154100x800000000000000012812Microsoft-Windows-Sysmon/OperationalEC2AMAZ-FKEOM7G-2026-08-14 16:03:29.752{1b43529b-3c51-6a7f-cb04-000000006300}9148C:\Windows\System32\conhost.exe10.0.26100.33158 (WinBuild.160101.0800)Console Window HostMicrosoft® Windows® Operating SystemMicrosoft CorporationCONHOST.EXE"C:\Windows\System32\conhost.exe"C:\Windows\system32\NT AUTHORITY\SYSTEM{1b43529b-244e-6a7f-e703-000000000000}0x3e72SystemMD5=A8306D3735D6E7B127050F42E92A6932,SHA256=CE219763B73D8B4FE41517B70CAE7421F28CACA149C6637D3312290357D81508,IMPHASH=D5AC805663F5B0C1826ED50248F028B9{1b43529b-3c51-6a7f-ca04-000000006300}5640C:\Windows\System32\wermgr.exe"C:\Windows\system32\wermgr.exe" -uploadNT AUTHORITY\SYSTEM