11:19:16.4102377 UTC-04:00] [7892:7888] [fcmonitor 52 debug] reload monitor folder for session 0 [2026-08-15 11:19:16.4102498 UTC-04:00] [7892:7888] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-15 11:19:16.4102531 UTC-04:00] [7892:7888] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-15 11:19:16.4107387 UTC-04:00] [7892:7888] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 184380944384 499455451136 184380944384 [2026-08-15 11:19:16.4107473 UTC-04:00] [7892:7888] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-15 11:19:16.6763409 UTC-04:00] [7892:7888] [fcmonitor 232 info] queue lock 0x3ac cleanevent 0x39c [2026-08-15 11:19:16.6764480 UTC-04:00] [7892:7888] [fcmonitor 245 info] init succeed [2026-08-15 11:19:16.6764513 UTC-04:00] [7892:7888] [fcmonitor 438 info] reading cache [2026-08-15 11:19:16.7093442 UTC-04:00] [7892:7888] [fcmonitor 440 info] getting all proc [2026-08-15 11:19:16.7312557 UTC-04:00] [7892:7888] [fcmonitor 159 debug] getting all proc [2026-08-15 11:19:16.7394791 UTC-04:00] [7892:7888] [fcmonitor 192 warning] GetAllProcTree can't find module 4 System [2026-08-15 11:19:16.7431776 UTC-04:00] [7892:7888] [fcmonitor 192 warning] GetAllProcTree can't find module 100 Registry [2026-08-15 11:19:17.1123475 UTC-04:00] [7892:7888] [fcmonitor 192 warning] GetAllProcTree can't find module 2340 Memory Compression [2026-08-15 11:19:17.6603338 UTC-04:00] [7892:7888] [fcmonitor 192 warning] GetAllProcTree can't find module 8260 net.exe [2026-08-15 11:19:17.6747614 UTC-04:00] [7892:7888] [fcmonitor 192 warning] GetAllProcTree can't find module 8512 net1.exe [2026-08-15 11:19:17.6764958 UTC-04:00] [7892:7888] [fcmonitor 192 warning] GetAllProcTree can't find module 8536 conhost.exe [2026-08-15 11:19:17.6781109 UTC-04:00] [7892:7888] [fcmonitor 286 debug] getting all proc finished 131 0 [2026-08-15 11:19:17.6781181 UTC-04:00] [7892:7888] [fcmonitor 442 info] finish [2026-08-15 11:19:17.6782589 UTC-04:00] [7892:7888] [fcmonitor 267 info] heap p 0x000002351FC72A10 [2026-08-15 11:19:17.6782991 UTC-04:00] [7892:7888] [fcmonitor 267 info] heap p 0x000002351FC731F0 [2026-08-15 11:19:17.6783297 UTC-04:00] [7892:7888] [fcmonitor 267 info] heap p 0x000002351FC6F0F0 [2026-08-15 11:19:17.6783611 UTC-04:00] [7892:7888] [fcmonitor 267 info] heap p 0x0000023520AEC400 [2026-08-15 11:19:17.6783912 UTC-04:00] [7892:7888] [fcmonitor 267 info] heap p 0x0000023520AEC8D0 [2026-08-15 11:19:17.6784229 UTC-04:00] [7892:7888] [fcmonitor 267 info] heap p 0x0000023520AED270 [2026-08-15 11:19:17.6784529 UTC-04:00] [7892:7888] [fcmonitor 267 info] heap p 0x0000023520AEDC10 [2026-08-15 11:19:17.6784849 UTC-04:00] [7892:7888] [fcmonitor 267 info] heap p 0x0000023520AECDA0 [2026-08-15 11:19:17.7023707 UTC-04:00] [7892:8760] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 11:19:17.7039617 UTC-04:00] [7892:8764] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 11:19:17.7059235 UTC-04:00] [7892:8768] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 11:19:17.7060500 UTC-04:00] [7892:8772] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 11:19:17.7061461 UTC-04:00] [7892:8776] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 11:19:17.7062205 UTC-04:00] [7892:8780] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 11:19:17.7062924 UTC-04:00] [7892:8784] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 11:19:17.7063639 UTC-04:00] [7892:8788] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 11:19:19.4671623 UTC-04:00] [7892:8756] [fcmonitor 475 warning] session 1 not init [2026-08-15 11:19:19.4792247 UTC-04:00] [7892:8756] [fcmonitor 228 info] parsed to C:\Users\collinsa\Desktop\ for session 1 [2026-08-15 11:19:19.4837282 UTC-04:00] [7892:8756] [fcmonitor 228 info] parsed to C:\Users\collinsa\Documents\ for session 1 [2026-08-15 11:19:19.4858191 UTC-04:00] [7892:8756] [fcmonitor 228 info] parsed to C:\Users\collinsa\Favorites\ for session 1 [2026-08-15 11:19:19.4877948 UTC-04:00] [7892:8756] [fcmonitor 228 info] parsed to C:\Users\collinsa\Music\ for session 1 [2026-08-15 11:19:19.4900386 UTC-04:00] [7892:8756] [fcmonitor 228 info] parsed to C:\Users\collinsa\Pictures\ for session 1 [2026-08-15 11:19:19.4925310 UTC-04:00] [7892:8756] [fcmonitor 228 info] parsed to C:\Users\collinsa\Videos\ for session 1 [2026-08-15 11:19:19.4925488 UTC-04:00] [7892:8756] [fcmonitor 435 info] add c:\users\collinsa\desktop\ [2026-08-15 11:19:19.4925543 UTC-04:00] [7892:8756] [fcmonitor 435 info] add c:\users\collinsa\documents\ [2026-08-15 11:19:19.4925577 UTC-04:00] [7892:8756] [fcmonitor 435 info] add c:\users\collinsa\favorites\ [2026-08-15 11:19:19.4925603 UTC-04:00] [7892:8756] [fcmonitor 435 info] add c:\users\collinsa\music\ [2026-08-15 11:19:19.4925638 UTC-04:00] [7892:8756] [fcmonitor 435 info] add c:\users\collinsa\pictures\ [2026-08-15 11:19:19.4925683 UTC-04:00] [7892:8756] [fcmonitor 435 info] add c:\users\collinsa\videos\ [2026-08-15 11:19:21.0240960 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 8512 \SystemRoot\System32\Conhost.exe [2026-08-15 11:19:21.0241055 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 8512 \SystemRoot\System32\Conhost.exe [2026-08-15 11:19:23.1542197 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 9468 \??\C:\Windows\system32\igfxEM.exe [2026-08-15 11:19:23.1542297 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 9468 C:\Windows\system32\igfxEM.exe [2026-08-15 11:19:23.5378577 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 9484 \??\C:\Windows\system32\igfxHK.exe [2026-08-15 11:19:23.5378673 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 9484 C:\Windows\system32\igfxHK.exe [2026-08-15 11:19:24.0126509 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 9544 \??\C:\Windows\system32\igfxTray.exe [2026-08-15 11:19:24.0126636 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 9544 C:\Windows\system32\igfxTray.exe [2026-08-15 11:19:28.7566582 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 10180 \??\C:\Windows\system32\userinit.exe [2026-08-15 11:19:28.7566825 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 10180 C:\Windows\system32\userinit.exe [2026-08-15 11:19:29.4107219 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 10208 \??\C:\Windows\Explorer.EXE [2026-08-15 11:19:29.4107327 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 10208 C:\Windows\Explorer.EXE [2026-08-15 11:19:55.6648783 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 5932 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-15 11:19:55.6649045 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 5932 C:\IMC\MPS\IMCMobil.exe [2026-08-15 11:19:58.8365983 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 11556 \??\C:\Windows\system32\wlrmdr.exe [2026-08-15 11:19:58.8366223 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 11556 C:\Windows\system32\wlrmdr.exe [2026-08-15 11:19:59.9461424 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 11620 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-15 11:19:59.9461533 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 11620 C:\IMC\MPS\iIMCMobl.exe [2026-08-15 11:20:05.8672416 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 12092 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-15 11:20:05.8672523 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 12092 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-15 11:20:07.1484099 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 11364 \??\C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-15 11:20:07.1484345 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 11364 C:\Users\collinsa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-15 11:20:08.6646926 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 4248 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:20:08.6647019 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 4248 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:20:09.7581658 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 11684 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-15 11:20:09.7581790 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 11684 C:\Windows\SysWOW64\runonce.exe [2026-08-15 11:20:10.6014504 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 11536 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-15 11:20:10.6014610 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 11536 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-15 11:20:12.2013859 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 11752 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-15 11:20:12.2015164 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 11752 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-15 11:20:12.4919829 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 11720 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-15 11:20:12.4920001 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 11720 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-15 11:20:12.6495993 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 11872 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 11:20:12.6496085 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 11872 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 11:20:14.7420793 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 12024 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 11:20:14.7420891 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 12024 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 11:20:16.8857470 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 12216 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 11:20:16.8857714 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 12216 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 11:20:17.5065512 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 11976 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:20:17.5065624 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 11976 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:20:18.9644168 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 11800 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 11:20:18.9644280 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 11800 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 11:20:21.0223763 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 7616 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 11:20:21.0223855 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 7616 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 11:20:21.4214804 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 1780 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:20:21.4214900 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 1780 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:20:21.4228263 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 8112 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:20:21.4228346 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 8112 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:20:21.5146203 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 4276 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:20:21.5146298 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 4276 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:20:21.5161529 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 592 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:20:21.5161605 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 592 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:20:23.0619968 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 5976 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 11:20:23.0620069 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 5976 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 11:20:27.7473042 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 12860 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 11:20:27.7473266 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 12860 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 11:20:27.9407863 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 12892 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 11:20:27.9407960 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 12892 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 11:20:36.9726897 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 9412 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-15 11:20:36.9727156 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 9412 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-15 11:20:48.1683547 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 12356 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:20:48.1683773 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 12356 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:21:23.2268518 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 10116 \??\C:\Windows\splwow64.exe [2026-08-15 11:21:23.2268815 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 10116 C:\Windows\splwow64.exe [2026-08-15 11:22:03.9100931 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 12136 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:03.9101224 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 12136 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:04.1131901 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 12680 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:04.1132016 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 12680 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:04.1149900 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 6744 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:04.1149998 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 6744 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:04.2568774 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 8928 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:04.2568873 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 8928 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:07.1493579 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 6016 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:07.1493695 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 6016 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:07.7400035 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 1212 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:07.7400279 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 1212 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:08.3775407 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 1880 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:08.3775530 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 1880 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:09.8587179 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 6816 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:09.8587297 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 6816 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:16.6143094 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 10888 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:16.6143238 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 10888 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:16.6766797 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 10860 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:16.6766933 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 10860 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:16.6939117 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 4392 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:16.6939208 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 4392 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:19.3448687 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 11576 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:19.3448961 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 11576 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:19.8101279 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 7568 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:19.8101371 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 7568 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:21.7147364 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 6680 \??\C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-15 11:22:21.7147486 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 6680 C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-15 11:22:22.1689158 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 11724 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:22.1689259 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 11724 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:22.2141305 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 2352 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:22.2141410 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 2352 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:23.9964208 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 6960 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:23.9964318 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 6960 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:27.6352938 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 2944 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:27.6353167 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 2944 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:27.6759051 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 2812 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:27.6759207 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 2812 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:49.0906940 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 7464 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:22:49.0907170 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 7464 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:26:09.3465941 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 13276 \SystemRoot\System32\Conhost.exe [2026-08-15 11:26:09.3466301 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 13276 \SystemRoot\System32\Conhost.exe [2026-08-15 11:27:06.2110214 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 4076 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:27:06.2110406 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 4076 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 11:57:47.0969437 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 2516 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 11:57:47.0969973 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 2516 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 11:57:47.3940203 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 9328 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 11:57:47.3940312 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 9328 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 11:57:54.4190506 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 13564 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 11:57:54.4190708 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 13564 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 11:57:54.4198112 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 13588 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 11:57:54.4198171 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 13588 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 11:57:54.4478223 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 13612 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 11:57:54.4478372 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 13612 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 11:57:54.4497035 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 13636 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 11:57:54.4497135 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 13636 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 12:37:18.3158128 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 15688 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 12:37:18.3158502 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 15688 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-15 12:39:49.4222259 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 15256 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-15 12:39:49.4222475 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 15256 C:\IMC\RMS\TRAFFIC.EXE [2026-08-15 12:42:39.8534646 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 17308 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 12:42:39.8534902 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 17308 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 12:42:49.4289291 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 15532 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 12:42:49.4289543 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 15532 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 12:42:49.4758137 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 13248 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 12:42:49.4758306 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 13248 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 13:20:44.0496202 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 18632 \SystemRoot\System32\Conhost.exe [2026-08-15 13:20:44.0496543 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 18632 \SystemRoot\System32\Conhost.exe [2026-08-15 15:20:44.0634214 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 25604 \SystemRoot\System32\Conhost.exe [2026-08-15 15:20:44.0634430 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 25604 \SystemRoot\System32\Conhost.exe [2026-08-15 15:45:26.2477227 UTC-04:00] [7892:8756] [fcmonitor 332 debug] proc cache add 27104 \??