_raw: 2026-01-09 09:31:31.296 transport=TCP dest_ip=[::] dest_port=3389 pid=1056 appname=svchost.exe


_raw: 2026-01-09 09:31:31.296 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2026-01-09 09:31:31.296 transport=TCP dest_ip=[::] dest_port=135 pid=948 appname=svchost.exe


_raw: 2026-01-09 09:31:31.296 transport=TCP dest_ip=10.0.1.20 dest_port=139 pid=4 appname=System


_raw: 2026-01-09 09:31:31.296 transport=TCP dest_ip=0.0.0.0 dest_port=49700 pid=2468 appname=svchost.exe


_raw: 2026-01-09 09:31:31.296 transport=TCP dest_ip=0.0.0.0 dest_port=49698 pid=692 appname=services.exe


_raw: 2026-01-09 09:31:31.296 transport=TCP dest_ip=0.0.0.0 dest_port=49675 pid=2532 appname=spoolsv.exe


_raw: 2026-01-09 09:31:31.296 transport=TCP dest_ip=0.0.0.0 dest_port=49670 pid=2456 appname=svchost.exe


_raw: 2026-01-09 09:31:31.296 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=1096 appname=svchost.exe


_raw: 2026-01-09 09:31:31.296 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1420 appname=svchost.exe


_raw: 2026-01-09 09:31:31.296 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=548 appname=wininit.exe


_raw: 2026-01-09 09:31:31.296 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2026-01-09 09:31:31.296 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2026-01-09 09:31:31.296 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2026-01-09 09:31:31.296 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=1056 appname=svchost.exe


_raw: 2026-01-09 09:31:31.296 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2026-01-09 09:31:31.296 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=948 appname=svchost.exe


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=[::] dest_port=49672 pid=688 appname=services.exe


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=[::] dest_port=49671 pid=2324 appname=svchost.exe


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=[::] dest_port=49669 pid=2424 appname=spoolsv.exe


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=[::] dest_port=49668 pid=2176 appname=svchost.exe


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=[::] dest_port=49667 pid=1612 appname=svchost.exe


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=[::] dest_port=49666 pid=1176 appname=svchost.exe


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=[::] dest_port=49665 pid=544 appname=wininit.exe


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=[::] dest_port=49664 pid=704 appname=lsass.exe


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=[::] dest_port=3389 pid=416 appname=svchost.exe


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=[::] dest_port=135 pid=932 appname=svchost.exe


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=3052 appname=streamfwd.exe


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=688 appname=services.exe


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2324 appname=svchost.exe


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2424 appname=spoolsv.exe


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2176 appname=svchost.exe


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1612 appname=svchost.exe


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1176 appname=svchost.exe


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=544 appname=wininit.exe


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=416 appname=svchost.exe


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2026-01-09 09:31:29.070 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=932 appname=svchost.exe