\C:\Windows\system32\LogonUI.exe [2026-08-15 15:45:26.2477501 UTC-04:00] [7892:8756] [fcmonitor 99 info] add pid 27104 C:\Windows\system32\LogonUI.exe [2026-08-15 15:45:35.8926640 UTC-04:00] [7892:8644] [fcmonitor 90 debug] session change reason=6 session=1 [2026-08-15 15:45:35.8927015 UTC-04:00] [7892:8644] [fcmonitor 117 debug] add reason=6 session=1 ret=1 [2026-08-15 15:46:50.7477449 UTC-04:00] [7480:7488] [fcmonitor 1249 info] (Time Zone: Eastern Standard Time) (Sun Jun 30 22:28:59 2024, 53s) 2026-08-15 15:46:50.745 type: 0x10f size: 512 memory: 0x0000000000000000 [2026-08-15 15:46:50.7490982 UTC-04:00] [7480:7488] [fcmonitor 78 debug] ems_serial FCTEMS8821002497 [2026-08-15 15:46:50.7509171 UTC-04:00] [7480:7488] [fcmonitor 85 debug] fct_serial FCT8000515779876 [2026-08-15 15:46:50.7511150 UTC-04:00] [7480:7488] [fcmonitor 94 debug] fct_uid 4EF5549DB1674A63BE848553987D4AEE [2026-08-15 15:46:50.7511549 UTC-04:00] [7480:7488] [fcmonitor 103 debug] vdom default [2026-08-15 15:46:50.7511692 UTC-04:00] [7480:7488] [fcmonitor 843 info] InitCryptAlg [2026-08-15 15:46:50.7520029 UTC-04:00] [7480:7488] [fcmonitor 41 info] before LoadSettings [2026-08-15 15:46:50.7521670 UTC-04:00] [7480:7488] [fcmonitor 45 info] folder C:\Users\%USERNAME%\Desktop\ [2026-08-15 15:46:50.7521774 UTC-04:00] [7480:7488] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-15 15:46:50.7609412 UTC-04:00] [7480:7488] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-15 15:46:50.7610272 UTC-04:00] [7480:7488] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 0 [2026-08-15 15:46:50.7611031 UTC-04:00] [7480:7488] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 0 [2026-08-15 15:46:50.7611768 UTC-04:00] [7480:7488] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 0 [2026-08-15 15:46:50.7612491 UTC-04:00] [7480:7488] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 0 [2026-08-15 15:46:50.7613187 UTC-04:00] [7480:7488] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 0 [2026-08-15 15:46:50.7613294 UTC-04:00] [7480:7488] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 done [2026-08-15 15:46:50.7613361 UTC-04:00] [7480:7488] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-15 15:46:50.7613495 UTC-04:00] [7480:7488] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-15 15:46:50.7613542 UTC-04:00] [7480:7488] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-15 15:46:50.7613580 UTC-04:00] [7480:7488] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-15 15:46:50.7613618 UTC-04:00] [7480:7488] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-15 15:46:50.7613658 UTC-04:00] [7480:7488] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-15 15:46:50.7613833 UTC-04:00] [7480:7488] [fcmonitor 16 debug] add session=0 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-15 15:46:50.7627482 UTC-04:00] [7480:7488] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-15 15:46:50.7627548 UTC-04:00] [7480:7488] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-15 15:46:50.7762468 UTC-04:00] [7480:7488] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 184285364224 499455451136 184285364224 [2026-08-15 15:46:50.7762583 UTC-04:00] [7480:7488] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-15 15:46:50.9611255 UTC-04:00] [7480:7488] [fcmonitor 232 info] queue lock 0x398 cleanevent 0x39c [2026-08-15 15:46:50.9612609 UTC-04:00] [7480:7488] [fcmonitor 245 info] init succeed [2026-08-15 15:46:50.9612686 UTC-04:00] [7480:7488] [fcmonitor 438 info] reading cache [2026-08-15 15:46:51.0443412 UTC-04:00] [7480:7488] [fcmonitor 440 info] getting all proc [2026-08-15 15:46:51.0648761 UTC-04:00] [7480:7488] [fcmonitor 159 debug] getting all proc [2026-08-15 15:46:51.0677486 UTC-04:00] [7480:7488] [fcmonitor 192 warning] GetAllProcTree can't find module 4 System [2026-08-15 15:46:51.0860829 UTC-04:00] [7480:7488] [fcmonitor 192 warning] GetAllProcTree can't find module 100 Registry [2026-08-15 15:46:51.4370466 UTC-04:00] [7480:7488] [fcmonitor 192 warning] GetAllProcTree can't find module 2388 Memory Compression [2026-08-15 15:46:52.1747186 UTC-04:00] [7480:7488] [fcmonitor 192 warning] GetAllProcTree can't find module 3100 net1.exe [2026-08-15 15:46:52.2171791 UTC-04:00] [7480:7488] [fcmonitor 286 debug] getting all proc finished 121 0 [2026-08-15 15:46:52.2171889 UTC-04:00] [7480:7488] [fcmonitor 442 info] finish [2026-08-15 15:46:52.2173155 UTC-04:00] [7480:7488] [fcmonitor 267 info] heap p 0x000001FE0BFA34B0 [2026-08-15 15:46:52.2174812 UTC-04:00] [7480:7488] [fcmonitor 267 info] heap p 0x000001FE0BFDB7B0 [2026-08-15 15:46:52.2175314 UTC-04:00] [7480:7488] [fcmonitor 267 info] heap p 0x000001FE0BFDBC60 [2026-08-15 15:46:52.2175773 UTC-04:00] [7480:7488] [fcmonitor 267 info] heap p 0x000001FE0BFC5060 [2026-08-15 15:46:52.2176235 UTC-04:00] [7480:7488] [fcmonitor 267 info] heap p 0x000001FE0BFC5530 [2026-08-15 15:46:52.2176681 UTC-04:00] [7480:7488] [fcmonitor 267 info] heap p 0x000001FE0BFC3D20 [2026-08-15 15:46:52.2177116 UTC-04:00] [7480:7488] [fcmonitor 267 info] heap p 0x000001FE0BFC46C0 [2026-08-15 15:46:52.2177556 UTC-04:00] [7480:7488] [fcmonitor 267 info] heap p 0x000001FE0BFC4B90 [2026-08-15 15:46:52.2620045 UTC-04:00] [7480:7964] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 15:46:52.2620126 UTC-04:00] [7480:7956] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 15:46:52.2620779 UTC-04:00] [7480:7936] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 15:46:52.2621211 UTC-04:00] [7480:7944] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 15:46:52.2621527 UTC-04:00] [7480:7948] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 15:46:52.2622002 UTC-04:00] [7480:7940] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 15:46:52.2622261 UTC-04:00] [7480:7920] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 15:46:52.2622618 UTC-04:00] [7480:7952] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 15:47:09.8650741 UTC-04:00] [7480:7960] [fcmonitor 475 warning] session 1 not init [2026-08-15 15:47:09.8722854 UTC-04:00] [7480:7960] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-15 15:47:09.8723973 UTC-04:00] [7480:7960] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 1 [2026-08-15 15:47:09.8724959 UTC-04:00] [7480:7960] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 1 [2026-08-15 15:47:09.8725891 UTC-04:00] [7480:7960] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 1 [2026-08-15 15:47:09.8727244 UTC-04:00] [7480:7960] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 1 [2026-08-15 15:47:09.8728543 UTC-04:00] [7480:7960] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 1 [2026-08-15 15:47:09.8728727 UTC-04:00] [7480:7960] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-15 15:47:09.8728790 UTC-04:00] [7480:7960] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-15 15:47:09.8728830 UTC-04:00] [7480:7960] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-15 15:47:09.8728869 UTC-04:00] [7480:7960] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-15 15:47:09.8728903 UTC-04:00] [7480:7960] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-15 15:47:09.8728935 UTC-04:00] [7480:7960] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-15 16:02:49.3478278 UTC-04:00] [7480:7212] [fcmonitor 90 debug] session change reason=5 session=1 [2026-08-15 16:02:49.3482499 UTC-04:00] [7480:7212] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-15 16:02:49.3638469 UTC-04:00] [7480:7212] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Desktop\ for session 1 [2026-08-15 16:02:49.3686705 UTC-04:00] [7480:7212] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Documents\ for session 1 [2026-08-15 16:02:49.3754934 UTC-04:00] [7480:7212] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Favorites\ for session 1 [2026-08-15 16:02:49.3799076 UTC-04:00] [7480:7212] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Music\ for session 1 [2026-08-15 16:02:49.3843975 UTC-04:00] [7480:7212] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Pictures\ for session 1 [2026-08-15 16:02:49.3891005 UTC-04:00] [7480:7212] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Videos\ for session 1 [2026-08-15 16:02:49.3891456 UTC-04:00] [7480:7212] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 done [2026-08-15 16:02:49.3891627 UTC-04:00] [7480:7212] [fcmonitor 435 info] add c:\users\pfefferm\desktop\ [2026-08-15 16:02:49.3891778 UTC-04:00] [7480:7212] [fcmonitor 435 info] add c:\users\pfefferm\documents\ [2026-08-15 16:02:49.3891885 UTC-04:00] [7480:7212] [fcmonitor 435 info] add c:\users\pfefferm\favorites\ [2026-08-15 16:02:49.3891999 UTC-04:00] [7480:7212] [fcmonitor 435 info] add c:\users\pfefferm\music\ [2026-08-15 16:02:49.3892105 UTC-04:00] [7480:7212] [fcmonitor 435 info] add c:\users\pfefferm\pictures\ [2026-08-15 16:02:49.3892208 UTC-04:00] [7480:7212] [fcmonitor 435 info] add c:\users\pfefferm\videos\ [2026-08-15 16:02:49.3892732 UTC-04:00] [7480:7212] [fcmonitor 16 debug] add session=1 ret=1 str=C:\Users\pfefferm\Desktop\;C:\Users\pfefferm\Documents\;C:\Users\pfefferm\Favorites\;C:\Users\pfefferm\Music\;C:\Users\pfefferm\Pictures\;C:\Users\pfefferm\Videos\ [2026-08-15 16:02:49.3893136 UTC-04:00] [7480:7212] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-15 16:02:49.3893228 UTC-04:00] [7480:7212] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-15 16:02:49.3902618 UTC-04:00] [7480:7212] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 184289132544 499455451136 184289132544 [2026-08-15 16:02:49.3902827 UTC-04:00] [7480:7212] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-15 16:02:53.9505704 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 9356 \SystemRoot\System32\Conhost.exe [2026-08-15 16:02:53.9505942 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 9356 \SystemRoot\System32\Conhost.exe [2026-08-15 16:02:56.6734036 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 9544 \??\C:\Windows\system32\igfxEM.exe [2026-08-15 16:02:56.6734269 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 9544 C:\Windows\system32\igfxEM.exe [2026-08-15 16:02:58.0005280 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 9624 \??\C:\Windows\system32\igfxHK.exe [2026-08-15 16:02:58.0005838 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 9624 C:\Windows\system32\igfxHK.exe [2026-08-15 16:02:59.1606808 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 9692 \??\C:\Windows\system32\igfxTray.exe [2026-08-15 16:02:59.1607037 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 9692 C:\Windows\system32\igfxTray.exe [2026-08-15 16:03:08.0197725 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 10200 \??\C:\Windows\system32\userinit.exe [2026-08-15 16:03:08.0198260 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 10200 C:\Windows\system32\userinit.exe [2026-08-15 16:03:10.3251068 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 9268 \??\C:\Windows\Explorer.EXE [2026-08-15 16:03:10.3251368 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 9268 C:\Windows\Explorer.EXE [2026-08-15 16:03:38.1489893 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 5344 \??\C:\Windows\system32\wlrmdr.exe [2026-08-15 16:03:38.1490360 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 5344 C:\Windows\system32\wlrmdr.exe [2026-08-15 16:03:53.1223589 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 3732 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-15 16:03:53.1224112 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 3732 C:\IMC\MPS\IMCMobil.exe [2026-08-15 16:04:00.7476172 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 2780 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-15 16:04:00.7476712 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 2780 C:\IMC\MPS\iIMCMobl.exe [2026-08-15 16:04:29.9504694 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 8308 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-15 16:04:29.9505743 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 8308 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-15 16:04:32.2811522 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 9128 \??\C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-15 16:04:32.2811766 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 9128 C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-15 16:04:33.8061380 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 11032 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 16:04:33.8061639 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 11032 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 16:04:35.8844093 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 11072 \??\C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Win32Bridge.Server.exe [2026-08-15 16:04:35.8852617 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 11072 C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Win32Bridge.Server.exe [2026-08-15 16:04:37.7130044 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 11332 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-15 16:04:37.7130583 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 11332 C:\Windows\SysWOW64\runonce.exe [2026-08-15 16:04:40.2663135 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 11576 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-15 16:04:40.2663367 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 11576 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-15 16:04:44.1954809 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 11744 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-15 16:04:44.1955061 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 11744 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-15 16:04:45.0532631 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 11764 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-15 16:04:45.0532882 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 11764 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-15 16:04:47.4440127 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 11932 \??\C:\Windows\System32\cmd.exe [2026-08-15 16:04:47.4440662 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 11932 C:\Windows\System32\cmd.exe [2026-08-15 16:04:48.2389808 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 12000 \SystemRoot\System32\Conhost.exe [2026-08-15 16:04:48.2390061 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 12000 \SystemRoot\System32\Conhost.exe [2026-08-15 16:04:49.9716315 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 12120 \??\C:\Windows\System32\cmd.exe [2026-08-15 16:04:49.9716537 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 12120 C:\Windows\System32\cmd.exe [2026-08-15 16:04:50.2888846 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 12132 \SystemRoot\System32\Conhost.exe [2026-08-15 16:04:50.2889090 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 12132 \SystemRoot\System32\Conhost.exe [2026-08-15 16:04:53.0545085 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 11408 \??\C:\Windows\System32\cmd.exe [2026-08-15 16:04:53.0545310 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 11408 C:\Windows\System32\cmd.exe [2026-08-15 16:04:53.3642517 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 2472 \SystemRoot\System32\Conhost.exe [2026-08-15 16:04:53.3642748 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 2472 \SystemRoot\System32\Conhost.exe [2026-08-15 16:05:07.0501040 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 11344 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:07.0502088 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 11344 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:09.2830467 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 11960 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:09.2830978 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 11960 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:11.4390194 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 12064 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:11.4390544 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 12064 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:13.6348494 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 12236 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:13.6348716 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 12236 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:14.1935871 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 12160 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 16:05:14.1936191 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 12160 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 16:05:15.7787709 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 8684 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:15.7787946 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 8684 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:18.1062837 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 10812 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:18.1063570 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 10812 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:20.6120028 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 9212 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:20.6120251 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 9212 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:23.0509909 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 11996 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:23.0510132 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 11996 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:25.4599488 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 9512 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:25.4599729 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 9512 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:27.8458560 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 1824 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:27.8459461 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 1824 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:30.1866817 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 11752 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:30.1867171 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 11752 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:32.3714466 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 11416 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:32.3714683 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 11416 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:34.5906138 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 9384 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:34.5906497 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 9384 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:36.7115982 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 12272 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:36.7116336 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 12272 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:36.8559365 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 2696 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 16:05:36.8559605 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 2696 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 16:05:36.8604009 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 4044 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 16:05:36.8604201 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 4044 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 16:05:36.9744344 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 8716 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 16:05:36.9744570 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 8716 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 16:05:36.9815835 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 2116 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 16:05:36.9816074 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 2116 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 16:05:37.0517044 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 3920 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 16:05:37.0517279 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 3920 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 16:05:37.1150690 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 10276 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 16:05:37.1151006 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 10276 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 16:05:38.9854458 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 12476 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:38.9854961 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 12476 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:41.2215101 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 12604 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 16:05:41.2215343 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 12604 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 16:05:41.3191288 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 12612 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:41.3191513 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 12612 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:43.5967940 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 12744 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:43.5968190 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 12744 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:45.7071733 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 12808 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:45.7072097 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 12808 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 16:05:46.4941490 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 12840 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 16:05:46.4941728 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 12840 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 16:05:52.2492520 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 12436 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 16:05:52.2493080 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 12436 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 16:05:52.7856797 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 4592 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 16:05:52.7857019 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 4592 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.78\identity_helper.exe [2026-08-15 16:06:16.3932614 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 3640 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-15 16:06:16.3935123 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 3640 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-15 16:07:16.4969925 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 8628 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 16:07:16.4970529 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 8628 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 17:04:30.9963816 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 11572 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 17:04:30.9964407 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 11572 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 17:04:31.1523263 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 13620 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 17:04:31.1523369 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 13620 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 17:05:16.1638147 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 14880 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 17:05:16.1638394 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 14880 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 17:09:32.2612434 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 13712 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 17:09:32.2612656 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 13712 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 17:22:15.0961575 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 13616 \??\C:\Windows\splwow64.exe [2026-08-15 17:22:15.0961971 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 13616 C:\Windows\splwow64.exe [2026-08-15 17:48:20.2502066 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 18308 \SystemRoot\System32\Conhost.exe [2026-08-15 17:48:20.2502446 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 18308 \SystemRoot\System32\Conhost.exe [2026-08-15 18:16:05.9375802 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 19360 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 18:16:05.9378549 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 19360 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 18:18:22.6522581 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 16592 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 18:18:22.6522836 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 16592 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 18:18:26.3301644 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 14640 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 18:18:26.3301766 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 14640 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 18:18:28.8352054 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 20472 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-15 18:18:28.8352282 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 20472 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-15 18:18:29.0063393 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 19524 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-15 18:18:29.0063492 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 19524 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-15 18:18:29.7108551 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 3216 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 18:18:29.7108653 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 3216 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 18:18:29.7471690 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 5560 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 18:18:29.7471795 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 5560 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 18:18:29.7508480 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 3728 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 18:18:29.7508573 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 3728 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 18:18:29.7524796 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 9640 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 18:18:29.7524885 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 9640 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 18:18:29.7937360 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 9336 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 18:18:29.7937488 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 9336 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 18:18:56.5330708 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 18920 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 18:18:56.5331202 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 18920 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 18:20:26.5460603 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 19872 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 18:20:26.5460914 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 19872 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 18:21:27.3350040 UTC-04:00] [7480:7960] [fcmonitor 332 debug] proc cache add 19612 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 18:21:27.3350323 UTC-04:00] [7480:7960] [fcmonitor 99 info] add pid 19612 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:04:53.7935657 UTC-04:00] [6236:4940] [fcmonitor 1249 info] (Time Zone: Eastern Standard Time) (Sun Jun 30 22:28:59 2024, 66s) 2026-08-15 19:04:53.777 type: 0x10f size: 512 memory: 0x0000000000000000 [2026-08-15 19:04:53.7946971 UTC-04:00] [6236:4940] [fcmonitor 78 debug] ems_serial FCTEMS8821002497 [2026-08-15 19:04:53.7962334 UTC-04:00] [6236:4940] [fcmonitor 85 debug] fct_serial FCT8000515779876 [2026-08-15 19:04:53.7964116 UTC-04:00] [6236:4940] [fcmonitor 94 debug] fct_uid 4EF5549DB1674A63BE848553987D4AEE [2026-08-15 19:04:53.7964497 UTC-04:00] [6236:4940] [fcmonitor 103 debug] vdom default [2026-08-15 19:04:53.7964634 UTC-04:00] [6236:4940] [fcmonitor 843 info] InitCryptAlg [2026-08-15 19:04:53.7972068 UTC-04:00] [6236:4940] [fcmonitor 41 info] before LoadSettings [2026-08-15 19:04:53.8564495 UTC-04:00] [6236:4940] [fcmonitor 45 info] folder C:\Users\%USERNAME%\Desktop\ [2026-08-15 19:04:53.8564878 UTC-04:00] [6236:4940] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-15 19:04:53.8666493 UTC-04:00] [6236:4940] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-15 19:04:53.8667340 UTC-04:00] [6236:4940] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 0 [2026-08-15 19:04:53.8668206 UTC-04:00] [6236:4940] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 0 [2026-08-15 19:04:53.8668764 UTC-04:00] [6236:4940] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 0 [2026-08-15 19:04:53.8669711 UTC-04:00] [6236:4940] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 0 [2026-08-15 19:04:53.8673622 UTC-04:00] [6236:4940] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 0 [2026-08-15 19:04:53.8673740 UTC-04:00] [6236:4940] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 done [2026-08-15 19:04:53.8673798 UTC-04:00] [6236:4940] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-15 19:04:53.8673921 UTC-04:00] [6236:4940] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-15 19:04:53.8673957 UTC-04:00] [6236:4940] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-15 19:04:53.8673989 UTC-04:00] [6236:4940] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-15 19:04:53.8674021 UTC-04:00] [6236:4940] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-15 19:04:53.8674053 UTC-04:00] [6236:4940] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-15 19:04:53.8674232 UTC-04:00] [6236:4940] [fcmonitor 16 debug] add session=0 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-15 19:04:53.8686582 UTC-04:00] [6236:4940] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-15 19:04:53.8686638 UTC-04:00] [6236:4940] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-15 19:04:53.8691759 UTC-04:00] [6236:4940] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 184406704128 499455451136 184406704128 [2026-08-15 19:04:53.8691849 UTC-04:00] [6236:4940] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-15 19:04:54.1375647 UTC-04:00] [6236:4940] [fcmonitor 232 info] queue lock 0x398 cleanevent 0x39c [2026-08-15 19:04:54.1376633 UTC-04:00] [6236:4940] [fcmonitor 245 info] init succeed [2026-08-15 19:04:54.1376663 UTC-04:00] [6236:4940] [fcmonitor 438 info] reading cache [2026-08-15 19:04:54.2199382 UTC-04:00] [6236:4940] [fcmonitor 440 info] getting all proc [2026-08-15 19:04:54.2590970 UTC-04:00] [6236:4940] [fcmonitor 159 debug] getting all proc [2026-08-15 19:04:54.2617682 UTC-04:00] [6236:4940] [fcmonitor 192 warning] GetAllProcTree can't find module 4 System [2026-08-15 19:04:54.3578137 UTC-04:00] [6236:4940] [fcmonitor 192 warning] GetAllProcTree can't find module 100 Registry [2026-08-15 19:04:54.6576273 UTC-04:00] [6236:4940] [fcmonitor 192 warning] GetAllProcTree can't find module 2416 Memory Compression [2026-08-15 19:04:55.0844607 UTC-04:00] [6236:4940] [fcmonitor 286 debug] getting all proc finished 122 0 [2026-08-15 19:04:55.0844675 UTC-04:00] [6236:4940] [fcmonitor 442 info] finish [2026-08-15 19:04:55.0846020 UTC-04:00] [6236:4940] [fcmonitor 267 info] heap p 0x00000130AFBE46B0 [2026-08-15 19:04:55.0846481 UTC-04:00] [6236:4940] [fcmonitor 267 info] heap p 0x00000130AEBA3CA0 [2026-08-15 19:04:55.0846839 UTC-04:00] [6236:4940] [fcmonitor 267 info] heap p 0x00000130AEBA4150 [2026-08-15 19:04:55.0847228 UTC-04:00] [6236:4940] [fcmonitor 267 info] heap p 0x00000130AFC0CFA0 [2026-08-15 19:04:55.0847568 UTC-04:00] [6236:4940] [fcmonitor 267 info] heap p 0x00000130AFC0E2E0 [2026-08-15 19:04:55.0848035 UTC-04:00] [6236:4940] [fcmonitor 267 info] heap p 0x00000130AFC0D470 [2026-08-15 19:04:55.0848373 UTC-04:00] [6236:4940] [fcmonitor 267 info] heap p 0x00000130AFC0D940 [2026-08-15 19:04:55.0848733 UTC-04:00] [6236:4940] [fcmonitor 267 info] heap p 0x00000130AFC0FFC0 [2026-08-15 19:04:55.1056321 UTC-04:00] [6236:6296] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 19:04:55.1057130 UTC-04:00] [6236:7492] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 19:04:55.1057836 UTC-04:00] [6236:7516] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 19:04:55.1058578 UTC-04:00] [6236:7504] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 19:04:55.1059440 UTC-04:00] [6236:7524] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 19:04:55.1060150 UTC-04:00] [6236:7512] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 19:04:55.1060840 UTC-04:00] [6236:7528] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 19:04:55.1061541 UTC-04:00] [6236:6356] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-15 19:05:09.8033194 UTC-04:00] [6236:6288] [fcmonitor 475 warning] session 1 not init [2026-08-15 19:05:09.8130537 UTC-04:00] [6236:6288] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-15 19:05:09.8131305 UTC-04:00] [6236:6288] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 1 [2026-08-15 19:05:09.8131949 UTC-04:00] [6236:6288] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 1 [2026-08-15 19:05:09.8132577 UTC-04:00] [6236:6288] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 1 [2026-08-15 19:05:09.8133201 UTC-04:00] [6236:6288] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 1 [2026-08-15 19:05:09.8133819 UTC-04:00] [6236:6288] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 1 [2026-08-15 19:05:09.8133963 UTC-04:00] [6236:6288] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-15 19:05:09.8134024 UTC-04:00] [6236:6288] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-15 19:05:09.8134109 UTC-04:00] [6236:6288] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-15 19:05:09.8134137 UTC-04:00] [6236:6288] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-15 19:05:09.8134163 UTC-04:00] [6236:6288] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-15 19:05:09.8134188 UTC-04:00] [6236:6288] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-15 19:05:14.0540144 UTC-04:00] [6236:7036] [fcmonitor 90 debug] session change reason=5 session=1 [2026-08-15 19:05:14.0541661 UTC-04:00] [6236:7036] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-15 19:05:14.0607807 UTC-04:00] [6236:7036] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Desktop\ for session 1 [2026-08-15 19:05:14.0628043 UTC-04:00] [6236:7036] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Documents\ for session 1 [2026-08-15 19:05:14.0646628 UTC-04:00] [6236:7036] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Favorites\ for session 1 [2026-08-15 19:05:14.0664418 UTC-04:00] [6236:7036] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Music\ for session 1 [2026-08-15 19:05:14.0683184 UTC-04:00] [6236:7036] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Pictures\ for session 1 [2026-08-15 19:05:14.0701609 UTC-04:00] [6236:7036] [fcmonitor 228 info] parsed to C:\Users\pfefferm\Videos\ for session 1 [2026-08-15 19:05:14.0701756 UTC-04:00] [6236:7036] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 done [2026-08-15 19:05:14.0701811 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\pfefferm\desktop\ [2026-08-15 19:05:14.0701848 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\pfefferm\documents\ [2026-08-15 19:05:14.0701875 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\pfefferm\favorites\ [2026-08-15 19:05:14.0701901 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\pfefferm\music\ [2026-08-15 19:05:14.0701930 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\pfefferm\pictures\ [2026-08-15 19:05:14.0701956 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\pfefferm\videos\ [2026-08-15 19:05:14.0702076 UTC-04:00] [6236:7036] [fcmonitor 16 debug] add session=1 ret=1 str=C:\Users\pfefferm\Desktop\;C:\Users\pfefferm\Documents\;C:\Users\pfefferm\Favorites\;C:\Users\pfefferm\Music\;C:\Users\pfefferm\Pictures\;C:\Users\pfefferm\Videos\ [2026-08-15 19:05:14.0702223 UTC-04:00] [6236:7036] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-15 19:05:14.0702257 UTC-04:00] [6236:7036] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-15 19:05:14.0704143 UTC-04:00] [6236:7036] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 184402063360 499455451136 184402063360 [2026-08-15 19:05:14.0704268 UTC-04:00] [6236:7036] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-15 19:05:15.8961279 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 9616 \SystemRoot\System32\Conhost.exe [2026-08-15 19:05:15.8961387 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 9616 \SystemRoot\System32\Conhost.exe [2026-08-15 19:05:16.8405280 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 9720 \??\C:\Windows\system32\igfxEM.exe [2026-08-15 19:05:16.8405423 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 9720 C:\Windows\system32\igfxEM.exe [2026-08-15 19:05:17.1043651 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 9744 \??\C:\Windows\system32\igfxHK.exe [2026-08-15 19:05:17.1043785 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 9744 C:\Windows\system32\igfxHK.exe [2026-08-15 19:05:17.2668535 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 9776 \??\C:\Windows\system32\igfxTray.exe [2026-08-15 19:05:17.2668655 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 9776 C:\Windows\system32\igfxTray.exe [2026-08-15 19:05:20.0549740 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 10084 \??\C:\Windows\system32\userinit.exe [2026-08-15 19:05:20.0549985 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 10084 C:\Windows\system32\userinit.exe [2026-08-15 19:05:20.7267948 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 2616 \??\C:\Windows\Explorer.EXE [2026-08-15 19:05:20.7268041 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 2616 C:\Windows\Explorer.EXE [2026-08-15 19:05:50.1235080 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 11872 \??\C:\Windows\system32\wlrmdr.exe [2026-08-15 19:05:50.1235342 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 11872 C:\Windows\system32\wlrmdr.exe [2026-08-15 19:05:52.5125940 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 12076 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-15 19:05:52.5126088 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 12076 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-15 19:05:53.5762541 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 12272 \??\C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-15 19:05:53.5762659 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 12272 C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-15 19:05:54.6386456 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 4536 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:05:54.6386549 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 4536 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:05:55.9414663 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 11156 \??\C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Win32Bridge.Server.exe [2026-08-15 19:05:55.9414779 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 11156 C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Win32Bridge.Server.exe [2026-08-15 19:05:57.2140915 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 11520 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-15 19:05:57.2141018 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 11520 C:\IMC\MPS\IMCMobil.exe [2026-08-15 19:05:57.6540328 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 11636 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-15 19:05:57.6540568 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 11636 C:\Windows\SysWOW64\runonce.exe [2026-08-15 19:05:58.4642540 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 4860 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-15 19:05:58.4642647 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 4860 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-15 19:06:00.4696967 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 10152 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-15 19:06:00.4697065 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 10152 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-15 19:06:00.4977949 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 5020 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-15 19:06:00.4978052 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 5020 C:\IMC\MPS\iIMCMobl.exe [2026-08-15 19:06:00.9975571 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 4596 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-15 19:06:00.9975673 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 4596 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-15 19:06:05.3996631 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 1280 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:06:05.3996744 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 1280 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:06:11.8249652 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 12484 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:06:11.8249896 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 12484 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:06:11.8265495 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 12492 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:06:11.8265589 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 12492 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:06:11.8455246 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 12500 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:06:11.8455355 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 12500 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:06:11.8482056 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 12508 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:06:11.8482192 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 12508 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:06:11.8607557 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 12528 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:06:11.8607667 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 12528 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:06:11.8619837 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 12540 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:06:11.8619923 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 12540 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:06:13.2654517 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 12892 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:06:13.2654626 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 12892 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:06:16.3337156 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 13184 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 19:06:16.3337260 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 13184 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-15 19:06:18.5642156 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 11568 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-15 19:06:18.5642547 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 11568 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-15 19:06:18.8271763 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 7184 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-15 19:06:18.8271858 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 7184 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-15 19:06:36.3588845 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 6404 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:06:36.3589134 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 6404 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:06:40.4222159 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 4816 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-15 19:06:40.4222424 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 4816 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-15 19:08:06.3624749 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 12992 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:08:06.3625025 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 12992 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 19:11:17.6926999 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 9636 \??\C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\OneDrive.Sync.Service.exe [2026-08-15 19:11:17.6927353 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 9636 C:\Users\pfefferm\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\OneDrive.Sync.Service.exe [2026-08-15 19:13:05.2810388 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 1404 \SystemRoot\System32\Conhost.exe [2026-08-15 19:13:05.2810752 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 1404 \SystemRoot\System32\Conhost.exe [2026-08-15 19:54:29.3364566 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 12980 \??\C:\Windows\splwow64.exe [2026-08-15 19:54:29.3364994 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 12980 C:\Windows\splwow64.exe [2026-08-15 21:06:25.4865907 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 17496 \SystemRoot\System32\Conhost.exe [2026-08-15 21:06:25.4866291 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 17496 \SystemRoot\System32\Conhost.exe [2026-08-15 21:41:48.5227746 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 19048 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:41:48.5228094 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 19048 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:41:48.6392871 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 19688 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:41:48.6392989 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 19688 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:42:02.6396070 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 21108 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:42:02.6396378 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 21108 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:42:06.1775620 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 21300 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:42:06.1776083 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 21300 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:42:06.2081631 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 21328 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:42:06.2081748 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 21328 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:42:33.9457985 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 17768 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:42:33.9458252 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 17768 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:42:35.6948861 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 21344 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:42:35.6948972 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 21344 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:42:35.8227935 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 19808 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:42:35.8228019 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 19808 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:42:36.0081263 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 20404 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:42:36.0081369 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 20404 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:42:36.0126945 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 11388 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:42:36.0127196 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 11388 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:42:36.1836631 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 21396 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:42:36.1836737 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 21396 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:42:36.2538776 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 12496 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:42:36.2538899 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 12496 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:42:38.0366036 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 11884 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-15 21:42:38.0366144 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 11884 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-15 21:42:38.0696232 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 11896 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-15 21:42:38.0696333 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 11896 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-15 21:43:06.0256871 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 11512 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:43:06.0257133 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 11512 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:44:36.0039714 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 12672 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 21:44:36.0040015 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 12672 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-15 23:06:25.5013607 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 24820 \SystemRoot\System32\Conhost.exe [2026-08-15 23:06:25.5013960 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 24820 \SystemRoot\System32\Conhost.exe [2026-08-15 23:43:21.6796003 UTC-04:00] [6236:6288] [fcmonitor 475 warning] session 2 not init [2026-08-15 23:43:21.6892129 UTC-04:00] [6236:6288] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-15 23:43:21.6892804 UTC-04:00] [6236:6288] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-15 23:43:21.6893373 UTC-04:00] [6236:6288] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-15 23:43:21.6894023 UTC-04:00] [6236:6288] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-15 23:43:21.6894560 UTC-04:00] [6236:6288] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-15 23:43:21.6895069 UTC-04:00] [6236:6288] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-15 23:43:21.6895204 UTC-04:00] [6236:6288] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-15 23:43:21.6895229 UTC-04:00] [6236:6288] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-15 23:43:21.6895246 UTC-04:00] [6236:6288] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-15 23:43:21.6895261 UTC-04:00] [6236:6288] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-15 23:43:21.6895278 UTC-04:00] [6236:6288] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-15 23:43:21.6895294 UTC-04:00] [6236:6288] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-15 23:43:22.6015478 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 27800 \??\C:\Windows\system32\LogonUI.exe [2026-08-15 23:43:22.6015616 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 27800 C:\Windows\system32\LogonUI.exe [2026-08-15 23:43:22.7580217 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 16980 \??\C:\Windows\System32\LogonUI.exe [2026-08-15 23:43:22.7580330 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 16980 C:\Windows\System32\LogonUI.exe [2026-08-15 23:43:22.7605857 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 27220 \??\C:\Windows\System32\dwm.exe [2026-08-15 23:43:22.7605968 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 27220 C:\Windows\System32\dwm.exe [2026-08-15 23:43:23.2567436 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 27784 \??\C:\Windows\System32\fontdrvhost.exe [2026-08-15 23:43:23.2567535 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 27784 C:\Windows\System32\fontdrvhost.exe [2026-08-15 23:43:23.4679570 UTC-04:00] [6236:7036] [fcmonitor 90 debug] session change reason=3 session=2 [2026-08-15 23:43:23.4681406 UTC-04:00] [6236:7036] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-15 23:43:23.4823384 UTC-04:00] [6236:7036] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-15 23:43:23.4824369 UTC-04:00] [6236:7036] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-15 23:43:23.4825225 UTC-04:00] [6236:7036] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-15 23:43:23.4826030 UTC-04:00] [6236:7036] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-15 23:43:23.4826810 UTC-04:00] [6236:7036] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-15 23:43:23.4827564 UTC-04:00] [6236:7036] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-15 23:43:23.4827675 UTC-04:00] [6236:7036] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-15 23:43:23.4827739 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-15 23:43:23.4827790 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-15 23:43:23.4827824 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-15 23:43:23.4827856 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-15 23:43:23.4827889 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-15 23:43:23.4827924 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-15 23:43:23.4828147 UTC-04:00] [6236:7036] [fcmonitor 16 debug] add session=2 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-15 23:43:23.4828314 UTC-04:00] [6236:7036] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-15 23:43:23.4828347 UTC-04:00] [6236:7036] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-15 23:43:23.4830226 UTC-04:00] [6236:7036] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 184319873024 499455451136 184319873024 [2026-08-15 23:43:23.4830373 UTC-04:00] [6236:7036] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-15 23:43:26.3397396 UTC-04:00] [6236:7036] [fcmonitor 90 debug] session change reason=6 session=1 [2026-08-15 23:43:26.3397488 UTC-04:00] [6236:7036] [fcmonitor 117 debug] add reason=6 session=1 ret=1 [2026-08-15 23:43:26.7393790 UTC-04:00] [6236:7036] [fcmonitor 90 debug] session change reason=2 session=1 [2026-08-15 23:43:26.7393864 UTC-04:00] [6236:7036] [fcmonitor 117 debug] add reason=2 session=1 ret=1 [2026-08-15 23:43:26.8013373 UTC-04:00] [6236:7036] [fcmonitor 90 debug] session change reason=4 session=2 [2026-08-15 23:43:26.8013458 UTC-04:00] [6236:7036] [fcmonitor 117 debug] add reason=4 session=2 ret=1 [2026-08-15 23:43:26.9358477 UTC-04:00] [6236:7036] [fcmonitor 90 debug] session change reason=1 session=2 [2026-08-15 23:43:26.9360061 UTC-04:00] [6236:7036] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-15 23:43:26.9468342 UTC-04:00] [6236:7036] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-15 23:43:26.9469423 UTC-04:00] [6236:7036] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-15 23:43:26.9470389 UTC-04:00] [6236:7036] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-15 23:43:26.9471273 UTC-04:00] [6236:7036] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-15 23:43:26.9472171 UTC-04:00] [6236:7036] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-15 23:43:26.9473008 UTC-04:00] [6236:7036] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-15 23:43:26.9473120 UTC-04:00] [6236:7036] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-15 23:43:26.9473192 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-15 23:43:26.9473245 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-15 23:43:26.9473284 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-15 23:43:26.9473321 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-15 23:43:26.9473358 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-15 23:43:26.9473394 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-15 23:43:26.9473529 UTC-04:00] [6236:7036] [fcmonitor 16 debug] add session=2 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-15 23:43:26.9473709 UTC-04:00] [6236:7036] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-15 23:43:26.9473746 UTC-04:00] [6236:7036] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-15 23:43:26.9475870 UTC-04:00] [6236:7036] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 184331182080 499455451136 184331182080 [2026-08-15 23:43:26.9475965 UTC-04:00] [6236:7036] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-16 07:01:45.8532655 UTC-04:00] [6236:7036] [fcmonitor 90 debug] session change reason=5 session=2 [2026-08-16 07:01:45.8534928 UTC-04:00] [6236:7036] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-16 07:01:45.8768124 UTC-04:00] [6236:7036] [fcmonitor 228 info] parsed to C:\Users\mcculloc\Desktop\ for session 2 [2026-08-16 07:01:45.8786581 UTC-04:00] [6236:7036] [fcmonitor 228 info] parsed to C:\Users\mcculloc\Documents\ for session 2 [2026-08-16 07:01:45.8804745 UTC-04:00] [6236:7036] [fcmonitor 228 info] parsed to C:\Users\mcculloc\Favorites\ for session 2 [2026-08-16 07:01:45.8825597 UTC-04:00] [6236:7036] [fcmonitor 228 info] parsed to C:\Users\mcculloc\Music\ for session 2 [2026-08-16 07:01:45.8845312 UTC-04:00] [6236:7036] [fcmonitor 228 info] parsed to C:\Users\mcculloc\Pictures\ for session 2 [2026-08-16 07:01:45.9039502 UTC-04:00] [6236:7036] [fcmonitor 228 info] parsed to C:\Users\mcculloc\Videos\ for session 2 [2026-08-16 07:01:45.9039672 UTC-04:00] [6236:7036] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-16 07:01:45.9039731 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\mcculloc\desktop\ [2026-08-16 07:01:45.9039773 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\mcculloc\documents\ [2026-08-16 07:01:45.9039800 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\mcculloc\favorites\ [2026-08-16 07:01:45.9039826 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\mcculloc\music\ [2026-08-16 07:01:45.9039853 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\mcculloc\pictures\ [2026-08-16 07:01:45.9039879 UTC-04:00] [6236:7036] [fcmonitor 435 info] add c:\users\mcculloc\videos\ [2026-08-16 07:01:45.9039991 UTC-04:00] [6236:7036] [fcmonitor 16 debug] add session=2 ret=0 str=C:\Users\mcculloc\Desktop\;C:\Users\mcculloc\Documents\;C:\Users\mcculloc\Favorites\;C:\Users\mcculloc\Music\;C:\Users\mcculloc\Pictures\;C:\Users\mcculloc\Videos\ [2026-08-16 07:01:45.9040140 UTC-04:00] [6236:7036] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-16 07:01:45.9040176 UTC-04:00] [6236:7036] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-16 07:01:45.9059037 UTC-04:00] [6236:7036] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 184380907520 499455451136 184380907520 [2026-08-16 07:01:45.9059174 UTC-04:00] [6236:7036] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-16 07:01:47.0392061 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 10924 \SystemRoot\System32\Conhost.exe [2026-08-16 07:01:47.0392234 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 10924 \SystemRoot\System32\Conhost.exe [2026-08-16 07:01:49.1578505 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 10856 \??\C:\Windows\system32\igfxEM.exe [2026-08-16 07:01:49.1578752 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 10856 C:\Windows\system32\igfxEM.exe [2026-08-16 07:01:49.4849558 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 27656 \??\C:\Windows\system32\userinit.exe [2026-08-16 07:01:49.4849719 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 27656 C:\Windows\system32\userinit.exe [2026-08-16 07:01:49.6968647 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 27840 \??\C:\Windows\system32\igfxHK.exe [2026-08-16 07:01:49.6968760 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 27840 C:\Windows\system32\igfxHK.exe [2026-08-16 07:01:49.7622241 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 6340 \??\C:\Windows\Explorer.EXE [2026-08-16 07:01:49.7622332 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 6340 C:\Windows\Explorer.EXE [2026-08-16 07:01:49.8480158 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 27652 \??\C:\Windows\system32\igfxTray.exe [2026-08-16 07:01:49.8480268 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 27652 C:\Windows\system32\igfxTray.exe [2026-08-16 07:02:19.5759684 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 19896 \??\C:\Windows\System32\wlrmdr.exe [2026-08-16 07:02:19.5759926 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 19896 C:\Windows\System32\wlrmdr.exe [2026-08-16 07:02:26.4524157 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 27936 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-16 07:02:26.4524266 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 27936 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-16 07:02:27.8595244 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 30216 \??\C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-16 07:02:27.8595415 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 30216 C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-16 07:02:28.9068170 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 3616 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:28.9068407 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 3616 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:30.2810786 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 3380 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-16 07:02:30.2810917 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 3380 C:\Windows\SysWOW64\runonce.exe [2026-08-16 07:02:30.6385207 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 30188 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-16 07:02:30.6385309 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 30188 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-16 07:02:31.5820764 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 21356 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-16 07:02:31.5820873 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 21356 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-16 07:02:31.8435108 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 29996 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-16 07:02:31.8435216 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 29996 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-16 07:02:33.1419413 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 10692 \??\C:\Windows\System32\cmd.exe [2026-08-16 07:02:33.1419516 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 10692 C:\Windows\System32\cmd.exe [2026-08-16 07:02:33.2811957 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 9792 \SystemRoot\System32\Conhost.exe [2026-08-16 07:02:33.2812099 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 9792 \SystemRoot\System32\Conhost.exe [2026-08-16 07:02:34.0631369 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 21432 \??\C:\Windows\System32\cmd.exe [2026-08-16 07:02:34.0631466 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 21432 C:\Windows\System32\cmd.exe [2026-08-16 07:02:34.2185132 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 30024 \SystemRoot\System32\Conhost.exe [2026-08-16 07:02:34.2185232 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 30024 \SystemRoot\System32\Conhost.exe [2026-08-16 07:02:34.4058645 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 26936 \??\C:\Windows\System32\cmd.exe [2026-08-16 07:02:34.4058762 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 26936 C:\Windows\System32\cmd.exe [2026-08-16 07:02:34.5787320 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 28324 \SystemRoot\System32\Conhost.exe [2026-08-16 07:02:34.5787420 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 28324 \SystemRoot\System32\Conhost.exe [2026-08-16 07:02:39.1579269 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 23316 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:39.1579556 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 23316 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:43.3324677 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 31152 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-16 07:02:43.3324775 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 31152 C:\IMC\MPS\IMCMobil.exe [2026-08-16 07:02:45.2332598 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 31212 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:45.2332699 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 31212 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:45.2344255 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 31220 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:45.2344344 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 31220 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:45.3747625 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 31228 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:45.3747725 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 31228 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:45.3894944 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 31236 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:45.3895053 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 31236 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:45.4991335 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 31260 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:45.4991442 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 31260 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:45.9914024 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 31384 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-16 07:02:45.9914125 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 31384 C:\IMC\MPS\iIMCMobl.exe [2026-08-16 07:02:47.1415527 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 31604 \??\C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-16 07:02:47.1415641 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 31604 C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-16 07:02:48.4526771 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 31720 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:48.4526996 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 31720 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:48.7329733 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 31000 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:48.7329843 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 31000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:49.4680201 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 31036 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:49.4680319 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 31036 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:49.4831067 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 31112 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:49.4831163 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 31112 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:49.6950600 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 31144 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:02:49.6950709 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 31144 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:03:04.8622611 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 31892 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:03:04.8622890 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 31892 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:03:09.8657415 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 32188 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:03:09.8673079 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 32188 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:03:19.3085085 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 32508 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-16 07:03:19.3085338 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 32508 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-16 07:03:19.3397125 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 32524 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-16 07:03:19.3397225 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 32524 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-16 07:03:25.6836150 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 13164 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-16 07:03:25.6836257 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 13164 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-16 07:03:33.3928078 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 8312 \??\C:\Windows\splwow64.exe [2026-08-16 07:03:33.3928332 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 8312 C:\Windows\splwow64.exe [2026-08-16 07:03:40.8047348 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 30988 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:03:40.8047952 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 30988 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:04:32.3320106 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 30856 \??\C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-16 07:04:32.3320401 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 30856 C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-16 07:04:39.0508797 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 26352 \??\C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-16 07:04:39.0509046 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 26352 C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-16 07:04:39.8229033 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 27944 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:04:39.8229160 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 27944 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:04:55.1368662 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 28992 \??\C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\FileSyncConfig.exe [2026-08-16 07:04:55.1369118 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 28992 C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\FileSyncConfig.exe [2026-08-16 07:04:56.9931967 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 29248 \??\C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-16 07:04:56.9932082 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 29248 C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-16 07:05:04.2490172 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 25880 \??\C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\OneDrive.Sync.Service.exe [2026-08-16 07:05:04.2491713 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 25880 C:\Users\mcculloc\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\OneDrive.Sync.Service.exe [2026-08-16 07:05:41.1768096 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 29888 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:05:41.1768338 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 29888 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:07:51.6701777 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 9044 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 07:07:51.6702914 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 9044 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 08:23:48.7062003 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 33352 \SystemRoot\System32\Conhost.exe [2026-08-16 08:23:48.7062569 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 33352 \SystemRoot\System32\Conhost.exe [2026-08-16 09:51:21.5472123 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 37696 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 09:51:21.5472506 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 37696 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 09:51:24.7774603 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 39336 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 09:51:24.7774724 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 39336 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 09:51:25.0920683 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 39428 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 09:51:25.0920825 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 39428 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 09:51:49.1195554 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 35516 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 09:51:49.1196852 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 35516 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 10:01:33.6484008 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 39224 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 10:01:33.6484461 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 39224 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 10:01:49.7045602 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 34356 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 10:01:49.7045836 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 34356 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 10:23:48.7143088 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 40748 \SystemRoot\System32\Conhost.exe [2026-08-16 10:23:48.7143486 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 40748 \SystemRoot\System32\Conhost.exe [2026-08-16 11:02:55.0291977 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 44796 \SystemRoot\System32\Conhost.exe [2026-08-16 11:02:55.0292344 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 44796 \SystemRoot\System32\Conhost.exe [2026-08-16 11:02:55.0713809 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 43164 \SystemRoot\System32\Conhost.exe [2026-08-16 11:02:55.0714526 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 43164 \SystemRoot\System32\Conhost.exe [2026-08-16 11:04:58.2774535 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 43840 \??\C:\Windows\winhlp32.exe [2026-08-16 11:04:58.2774787 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 43840 C:\Windows\winhlp32.exe [2026-08-16 11:04:59.3867983 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 12556 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:04:59.3868223 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 12556 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:04:59.4609491 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 41420 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:04:59.4609624 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 41420 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:05:00.3586145 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 43768 \??\C:\Windows\SysWOW64\hh.exe [2026-08-16 11:05:00.3586489 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 43768 C:\Windows\SysWOW64\hh.exe [2026-08-16 11:05:02.6203003 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 44940 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:05:02.6203161 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 44940 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:05:04.4807709 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 44004 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:05:04.4807816 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 44004 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:05:05.2095984 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 43148 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:05:05.2097341 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 43148 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:15:52.8746503 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 42504 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:15:52.8746935 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 42504 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:15:59.3729780 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 43152 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:15:59.3730079 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 43152 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:15:59.6528217 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 38708 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:15:59.6528384 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 38708 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:09.0900242 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 41148 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:09.0900623 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 41148 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:41.0496177 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 39232 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:41.0496588 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 39232 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:44.0495317 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 43672 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:44.0495447 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 43672 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:45.3114155 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 44820 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:45.3114281 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 44820 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:47.3187001 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 38824 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:47.3187102 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 38824 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:47.6010342 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 12556 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:47.6010456 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 12556 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:47.9078762 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45100 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:47.9078873 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45100 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:47.9439434 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45132 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:47.9439545 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45132 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:48.9865719 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45320 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:48.9866172 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45320 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:49.1644971 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45368 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:49.1645077 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45368 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:49.8132291 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45476 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:49.8132409 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45476 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:49.8183216 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45484 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:49.8183329 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45484 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:50.1063325 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45632 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:50.1063432 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45632 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:50.1078554 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45688 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:50.1078661 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45688 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:50.1647309 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45716 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:50.1647421 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45716 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:50.1921868 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45708 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:50.1921964 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45708 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:50.1933818 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45724 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:50.1933902 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45724 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:50.1944011 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45732 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:50.1944088 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45732 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:50.1954233 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45740 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:50.1954307 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45740 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:50.1964345 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45748 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:50.1964417 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45748 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:50.2517906 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45768 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:50.2518017 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45768 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:50.2533416 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45776 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:50.2533509 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45776 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:51.0142504 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 46280 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:51.0142608 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 46280 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:53.3628746 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 46528 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:53.3628864 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 46528 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:53.5395507 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 46568 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:53.5395621 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 46568 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:53.9053929 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 46644 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:53.9054048 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 46644 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:54.5322456 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 46752 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:54.5322578 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 46752 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:54.8763095 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 46832 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:54.8763197 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 46832 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:55.7062884 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 46936 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:55.7063004 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 46936 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:55.7077194 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 46944 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:55.7077290 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 46944 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:58.4834147 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 46876 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:16:58.4834429 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 46876 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:17:45.5291710 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 42256 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:17:45.5291964 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 42256 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:17:46.0365569 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 44124 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:17:46.0365663 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 44124 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:19:31.8198740 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 43264 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:19:31.8199009 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 43264 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:19:32.2229877 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 47092 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:19:32.2230007 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 47092 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:19:50.3225582 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45148 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:19:50.3225889 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45148 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:20:37.3019610 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45408 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:20:37.3019868 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45408 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:20:52.6510658 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 46540 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:20:52.6510920 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 46540 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:20:55.2544237 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45228 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:20:55.2544345 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45228 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:20:55.8513500 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45620 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:20:55.8513614 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45620 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:20:57.1480537 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 44216 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:20:57.1480644 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 44216 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:20:57.4811801 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 46616 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:20:57.4811914 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 46616 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:20:58.6218340 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 44096 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:20:58.6218590 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 44096 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:20:59.1102527 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 40756 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:20:59.1102635 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 40756 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:20:59.6549886 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 46824 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:20:59.6550012 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 46824 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:01.3912953 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45592 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:01.3913066 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45592 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:01.7927268 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 42500 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:01.7927391 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 42500 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:01.7939287 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 32096 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:01.7939398 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 32096 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.5562287 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 44720 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.5562405 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 44720 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.5579421 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 46980 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.5579517 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 46980 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.5596643 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 32428 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.5596737 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 32428 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.6108352 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 32408 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.6108496 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 32408 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.6146269 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 42420 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.6146371 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 42420 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.6190960 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 40972 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.6191052 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 40972 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.6203816 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45920 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.6203908 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45920 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.6341213 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45200 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.6341327 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45200 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.7371702 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45936 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.7371809 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45936 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.7393341 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 46108 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.7393451 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 46108 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.7408304 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 44604 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.7408399 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 44604 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.8422671 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45968 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.8422792 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45968 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.8447718 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45964 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.8447830 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45964 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.9409628 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 44212 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.9409749 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 44212 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.9433775 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 45752 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:02.9433937 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 45752 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:05.0227290 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 44728 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:05.0227403 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 44728 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:05.5831213 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 21456 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:05.5831346 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 21456 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:06.7909829 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 47192 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:06.7909947 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 47192 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:06.7967639 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 47200 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:06.7967815 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 47200 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:07.1520430 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 47324 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:07.1520550 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 47324 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:07.8715439 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 47436 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:07.8715579 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 47436 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:07.8736686 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 47444 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:07.8736798 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 47444 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:08.6133592 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 47612 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:08.6133848 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 47612 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:08.6933285 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 47636 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:08.6933392 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 47636 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:08.6946940 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 47644 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:08.6947041 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 47644 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:08.6964075 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 47664 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:08.6964205 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 47664 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:11.2427306 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 48020 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:11.2427430 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 48020 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:11.2444446 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 48032 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:11.2444543 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 48032 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:11.2559361 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 48028 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:11.2559496 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 48028 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:11.2883611 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 48060 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:11.2883717 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 48060 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:11.3005001 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 48072 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:11.3005107 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 48072 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:11.9821263 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 48268 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:11.9821391 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 48268 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:12.0139282 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 48308 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:12.0139422 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 48308 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:12.6153768 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 48404 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:12.6153978 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 48404 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:13.5518862 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 48520 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:13.5524122 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 48520 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:13.6340254 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 48556 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:13.6340585 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 48556 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:16.6898858 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 48868 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:16.6898981 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 48868 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:16.6919008 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 48892 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:16.6919154 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 48892 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:16.6931076 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 48900 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:16.6931181 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 48900 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:16.7154218 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 48924 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:16.7154328 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 48924 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:16.7170475 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 48932 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:16.7170566 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 48932 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:16.8128988 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 49008 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:16.8129101 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 49008 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:16.9430953 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 49020 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:16.9431076 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 49020 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:16.9461220 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 49084 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:16.9461314 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 49084 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:16.9482527 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 49092 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:16.9482640 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 49092 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:16.9710057 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 49116 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:16.9710179 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 49116 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:17.0171371 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 49136 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:17.0171540 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 49136 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:19.1212676 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 47816 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:19.1212968 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 47816 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:21.7699668 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 47724 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:21.7700048 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 47724 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:47.4713449 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 48840 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 11:21:47.4738293 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 48840 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 12:23:48.7219397 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 50784 \SystemRoot\System32\Conhost.exe [2026-08-16 12:23:48.7221180 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 50784 \SystemRoot\System32\Conhost.exe [2026-08-16 12:46:58.5641034 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 53608 \??\C:\IMC\RMS\RECORDS.EXE [2026-08-16 12:46:58.5641246 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 53608 C:\IMC\RMS\RECORDS.EXE [2026-08-16 12:51:13.0775500 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 53312 \??\C:\IMC\MPS\PL.EXE [2026-08-16 12:51:13.0775762 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 53312 C:\IMC\MPS\PL.EXE [2026-08-16 14:23:48.7276821 UTC-04:00] [6236:6288] [fcmonitor 332 debug] proc cache add 60024 \SystemRoot\System32\Conhost.exe [2026-08-16 14:23:48.7277233 UTC-04:00] [6236:6288] [fcmonitor 99 info] add pid 60024 \SystemRoot\System32\Conhost.exe [2026-08-16 22:45:01.1581007 UTC-04:00] [3460:4396] [fcmonitor 1249 info] (Time Zone: Eastern Standard Time) (Sun Jun 30 22:28:59 2024, 71s) 2026-08-16 22:45:01.152 type: 0x10f size: 512 memory: 0x0000000000000000 [2026-08-16 22:45:01.1592987 UTC-04:00] [3460:4396] [fcmonitor 78 debug] ems_serial FCTEMS8821002497 [2026-08-16 22:45:01.1616628 UTC-04:00] [3460:4396] [fcmonitor 85 debug] fct_serial FCT8000515779876 [2026-08-16 22:45:01.1618119 UTC-04:00] [3460:4396] [fcmonitor 94 debug] fct_uid 4EF5549DB1674A63BE848553987D4AEE [2026-08-16 22:45:01.1618547 UTC-04:00] [3460:4396] [fcmonitor 103 debug] vdom default [2026-08-16 22:45:01.1618709 UTC-04:00] [3460:4396] [fcmonitor 843 info] InitCryptAlg [2026-08-16 22:45:01.1625996 UTC-04:00] [3460:4396] [fcmonitor 41 info] before LoadSettings [2026-08-16 22:45:01.1627445 UTC-04:00] [3460:4396] [fcmonitor 45 info] folder C:\Users\%USERNAME%\Desktop\ [2026-08-16 22:45:01.1627681 UTC-04:00] [3460:4396] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-16 22:45:01.1784049 UTC-04:00] [3460:4396] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-16 22:45:01.1784977 UTC-04:00] [3460:4396] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 0 [2026-08-16 22:45:01.1785671 UTC-04:00] [3460:4396] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 0 [2026-08-16 22:45:01.1786308 UTC-04:00] [3460:4396] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 0 [2026-08-16 22:45:01.1786959 UTC-04:00] [3460:4396] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 0 [2026-08-16 22:45:01.1787945 UTC-04:00] [3460:4396] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 0 [2026-08-16 22:45:01.1788059 UTC-04:00] [3460:4396] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 done [2026-08-16 22:45:01.1788128 UTC-04:00] [3460:4396] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-16 22:45:01.1788247 UTC-04:00] [3460:4396] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-16 22:45:01.1788348 UTC-04:00] [3460:4396] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-16 22:45:01.1788443 UTC-04:00] [3460:4396] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-16 22:45:01.1788538 UTC-04:00] [3460:4396] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-16 22:45:01.1788636 UTC-04:00] [3460:4396] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-16 22:45:01.1788950 UTC-04:00] [3460:4396] [fcmonitor 16 debug] add session=0 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-16 22:45:01.2204420 UTC-04:00] [3460:4396] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-16 22:45:01.3593424 UTC-04:00] [3460:4396] [fcmonitor 228 info] parsed to C:\Users\cloughec\Desktop\ for session 1 [2026-08-16 22:45:01.3613339 UTC-04:00] [3460:4396] [fcmonitor 228 info] parsed to C:\Users\cloughec\Documents\ for session 1 [2026-08-16 22:45:01.3633852 UTC-04:00] [3460:4396] [fcmonitor 228 info] parsed to C:\Users\cloughec\Favorites\ for session 1 [2026-08-16 22:45:01.3652841 UTC-04:00] [3460:4396] [fcmonitor 228 info] parsed to C:\Users\cloughec\Music\ for session 1 [2026-08-16 22:45:01.3670741 UTC-04:00] [3460:4396] [fcmonitor 228 info] parsed to C:\Users\cloughec\Pictures\ for session 1 [2026-08-16 22:45:01.3691134 UTC-04:00] [3460:4396] [fcmonitor 228 info] parsed to C:\Users\cloughec\Videos\ for session 1 [2026-08-16 22:45:01.3691273 UTC-04:00] [3460:4396] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 done [2026-08-16 22:45:01.3691327 UTC-04:00] [3460:4396] [fcmonitor 435 info] add c:\users\cloughec\desktop\ [2026-08-16 22:45:01.3691407 UTC-04:00] [3460:4396] [fcmonitor 435 info] add c:\users\cloughec\documents\ [2026-08-16 22:45:01.3691438 UTC-04:00] [3460:4396] [fcmonitor 435 info] add c:\users\cloughec\favorites\ [2026-08-16 22:45:01.3691464 UTC-04:00] [3460:4396] [fcmonitor 435 info] add c:\users\cloughec\music\ [2026-08-16 22:45:01.3691490 UTC-04:00] [3460:4396] [fcmonitor 435 info] add c:\users\cloughec\pictures\ [2026-08-16 22:45:01.3691517 UTC-04:00] [3460:4396] [fcmonitor 435 info] add c:\users\cloughec\videos\ [2026-08-16 22:45:01.3691638 UTC-04:00] [3460:4396] [fcmonitor 16 debug] add session=1 ret=1 str=C:\Users\cloughec\Desktop\;C:\Users\cloughec\Documents\;C:\Users\cloughec\Favorites\;C:\Users\cloughec\Music\;C:\Users\cloughec\Pictures\;C:\Users\cloughec\Videos\ [2026-08-16 22:45:01.3691666 UTC-04:00] [3460:4396] [fcmonitor 52 debug] reload monitor folder for session 0 [2026-08-16 22:45:01.3691784 UTC-04:00] [3460:4396] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-16 22:45:01.3691813 UTC-04:00] [3460:4396] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-16 22:45:01.4028062 UTC-04:00] [3460:4396] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 183357739008 499455451136 183357739008 [2026-08-16 22:45:01.4028187 UTC-04:00] [3460:4396] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-16 22:45:01.6235392 UTC-04:00] [3460:4396] [fcmonitor 232 info] queue lock 0x3bc cleanevent 0x3c0 [2026-08-16 22:45:01.6236503 UTC-04:00] [3460:4396] [fcmonitor 245 info] init succeed [2026-08-16 22:45:01.6236536 UTC-04:00] [3460:4396] [fcmonitor 438 info] reading cache [2026-08-16 22:45:01.6591196 UTC-04:00] [3460:4396] [fcmonitor 440 info] getting all proc [2026-08-16 22:45:01.7044087 UTC-04:00] [3460:4396] [fcmonitor 159 debug] getting all proc [2026-08-16 22:45:01.7078870 UTC-04:00] [3460:4396] [fcmonitor 192 warning] GetAllProcTree can't find module 4 System [2026-08-16 22:45:01.8377093 UTC-04:00] [3460:4396] [fcmonitor 192 warning] GetAllProcTree can't find module 100 Registry [2026-08-16 22:45:02.2809575 UTC-04:00] [3460:4396] [fcmonitor 192 warning] GetAllProcTree can't find module 2452 Memory Compression [2026-08-16 22:45:04.2074101 UTC-04:00] [3460:4396] [fcmonitor 192 warning] GetAllProcTree can't find module 8776 mofcomp.exe [2026-08-16 22:45:04.2133867 UTC-04:00] [3460:4396] [fcmonitor 192 warning] GetAllProcTree can't find module 8808 conhost.exe [2026-08-16 22:45:05.2243469 UTC-04:00] [3460:4396] [fcmonitor 192 warning] GetAllProcTree can't find module 9236 net.exe [2026-08-16 22:45:05.2262071 UTC-04:00] [3460:4396] [fcmonitor 192 warning] GetAllProcTree can't find module 9492 net1.exe [2026-08-16 22:45:05.2275671 UTC-04:00] [3460:4396] [fcmonitor 192 warning] GetAllProcTree can't find module 9524 conhost.exe [2026-08-16 22:45:05.2702061 UTC-04:00] [3460:4396] [fcmonitor 286 debug] getting all proc finished 153 0 [2026-08-16 22:45:05.2702136 UTC-04:00] [3460:4396] [fcmonitor 442 info] finish [2026-08-16 22:45:05.2703251 UTC-04:00] [3460:4396] [fcmonitor 267 info] heap p 0x000001D28E0E7320 [2026-08-16 22:45:05.2703664 UTC-04:00] [3460:4396] [fcmonitor 267 info] heap p 0x000001D28E0C1920 [2026-08-16 22:45:05.2704063 UTC-04:00] [3460:4396] [fcmonitor 267 info] heap p 0x000001D28E0CE9D0 [2026-08-16 22:45:05.2704419 UTC-04:00] [3460:4396] [fcmonitor 267 info] heap p 0x000001D28F172630 [2026-08-16 22:45:05.2704781 UTC-04:00] [3460:4396] [fcmonitor 267 info] heap p 0x000001D28F173970 [2026-08-16 22:45:05.2705101 UTC-04:00] [3460:4396] [fcmonitor 267 info] heap p 0x000001D28F172FD0 [2026-08-16 22:45:05.2705433 UTC-04:00] [3460:4396] [fcmonitor 267 info] heap p 0x000001D28F172B00 [2026-08-16 22:45:05.2705747 UTC-04:00] [3460:4396] [fcmonitor 267 info] heap p 0x000001D28F1734A0 [2026-08-16 22:45:05.3149093 UTC-04:00] [3460:9928] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-16 22:45:05.3150891 UTC-04:00] [3460:9932] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-16 22:45:05.3151277 UTC-04:00] [3460:9936] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-16 22:45:05.3152243 UTC-04:00] [3460:9940] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-16 22:45:05.3153215 UTC-04:00] [3460:9944] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-16 22:45:05.3153913 UTC-04:00] [3460:9948] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-16 22:45:05.3154148 UTC-04:00] [3460:9952] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-16 22:45:05.3155825 UTC-04:00] [3460:9956] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-16 22:45:05.8583451 UTC-04:00] [3460:9924] [fcmonitor 475 warning] session 1 not init [2026-08-16 22:45:05.8644099 UTC-04:00] [3460:9924] [fcmonitor 228 info] parsed to C:\Users\cloughec\Desktop\ for session 1 [2026-08-16 22:45:05.8662170 UTC-04:00] [3460:9924] [fcmonitor 228 info] parsed to C:\Users\cloughec\Documents\ for session 1 [2026-08-16 22:45:05.8680398 UTC-04:00] [3460:9924] [fcmonitor 228 info] parsed to C:\Users\cloughec\Favorites\ for session 1 [2026-08-16 22:45:05.8698680 UTC-04:00] [3460:9924] [fcmonitor 228 info] parsed to C:\Users\cloughec\Music\ for session 1 [2026-08-16 22:45:05.8716421 UTC-04:00] [3460:9924] [fcmonitor 228 info] parsed to C:\Users\cloughec\Pictures\ for session 1 [2026-08-16 22:45:05.8734191 UTC-04:00] [3460:9924] [fcmonitor 228 info] parsed to C:\Users\cloughec\Videos\ for session 1 [2026-08-16 22:45:05.8734352 UTC-04:00] [3460:9924] [fcmonitor 435 info] add c:\users\cloughec\desktop\ [2026-08-16 22:45:05.8734398 UTC-04:00] [3460:9924] [fcmonitor 435 info] add c:\users\cloughec\documents\ [2026-08-16 22:45:05.8734428 UTC-04:00] [3460:9924] [fcmonitor 435 info] add c:\users\cloughec\favorites\ [2026-08-16 22:45:05.8734453 UTC-04:00] [3460:9924] [fcmonitor 435 info] add c:\users\cloughec\music\ [2026-08-16 22:45:05.8734478 UTC-04:00] [3460:9924] [fcmonitor 435 info] add c:\users\cloughec\pictures\ [2026-08-16 22:45:05.8734505 UTC-04:00] [3460:9924] [fcmonitor 435 info] add c:\users\cloughec\videos\ [2026-08-16 22:45:28.8668016 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 4916 \??\C:\Windows\system32\wlrmdr.exe [2026-08-16 22:45:28.8668339 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 4916 C:\Windows\system32\wlrmdr.exe [2026-08-16 22:45:50.7469951 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 7212 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-16 22:45:50.7470186 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 7212 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-16 22:45:51.9967012 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 3176 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-16 22:45:51.9967180 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 3176 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-16 22:45:56.6525821 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 11744 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.257.13\MicrosoftEdgeUpdateCore.exe [2026-08-16 22:45:56.6525928 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 11744 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\1.3.257.13\MicrosoftEdgeUpdateCore.exe [2026-08-16 22:45:57.3823526 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 11888 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:45:57.3823623 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 11888 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:45:58.0587744 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 11984 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-16 22:45:58.0587862 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 11984 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-16 22:45:58.2007243 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 12004 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-16 22:45:58.2007343 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 12004 C:\Windows\SysWOW64\runonce.exe [2026-08-16 22:45:58.7351434 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 12120 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-16 22:45:58.7351562 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 12120 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-16 22:45:59.4335837 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 12276 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-16 22:45:59.4336065 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 12276 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-16 22:46:01.4023670 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 7724 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-16 22:46:01.4023796 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 7724 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-16 22:46:04.1369957 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 11816 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:46:04.1370065 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 11816 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:46:08.7823669 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 12108 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:46:08.7823779 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 12108 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:46:08.7842966 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 12008 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:46:08.7843123 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 12008 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:46:08.7972386 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 10280 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:46:08.7972492 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 10280 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:46:08.7996088 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 7880 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:46:08.7996192 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 7880 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:46:08.8338249 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 12188 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:46:08.8338357 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 12188 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:46:10.6328647 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 12348 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-16 22:46:10.6328881 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 12348 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-16 22:46:10.7783924 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 12376 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-16 22:46:10.7784012 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 12376 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-16 22:46:18.0784434 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 12876 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-16 22:46:18.0784590 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 12876 C:\IMC\MPS\IMCMobil.exe [2026-08-16 22:46:19.1562165 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 12960 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-16 22:46:19.1562278 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 12960 C:\IMC\MPS\iIMCMobl.exe [2026-08-16 22:46:34.7066389 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 12460 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:46:34.7066614 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 12460 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:46:37.3072732 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 8136 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-16 22:46:37.3072878 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 8136 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-16 22:47:01.9570066 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 5900 \??\C:\Windows\splwow64.exe [2026-08-16 22:47:01.9570319 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 5900 C:\Windows\splwow64.exe [2026-08-16 22:47:08.3156126 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 7764 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:47:08.3156277 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 7764 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:47:16.5762601 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 7760 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-16 22:47:16.5762886 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 7760 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-16 22:47:21.1148251 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 4812 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\OneDrive.Sync.Service.exe [2026-08-16 22:47:21.1148536 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 4812 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\OneDrive.Sync.Service.exe [2026-08-16 22:48:06.5415771 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 8904 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:48:06.5416088 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 8904 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:48:38.0486628 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 12604 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-16 22:48:38.0486915 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 12604 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-16 22:49:07.9513007 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 12800 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:49:07.9513280 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 12800 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 22:53:33.9732632 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 12744 \SystemRoot\System32\Conhost.exe [2026-08-16 22:53:33.9732952 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 12744 \SystemRoot\System32\Conhost.exe [2026-08-16 23:04:20.3374723 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 2528 \??\C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\OneDrive.Sync.Service.exe [2026-08-16 23:04:20.3375090 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 2528 C:\Users\cloughec\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\OneDrive.Sync.Service.exe [2026-08-16 23:10:36.5073742 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 8888 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:10:36.5073991 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 8888 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:10:36.5522082 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 6056 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:10:36.5522175 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 6056 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:10:36.8334917 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 3180 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:10:36.8335028 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 3180 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:10:36.8368821 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 9632 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:10:36.8368911 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 9632 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:10:36.9717808 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 3288 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:10:36.9717906 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 3288 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:10:40.2246951 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 120 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:10:40.2247071 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 120 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:10:43.1723835 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 5920 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:10:43.1724056 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 5920 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:10:57.9747708 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 9212 \??\C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-16 23:10:57.9747968 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 9212 C:\GIS\Applications\ArcReaderPoliceLaptop.exe [2026-08-16 23:11:21.8170299 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 8684 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:11:21.8170508 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 8684 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:12:10.8847760 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 6584 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:12:10.8849669 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 6584 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:12:13.9017778 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 1672 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:12:13.9018053 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 1672 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:12:15.6162600 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 7000 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:12:15.6162716 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 7000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:12:15.9359106 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 6928 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:12:15.9359219 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 6928 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:12:20.5853104 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 6864 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:12:20.5853245 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 6864 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:12:21.1488914 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 1044 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:12:21.1489451 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 1044 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:15:37.9204177 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 9828 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:15:37.9204589 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 9828 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:21:59.2743811 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 12260 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\Install\{AE76CE80-5375-43EB-BD24-DC1FA13A7A08}\MicrosoftEdge_X64_151.0.41 [2026-08-16 23:21:59.2744339 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 12260 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\Install\{AE76CE80-5375-43EB-BD24-DC1FA13A7A08}\MicrosoftEdge_X64_151.0.41 [2026-08-16 23:21:59.6810527 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 7816 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\Install\{AE76CE80-5375-43EB-BD24-DC1FA13A7A08}\EDGEMITMP_09085.tmp\setup. [2026-08-16 23:21:59.6810643 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 7816 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\Install\{AE76CE80-5375-43EB-BD24-DC1FA13A7A08}\EDGEMITMP_09085.tmp\setup. [2026-08-16 23:23:24.8530111 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 12652 \??\C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-16 23:23:24.8531257 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 12652 C:\Users\cloughec\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2026-08-16 23:42:26.9971364 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 14324 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-16 23:42:26.9971960 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 14324 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-16 23:42:27.3251061 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 11084 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-16 23:42:27.3251170 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 11084 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-16 23:42:27.4704126 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 14348 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-16 23:42:27.4704232 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 14348 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-16 23:42:27.4717301 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 14352 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-16 23:42:27.4717392 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 14352 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-16 23:42:27.9613942 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 14580 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-16 23:42:27.9614057 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 14580 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-16 23:42:28.1953749 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 14668 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:42:28.1953858 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 14668 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:42:28.3024799 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 14696 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-16 23:42:28.3024925 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 14696 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-16 23:42:33.7603566 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 15292 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:42:33.7603833 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 15292 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:42:33.7934650 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 15320 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:42:33.7934763 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 15320 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-16 23:51:30.8803689 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 14768 \??\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-16 23:51:30.8804124 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 14768 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.86\msedgewebview2.exe [2026-08-16 23:55:24.3664846 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 16260 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-16 23:55:24.3665212 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 16260 C:\IMC\RMS\TRAFFIC.EXE [2026-08-17 00:00:10.2449199 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 6056 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-17 00:00:10.2449529 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 6056 C:\IMC\RMS\TRAFFIC.EXE [2026-08-17 00:09:41.3930961 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 13548 \??\C:\IMC\RMS\TRAFFIC.EXE [2026-08-17 00:09:41.3931271 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 13548 C:\IMC\RMS\TRAFFIC.EXE [2026-08-17 00:46:27.6934290 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 17012 \SystemRoot\System32\Conhost.exe [2026-08-17 00:46:27.6934725 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 17012 \SystemRoot\System32\Conhost.exe [2026-08-17 01:11:01.9294383 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 20048 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 01:11:01.9294778 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 20048 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 01:11:15.0540497 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 20836 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 01:11:15.0540754 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 20836 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 01:11:15.1033413 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 20864 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 01:11:15.1033525 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 20864 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 02:02:58.5270362 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 23692 \??\C:\IMC\RMS\RECORDS.EXE [2026-08-17 02:02:58.5270689 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 23692 C:\IMC\RMS\RECORDS.EXE [2026-08-17 02:03:15.4152787 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 24064 \??\C:\IMC\MPS\PL.EXE [2026-08-17 02:03:15.4153036 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 24064 C:\IMC\MPS\PL.EXE [2026-08-17 02:26:21.9645395 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 24724 \??\C:\IMC\RMS\RECORDS.EXE [2026-08-17 02:26:21.9645761 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 24724 C:\IMC\RMS\RECORDS.EXE [2026-08-17 02:27:13.7835352 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 23164 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-17 02:27:13.7835746 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 23164 C:\IMC\MPS\IMCMobil.exe [2026-08-17 02:27:14.3806400 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 25184 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-17 02:27:14.3806494 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 25184 C:\IMC\MPS\iIMCMobl.exe [2026-08-17 02:27:21.4723917 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 21872 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-17 02:27:21.4724105 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 21872 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-17 02:27:33.6260828 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 23968 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-17 02:27:33.6261100 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 23968 C:\IMC\MPS\IMCMobil.exe [2026-08-17 02:27:34.1554970 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 23132 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-17 02:27:34.1555076 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 23132 C:\IMC\MPS\iIMCMobl.exe [2026-08-17 02:27:41.8044814 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 24308 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-17 02:27:41.8045131 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 24308 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-17 02:46:27.7134464 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 23304 \SystemRoot\System32\Conhost.exe [2026-08-17 02:46:27.7134836 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 23304 \SystemRoot\System32\Conhost.exe [2026-08-17 04:20:17.8551555 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 31812 \??\C:\IMC\RMS\RECORDS.EXE [2026-08-17 04:20:17.8552046 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 31812 C:\IMC\RMS\RECORDS.EXE [2026-08-17 04:46:27.7226551 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 34588 \SystemRoot\System32\Conhost.exe [2026-08-17 04:46:27.7226953 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 34588 \SystemRoot\System32\Conhost.exe [2026-08-17 06:46:27.7236703 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 39580 \SystemRoot\System32\Conhost.exe [2026-08-17 06:46:27.7236936 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 39580 \SystemRoot\System32\Conhost.exe [2026-08-17 07:12:17.3002381 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 42800 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 07:12:17.3002718 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 42800 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 07:12:17.4249848 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 41560 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 07:12:17.4249977 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 41560 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 07:12:17.6288636 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 43708 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 07:12:17.6288744 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 43708 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 07:12:17.6724175 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 42332 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 07:12:17.6724298 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 42332 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 07:12:17.7692500 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 3600 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 07:12:17.7692605 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 3600 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 07:12:17.9787258 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 8340 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 07:12:17.9787348 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 8340 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 07:12:19.3171068 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 12576 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-17 07:12:19.3171193 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 12576 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-17 07:12:19.3621282 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 10984 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-17 07:12:19.3621404 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 10984 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-17 07:12:34.2144149 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 2684 \??\C:\Windows\SysWOW64\WerFault.exe [2026-08-17 07:12:34.2144422 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 2684 C:\Windows\SysWOW64\WerFault.exe [2026-08-17 07:12:43.9293879 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 43692 \??\C:\Windows\system32\LogonUI.exe [2026-08-17 07:12:43.9294111 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 43692 C:\Windows\system32\LogonUI.exe [2026-08-17 07:12:53.2406928 UTC-04:00] [3460:9604] [fcmonitor 90 debug] session change reason=6 session=1 [2026-08-17 07:12:53.2407341 UTC-04:00] [3460:9604] [fcmonitor 117 debug] add reason=6 session=1 ret=1 [2026-08-17 07:12:53.5858050 UTC-04:00] [3460:9604] [fcmonitor 90 debug] session change reason=2 session=1 [2026-08-17 07:12:53.5858130 UTC-04:00] [3460:9604] [fcmonitor 117 debug] add reason=2 session=1 ret=1 [2026-08-17 07:12:53.6924186 UTC-04:00] [3460:9924] [fcmonitor 475 warning] session 2 not init [2026-08-17 07:12:53.7040732 UTC-04:00] [3460:9924] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-17 07:12:53.7041519 UTC-04:00] [3460:9924] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-17 07:12:53.7042189 UTC-04:00] [3460:9924] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-17 07:12:53.7042843 UTC-04:00] [3460:9924] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-17 07:12:53.7043481 UTC-04:00] [3460:9924] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-17 07:12:53.7044110 UTC-04:00] [3460:9924] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-17 07:12:53.7044235 UTC-04:00] [3460:9924] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-17 07:12:53.7044280 UTC-04:00] [3460:9924] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-17 07:12:53.7044309 UTC-04:00] [3460:9924] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-17 07:12:53.7044338 UTC-04:00] [3460:9924] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-17 07:12:53.7044364 UTC-04:00] [3460:9924] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-17 07:12:53.7044390 UTC-04:00] [3460:9924] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-17 07:12:54.9416795 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 32528 \??\C:\Windows\system32\LogonUI.exe [2026-08-17 07:12:54.9416902 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 32528 C:\Windows\system32\LogonUI.exe [2026-08-17 07:12:54.9426906 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 2528 \??\C:\Windows\system32\dwm.exe [2026-08-17 07:12:54.9426973 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 2528 C:\Windows\system32\dwm.exe [2026-08-17 07:12:55.0588975 UTC-04:00] [3460:9604] [fcmonitor 90 debug] session change reason=1 session=2 [2026-08-17 07:12:55.0590335 UTC-04:00] [3460:9604] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-17 07:12:55.0712549 UTC-04:00] [3460:9604] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 2 [2026-08-17 07:12:55.0713449 UTC-04:00] [3460:9604] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 2 [2026-08-17 07:12:55.0714197 UTC-04:00] [3460:9604] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 2 [2026-08-17 07:12:55.0714923 UTC-04:00] [3460:9604] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 2 [2026-08-17 07:12:55.0715683 UTC-04:00] [3460:9604] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 2 [2026-08-17 07:12:55.0716424 UTC-04:00] [3460:9604] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 2 [2026-08-17 07:12:55.0716523 UTC-04:00] [3460:9604] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 2 done [2026-08-17 07:12:55.0716588 UTC-04:00] [3460:9604] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-17 07:12:55.0716630 UTC-04:00] [3460:9604] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-17 07:12:55.0716665 UTC-04:00] [3460:9604] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-17 07:12:55.0716697 UTC-04:00] [3460:9604] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-17 07:12:55.0716735 UTC-04:00] [3460:9604] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-17 07:12:55.0716807 UTC-04:00] [3460:9604] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-17 07:12:55.0716970 UTC-04:00] [3460:9604] [fcmonitor 16 debug] add session=2 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-17 07:12:55.0717137 UTC-04:00] [3460:9604] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-17 07:12:55.0717175 UTC-04:00] [3460:9604] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-17 07:12:55.0719067 UTC-04:00] [3460:9604] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 181765611520 499455451136 181765611520 [2026-08-17 07:12:55.0719138 UTC-04:00] [3460:9604] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-17 07:12:55.3635016 UTC-04:00] [3460:9924] [fcmonitor 332 debug] proc cache add 12464 \??\C:\Windows\system32\fontdrvhost.exe [2026-08-17 07:12:55.3635116 UTC-04:00] [3460:9924] [fcmonitor 99 info] add pid 12464 C:\Windows\system32\fontdrvhost.exe [2026-08-17 08:25:17.3495123 UTC-04:00] [616:628] [fcmonitor 1249 info] (Time Zone: Eastern Standard Time) (Sun Jun 30 22:28:59 2024, 49s) 2026-08-17 08:25:17.345 type: 0x10f size: 512 memory: 0x0000000000000000 [2026-08-17 08:25:17.3504410 UTC-04:00] [616:628] [fcmonitor 78 debug] ems_serial FCTEMS8821002497 [2026-08-17 08:25:17.3518987 UTC-04:00] [616:628] [fcmonitor 85 debug] fct_serial FCT8000515779876 [2026-08-17 08:25:17.3520704 UTC-04:00] [616:628] [fcmonitor 94 debug] fct_uid 4EF5549DB1674A63BE848553987D4AEE [2026-08-17 08:25:17.3521078 UTC-04:00] [616:628] [fcmonitor 103 debug] vdom default [2026-08-17 08:25:17.3521198 UTC-04:00] [616:628] [fcmonitor 843 info] InitCryptAlg [2026-08-17 08:25:17.3528423 UTC-04:00] [616:628] [fcmonitor 41 info] before LoadSettings [2026-08-17 08:25:17.3529883 UTC-04:00] [616:628] [fcmonitor 45 info] folder C:\Users\%USERNAME%\Desktop\ [2026-08-17 08:25:17.3529960 UTC-04:00] [616:628] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-17 08:25:17.3608613 UTC-04:00] [616:628] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 0 [2026-08-17 08:25:17.3609251 UTC-04:00] [616:628] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 0 [2026-08-17 08:25:17.3609812 UTC-04:00] [616:628] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 0 [2026-08-17 08:25:17.3610471 UTC-04:00] [616:628] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 0 [2026-08-17 08:25:17.3611037 UTC-04:00] [616:628] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 0 [2026-08-17 08:25:17.3611581 UTC-04:00] [616:628] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 0 [2026-08-17 08:25:17.3611676 UTC-04:00] [616:628] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 0 done [2026-08-17 08:25:17.3611738 UTC-04:00] [616:628] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-17 08:25:17.3611777 UTC-04:00] [616:628] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-17 08:25:17.3611872 UTC-04:00] [616:628] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-17 08:25:17.3611901 UTC-04:00] [616:628] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-17 08:25:17.3611931 UTC-04:00] [616:628] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-17 08:25:17.3611959 UTC-04:00] [616:628] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-17 08:25:17.3612132 UTC-04:00] [616:628] [fcmonitor 16 debug] add session=0 ret=1 str=C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-17 08:25:17.4550288 UTC-04:00] [616:628] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-17 08:25:17.4550356 UTC-04:00] [616:628] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-17 08:25:17.4555294 UTC-04:00] [616:628] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 181870235648 499455451136 181870235648 [2026-08-17 08:25:17.4555395 UTC-04:00] [616:628] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-17 08:25:17.6587079 UTC-04:00] [616:628] [fcmonitor 232 info] queue lock 0x39c cleanevent 0x3a0 [2026-08-17 08:25:17.6588126 UTC-04:00] [616:628] [fcmonitor 245 info] init succeed [2026-08-17 08:25:17.6588163 UTC-04:00] [616:628] [fcmonitor 438 info] reading cache [2026-08-17 08:25:17.7432245 UTC-04:00] [616:628] [fcmonitor 440 info] getting all proc [2026-08-17 08:25:17.8146093 UTC-04:00] [616:628] [fcmonitor 159 debug] getting all proc [2026-08-17 08:25:17.8173179 UTC-04:00] [616:628] [fcmonitor 192 warning] GetAllProcTree can't find module 4 System [2026-08-17 08:25:17.9003857 UTC-04:00] [616:628] [fcmonitor 192 warning] GetAllProcTree can't find module 100 Registry [2026-08-17 08:25:18.1226653 UTC-04:00] [616:628] [fcmonitor 192 warning] GetAllProcTree can't find module 2492 Memory Compression [2026-08-17 08:25:18.5934100 UTC-04:00] [616:628] [fcmonitor 192 warning] GetAllProcTree can't find module 1560 net.exe [2026-08-17 08:25:18.6176559 UTC-04:00] [616:628] [fcmonitor 192 warning] GetAllProcTree can't find module 2372 net1.exe [2026-08-17 08:25:18.6191961 UTC-04:00] [616:628] [fcmonitor 192 warning] GetAllProcTree can't find module 6304 conhost.exe [2026-08-17 08:25:18.6210983 UTC-04:00] [616:628] [fcmonitor 286 debug] getting all proc finished 124 0 [2026-08-17 08:25:18.6211068 UTC-04:00] [616:628] [fcmonitor 442 info] finish [2026-08-17 08:25:18.6212132 UTC-04:00] [616:628] [fcmonitor 267 info] heap p 0x0000017E43EB9440 [2026-08-17 08:25:18.6212532 UTC-04:00] [616:628] [fcmonitor 267 info] heap p 0x0000017E43EB98F0 [2026-08-17 08:25:18.6212874 UTC-04:00] [616:628] [fcmonitor 267 info] heap p 0x0000017E43EAEAA0 [2026-08-17 08:25:18.6213224 UTC-04:00] [616:628] [fcmonitor 267 info] heap p 0x0000017E43EC8020 [2026-08-17 08:25:18.6213546 UTC-04:00] [616:628] [fcmonitor 267 info] heap p 0x0000017E43EC84F0 [2026-08-17 08:25:18.6213881 UTC-04:00] [616:628] [fcmonitor 267 info] heap p 0x0000017E43EC9830 [2026-08-17 08:25:18.6214197 UTC-04:00] [616:628] [fcmonitor 267 info] heap p 0x0000017E43EC9360 [2026-08-17 08:25:18.6214574 UTC-04:00] [616:628] [fcmonitor 267 info] heap p 0x0000017E43EC89C0 [2026-08-17 08:25:18.6379171 UTC-04:00] [616:7456] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-17 08:25:18.6379951 UTC-04:00] [616:7212] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-17 08:25:18.6380639 UTC-04:00] [616:7232] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-17 08:25:18.6381344 UTC-04:00] [616:7524] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-17 08:25:18.6382189 UTC-04:00] [616:2564] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-17 08:25:18.6382883 UTC-04:00] [616:7448] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-17 08:25:18.6383550 UTC-04:00] [616:7668] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-17 08:25:18.6384223 UTC-04:00] [616:7236] [fcmonitor 709 info] SyncLogThreadEntry in [2026-08-17 08:25:38.8801369 UTC-04:00] [616:7516] [fcmonitor 475 warning] session 1 not init [2026-08-17 08:25:38.8858093 UTC-04:00] [616:7516] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-17 08:25:38.8858734 UTC-04:00] [616:7516] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Documents\ for session 1 [2026-08-17 08:25:38.8859287 UTC-04:00] [616:7516] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Favorites\ for session 1 [2026-08-17 08:25:38.8859801 UTC-04:00] [616:7516] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Music\ for session 1 [2026-08-17 08:25:38.8860295 UTC-04:00] [616:7516] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Pictures\ for session 1 [2026-08-17 08:25:38.8860783 UTC-04:00] [616:7516] [fcmonitor 234 info] parsed to C:\Users\%USERNAME%\Videos\ for session 1 [2026-08-17 08:25:38.8860880 UTC-04:00] [616:7516] [fcmonitor 435 info] add c:\users\%username%\desktop\ [2026-08-17 08:25:38.8860925 UTC-04:00] [616:7516] [fcmonitor 435 info] add c:\users\%username%\documents\ [2026-08-17 08:25:38.8860943 UTC-04:00] [616:7516] [fcmonitor 435 info] add c:\users\%username%\favorites\ [2026-08-17 08:25:38.8860969 UTC-04:00] [616:7516] [fcmonitor 435 info] add c:\users\%username%\music\ [2026-08-17 08:25:38.8860993 UTC-04:00] [616:7516] [fcmonitor 435 info] add c:\users\%username%\pictures\ [2026-08-17 08:25:38.8861008 UTC-04:00] [616:7516] [fcmonitor 435 info] add c:\users\%username%\videos\ [2026-08-17 08:26:21.2999198 UTC-04:00] [616:6256] [fcmonitor 90 debug] session change reason=5 session=1 [2026-08-17 08:26:21.3000976 UTC-04:00] [616:6256] [fcmonitor 551 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 [2026-08-17 08:26:21.3066988 UTC-04:00] [616:6256] [fcmonitor 228 info] parsed to C:\Users\careyn\Desktop\ for session 1 [2026-08-17 08:26:21.3091060 UTC-04:00] [616:6256] [fcmonitor 228 info] parsed to C:\Users\careyn\Documents\ for session 1 [2026-08-17 08:26:21.3120440 UTC-04:00] [616:6256] [fcmonitor 228 info] parsed to C:\Users\careyn\Favorites\ for session 1 [2026-08-17 08:26:21.3156403 UTC-04:00] [616:6256] [fcmonitor 228 info] parsed to C:\Users\careyn\Music\ for session 1 [2026-08-17 08:26:21.3177024 UTC-04:00] [616:6256] [fcmonitor 228 info] parsed to C:\Users\careyn\Pictures\ for session 1 [2026-08-17 08:26:21.3196429 UTC-04:00] [616:6256] [fcmonitor 228 info] parsed to C:\Users\careyn\Videos\ for session 1 [2026-08-17 08:26:21.3196578 UTC-04:00] [616:6256] [fcmonitor 553 debug] InitExclusionBySession C:\Users\%USERNAME%\Desktop\ for session 1 done [2026-08-17 08:26:21.3196626 UTC-04:00] [616:6256] [fcmonitor 435 info] add c:\users\careyn\desktop\ [2026-08-17 08:26:21.3196667 UTC-04:00] [616:6256] [fcmonitor 435 info] add c:\users\careyn\documents\ [2026-08-17 08:26:21.3196694 UTC-04:00] [616:6256] [fcmonitor 435 info] add c:\users\careyn\favorites\ [2026-08-17 08:26:21.3196724 UTC-04:00] [616:6256] [fcmonitor 435 info] add c:\users\careyn\music\ [2026-08-17 08:26:21.3196748 UTC-04:00] [616:6256] [fcmonitor 435 info] add c:\users\careyn\pictures\ [2026-08-17 08:26:21.3196773 UTC-04:00] [616:6256] [fcmonitor 435 info] add c:\users\careyn\videos\ [2026-08-17 08:26:21.3196899 UTC-04:00] [616:6256] [fcmonitor 16 debug] add session=1 ret=1 str=C:\Users\careyn\Desktop\;C:\Users\careyn\Documents\;C:\Users\careyn\Favorites\;C:\Users\careyn\Music\;C:\Users\careyn\Pictures\;C:\Users\careyn\Videos\ [2026-08-17 08:26:21.3197032 UTC-04:00] [616:6256] [fcmonitor 110 info] folder list C:\Users\%USERNAME%\Desktop\;C:\Users\%USERNAME%\Documents\;C:\Users\%USERNAME%\Favorites\;C:\Users\%USERNAME%\Music\;C:\Users\%USERNAME%\Pictures\;C:\Users\%USERNAME%\Videos\ [2026-08-17 08:26:21.3197065 UTC-04:00] [616:6256] [fcmonitor 111 info] ext list cmd;csv;dll;dmg;docm;docx;dot;dotm;dotx;elf;eml;exe;gz;iqy;iso;jar;jse;msi;pdf;pot;potm;potx;ppam;pps;ppsm;ppsx;ppt;pptm;pptx;ps1;rar;rtf;tar;thmx;xlam;xls;xlsb;xlsm;xlsx;xlt;xltm;xltx;xz;z;zip [2026-08-17 08:26:21.3198756 UTC-04:00] [616:6256] [fcmonitor 182 info] C:\Program Files\Fortinet\FortiClient\backup alloc 181892841472 499455451136 181892841472 [2026-08-17 08:26:21.3198820 UTC-04:00] [616:6256] [fcmonitor 212 info] RS opt 3600 1 49945545110 [2026-08-17 08:26:23.2841794 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 8352 \SystemRoot\System32\Conhost.exe [2026-08-17 08:26:23.2841915 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 8352 \SystemRoot\System32\Conhost.exe [2026-08-17 08:26:24.5608304 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 9424 \??\C:\Windows\system32\igfxEM.exe [2026-08-17 08:26:24.5608400 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 9424 C:\Windows\system32\igfxEM.exe [2026-08-17 08:26:24.9129605 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 9496 \??\C:\Windows\system32\igfxHK.exe [2026-08-17 08:26:24.9129703 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 9496 C:\Windows\system32\igfxHK.exe [2026-08-17 08:26:25.2758207 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 9520 \??\C:\Windows\system32\igfxTray.exe [2026-08-17 08:26:25.2758310 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 9520 C:\Windows\system32\igfxTray.exe [2026-08-17 08:26:28.8688944 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 9840 \??\C:\Windows\system32\userinit.exe [2026-08-17 08:26:28.8689172 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 9840 C:\Windows\system32\userinit.exe [2026-08-17 08:26:29.5609701 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 9924 \??\C:\Windows\Explorer.EXE [2026-08-17 08:26:29.5609817 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 9924 C:\Windows\Explorer.EXE [2026-08-17 08:26:58.9535327 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 1324 \??\C:\Windows\system32\wlrmdr.exe [2026-08-17 08:26:58.9535575 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 1324 C:\Windows\system32\wlrmdr.exe [2026-08-17 08:27:00.9103641 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 1724 \??\C:\IMC\MPS\IMCMobil.exe [2026-08-17 08:27:00.9103746 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 1724 C:\IMC\MPS\IMCMobil.exe [2026-08-17 08:27:03.7521554 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 3512 \??\C:\IMC\MPS\iIMCMobl.exe [2026-08-17 08:27:03.7521642 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 3512 C:\IMC\MPS\iIMCMobl.exe [2026-08-17 08:27:06.7040809 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 8120 \??\C:\Windows\System32\SecurityHealthSystray.exe [2026-08-17 08:27:06.7040917 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 8120 C:\Windows\System32\SecurityHealthSystray.exe [2026-08-17 08:27:08.2385909 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 11692 \??\C:\Users\careyn\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-17 08:27:08.2386066 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 11692 C:\Users\careyn\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-17 08:27:10.9337487 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 1200 \??\C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Win32Bridge.Server.exe [2026-08-17 08:27:10.9337742 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 1200 C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Win32Bridge.Server.exe [2026-08-17 08:27:12.4066619 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 7392 \??\C:\Windows\SysWOW64\runonce.exe [2026-08-17 08:27:12.4066727 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 7392 C:\Windows\SysWOW64\runonce.exe [2026-08-17 08:27:14.4449837 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 8560 \??\C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-17 08:27:14.4449946 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 8560 C:\Program Files (x86)\Actian\PSQL\bin\notifyviewer.exe [2026-08-17 08:27:15.4641777 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 4328 \??\C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-17 08:27:15.4641875 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 4328 C:\Program Files (x86)\Patrol PC\RTi Control\RT Control.exe [2026-08-17 08:27:16.0892706 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 8108 \??\C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-17 08:27:16.0892835 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 8108 C:\Program Files (x86)\Actian\PSQL\bin\w3dbsmgr.exe [2026-08-17 08:27:17.6010516 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 3404 \??\C:\Windows\System32\cmd.exe [2026-08-17 08:27:17.6010626 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 3404 C:\Windows\System32\cmd.exe [2026-08-17 08:27:17.7893708 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 11616 \SystemRoot\System32\Conhost.exe [2026-08-17 08:27:17.7893819 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 11616 \SystemRoot\System32\Conhost.exe [2026-08-17 08:27:18.7884595 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 2052 \??\C:\Windows\System32\cmd.exe [2026-08-17 08:27:18.7884861 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 2052 C:\Windows\System32\cmd.exe [2026-08-17 08:27:18.9135978 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 8092 \SystemRoot\System32\Conhost.exe [2026-08-17 08:27:18.9136089 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 8092 \SystemRoot\System32\Conhost.exe [2026-08-17 08:27:19.4932767 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 3856 \??\C:\Windows\System32\cmd.exe [2026-08-17 08:27:19.4932875 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 3856 C:\Windows\System32\cmd.exe [2026-08-17 08:27:19.6770053 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 6444 \SystemRoot\System32\Conhost.exe [2026-08-17 08:27:19.6770154 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 6444 \SystemRoot\System32\Conhost.exe [2026-08-17 08:27:28.5861630 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 5860 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-17 08:27:28.5861858 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 5860 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-17 08:27:30.7286702 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 6064 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-17 08:27:30.7286804 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 6064 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-17 08:27:32.8038722 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 8724 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-17 08:27:32.8038823 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 8724 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-17 08:27:34.9042046 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 5208 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-17 08:27:34.9042155 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 5208 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-17 08:27:36.9931193 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 8820 \??\C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-17 08:27:36.9931340 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 8820 C:\Program Files (x86)\Actian\PSQL\bin\W3DBSMGR.EXE [2026-08-17 08:28:02.8327552 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 11648 \??\C:\Users\careyn\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-17 08:28:02.8327821 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 11648 C:\Users\careyn\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-17 08:28:05.8688570 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 12324 \??\C:\Users\careyn\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-17 08:28:05.8688677 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 12324 C:\Users\careyn\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe [2026-08-17 08:28:36.8912107 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 10624 \??\C:\Users\careyn\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\FileSyncConfig.exe [2026-08-17 08:28:36.8912404 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 10624 C:\Users\careyn\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\FileSyncConfig.exe [2026-08-17 08:28:39.3909251 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 2060 \??\C:\Users\careyn\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-17 08:28:39.3909513 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 2060 C:\Users\careyn\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2026-08-17 08:28:44.8741478 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 4796 \??\C:\Users\careyn\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\OneDrive.Sync.Service.exe [2026-08-17 08:28:44.8741663 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 4796 C:\Users\careyn\AppData\Local\Microsoft\OneDrive\26.139.0720.0007\OneDrive.Sync.Service.exe [2026-08-17 08:29:34.4543006 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 11712 \??\C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-17 08:29:34.4543226 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 11712 C:\IMC\CMN\DotNet\MobileUpdater\UpdateClient\VMLaunch.exe [2026-08-17 08:30:33.6680827 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 744 \??\C:\Windows\splwow64.exe [2026-08-17 08:30:33.6681096 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 744 C:\Windows\splwow64.exe [2026-08-17 08:35:38.9861472 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 11552 \SystemRoot\System32\Conhost.exe [2026-08-17 08:35:38.9861843 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 11552 \SystemRoot\System32\Conhost.exe [2026-08-17 08:49:59.5557301 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 11048 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:49:59.5557688 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 11048 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:49:59.7583056 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 13208 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:49:59.7583138 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 13208 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:03.6248999 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 8436 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:03.6249116 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 8436 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:07.2479543 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 2076 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:07.2479653 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 2076 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:07.2493850 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 5652 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:07.2493976 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 5652 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:07.2645528 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 12368 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:07.2645631 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 12368 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:07.3062655 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 13068 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:07.3062812 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 13068 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:07.3098949 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 7532 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:07.3099037 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 7532 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:07.3111780 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 10504 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:07.3111867 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 10504 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:07.3121831 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 8612 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:07.3121906 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 8612 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:10.8019683 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 1124 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:10.8019999 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 1124 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:11.7925880 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 10508 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-17 08:50:11.7925997 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 10508 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-17 08:50:11.9842253 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 4544 \??\C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-17 08:50:11.9842350 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 4544 C:\Program Files (x86)\Microsoft\Edge\Application\151.0.4129.86\identity_helper.exe [2026-08-17 08:50:11.9913748 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 12352 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:11.9913896 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 12352 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:33.9564232 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 10688 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:50:33.9564474 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 10688 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:51:04.7990499 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 2284 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:51:04.7990679 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 2284 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:52:03.9242722 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 10064 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:52:03.9243836 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 10064 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:52:15.0781323 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 1864 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:52:15.0781596 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 1864 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:52:17.8043597 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 2920 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:52:17.8043821 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 2920 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:52:19.3087637 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 2672 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:52:19.3089862 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 2672 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:53:05.1663984 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 13268 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:53:05.1664924 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 13268 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:54:06.2282926 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 12408 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:54:06.2283204 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 12408 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:54:06.5106040 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 12884 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:54:06.5106139 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 12884 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:54:13.4886857 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 12660 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:54:13.4887096 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 12660 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:54:13.6934105 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 7068 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:54:13.6934245 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 7068 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:55:10.8224003 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 10052 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 08:55:10.8224280 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 10052 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 10:27:29.5307159 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 18140 \SystemRoot\System32\Conhost.exe [2026-08-17 10:27:29.5307498 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 18140 \SystemRoot\System32\Conhost.exe [2026-08-17 11:28:09.2476184 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 19528 \SystemRoot\System32\Conhost.exe [2026-08-17 11:28:09.2476752 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 19528 \SystemRoot\System32\Conhost.exe [2026-08-17 11:28:26.8576025 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 23144 \SystemRoot\System32\Conhost.exe [2026-08-17 11:28:26.8576198 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 23144 \SystemRoot\System32\Conhost.exe [2026-08-17 11:28:26.8588171 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 23152 \SystemRoot\System32\Conhost.exe [2026-08-17 11:28:26.8588240 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 23152 \SystemRoot\System32\Conhost.exe [2026-08-17 12:00:21.0481797 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 23672 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 12:00:21.0482113 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 23672 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 12:27:29.5296200 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 20820 \SystemRoot\System32\Conhost.exe [2026-08-17 12:27:29.5296502 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 20820 \SystemRoot\System32\Conhost.exe [2026-08-17 14:27:29.5399389 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 32048 \SystemRoot\System32\Conhost.exe [2026-08-17 14:27:29.5399573 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 32048 \SystemRoot\System32\Conhost.exe [2026-08-17 14:46:19.3683607 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 32956 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 14:46:19.3684162 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 32956 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 14:46:20.8149477 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 32944 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 14:46:20.8149637 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 32944 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 14:46:26.3578635 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 35616 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 14:46:26.3578786 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 35616 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 14:46:30.2781004 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 34980 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 14:46:30.2781657 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 34980 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 14:46:30.3238036 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 34656 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 14:46:30.3238139 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 34656 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 14:47:28.1865452 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 34112 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 14:47:28.1865703 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 34112 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 14:47:29.1380984 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 35784 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 14:47:29.1386861 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 35784 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 14:47:33.4090474 UTC-04:00] [616:7516] [fcmonitor 332 debug] proc cache add 34044 \??\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe [2026-08-17 14:47:33.4090586 UTC-04:00] [616:7516] [fcmonitor 99 info] add pid 34044 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe