_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=[::] dest_port=49672 pid=692 appname=services.exe


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=[::] dest_port=49671 pid=2480 appname=svchost.exe


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=[::] dest_port=49669 pid=2536 appname=spoolsv.exe


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=[::] dest_port=49668 pid=2240 appname=svchost.exe


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=[::] dest_port=49667 pid=1656 appname=svchost.exe


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=[::] dest_port=49666 pid=1180 appname=svchost.exe


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=[::] dest_port=49665 pid=548 appname=wininit.exe


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=[::] dest_port=49664 pid=700 appname=lsass.exe


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=[::] dest_port=3389 pid=736 appname=svchost.exe


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=[::] dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=692 appname=services.exe


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2480 appname=svchost.exe


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2536 appname=spoolsv.exe


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2240 appname=svchost.exe


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1656 appname=svchost.exe


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1180 appname=svchost.exe


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=548 appname=wininit.exe


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=736 appname=svchost.exe


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:47.243 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=[::] dest_port=49672 pid=668 appname=services.exe


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=[::] dest_port=49670 pid=2432 appname=svchost.exe


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=[::] dest_port=49669 pid=2476 appname=spoolsv.exe


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=[::] dest_port=49668 pid=2172 appname=svchost.exe


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=[::] dest_port=49667 pid=1428 appname=svchost.exe


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=[::] dest_port=49666 pid=1112 appname=svchost.exe


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=[::] dest_port=49665 pid=524 appname=wininit.exe


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=[::] dest_port=49664 pid=676 appname=lsass.exe


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=[::] dest_port=3389 pid=700 appname=svchost.exe


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=[::] dest_port=135 pid=908 appname=svchost.exe


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=668 appname=services.exe


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=0.0.0.0 dest_port=49670 pid=2432 appname=svchost.exe


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2476 appname=spoolsv.exe


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2172 appname=svchost.exe


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1428 appname=svchost.exe


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1112 appname=svchost.exe


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=524 appname=wininit.exe


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=700 appname=svchost.exe


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:45.950 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=908 appname=svchost.exe


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=[::] dest_port=49676 pid=688 appname=services.exe


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=[::] dest_port=49675 pid=2408 appname=svchost.exe


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=[::] dest_port=49669 pid=2388 appname=spoolsv.exe


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=[::] dest_port=49668 pid=2092 appname=svchost.exe


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=[::] dest_port=49667 pid=1608 appname=svchost.exe


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=[::] dest_port=49666 pid=1192 appname=svchost.exe


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=[::] dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=[::] dest_port=49664 pid=696 appname=lsass.exe


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=[::] dest_port=3389 pid=720 appname=svchost.exe


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=[::] dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=0.0.0.0 dest_port=49676 pid=688 appname=services.exe


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=0.0.0.0 dest_port=49675 pid=2408 appname=svchost.exe


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2388 appname=spoolsv.exe


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2092 appname=svchost.exe


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1608 appname=svchost.exe


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1192 appname=svchost.exe


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=720 appname=svchost.exe


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:45.721 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=[::] dest_port=49672 pid=688 appname=services.exe


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=[::] dest_port=49671 pid=2452 appname=svchost.exe


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=[::] dest_port=49669 pid=2532 appname=spoolsv.exe


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=[::] dest_port=49668 pid=2188 appname=svchost.exe


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=[::] dest_port=49667 pid=1572 appname=svchost.exe


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=[::] dest_port=49666 pid=1164 appname=svchost.exe


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=[::] dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=[::] dest_port=49664 pid=696 appname=lsass.exe


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=[::] dest_port=3389 pid=660 appname=svchost.exe


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=[::] dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=688 appname=services.exe


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2452 appname=svchost.exe


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2532 appname=spoolsv.exe


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2188 appname=svchost.exe


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1572 appname=svchost.exe


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1164 appname=svchost.exe


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=660 appname=svchost.exe


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:45.321 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=[::] dest_port=49672 pid=684 appname=services.exe


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=[::] dest_port=49671 pid=2444 appname=svchost.exe


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=[::] dest_port=49669 pid=2456 appname=spoolsv.exe


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=[::] dest_port=49668 pid=2184 appname=svchost.exe


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=[::] dest_port=49667 pid=1632 appname=svchost.exe


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=[::] dest_port=49666 pid=1148 appname=svchost.exe


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=[::] dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=[::] dest_port=49664 pid=692 appname=lsass.exe


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=[::] dest_port=3389 pid=768 appname=svchost.exe


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=[::] dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=684 appname=services.exe


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2444 appname=svchost.exe


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2456 appname=spoolsv.exe


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2184 appname=svchost.exe


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1632 appname=svchost.exe


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1148 appname=svchost.exe


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=768 appname=svchost.exe


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:44.997 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=[::] dest_port=49672 pid=660 appname=services.exe


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=[::] dest_port=49671 pid=2436 appname=svchost.exe


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=[::] dest_port=49669 pid=2572 appname=spoolsv.exe


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=[::] dest_port=49668 pid=1632 appname=svchost.exe


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=[::] dest_port=49667 pid=2124 appname=svchost.exe


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=[::] dest_port=49666 pid=1160 appname=svchost.exe


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=[::] dest_port=49665 pid=516 appname=wininit.exe


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=[::] dest_port=49664 pid=668 appname=lsass.exe


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=[::] dest_port=3389 pid=732 appname=svchost.exe


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=[::] dest_port=135 pid=912 appname=svchost.exe


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=660 appname=services.exe


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2436 appname=svchost.exe


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2572 appname=spoolsv.exe


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=1632 appname=svchost.exe


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=2124 appname=svchost.exe


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1160 appname=svchost.exe


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=516 appname=wininit.exe


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=732 appname=svchost.exe


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:44.665 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=912 appname=svchost.exe


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=[::] dest_port=49672 pid=696 appname=services.exe


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=[::] dest_port=49671 pid=2420 appname=svchost.exe


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=[::] dest_port=49669 pid=2484 appname=spoolsv.exe


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=[::] dest_port=49668 pid=1596 appname=svchost.exe


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=[::] dest_port=49667 pid=2088 appname=svchost.exe


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=[::] dest_port=49666 pid=1152 appname=svchost.exe


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=[::] dest_port=49665 pid=552 appname=wininit.exe


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=[::] dest_port=49664 pid=708 appname=lsass.exe


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=[::] dest_port=3389 pid=772 appname=svchost.exe


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=[::] dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=696 appname=services.exe


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2420 appname=svchost.exe


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2484 appname=spoolsv.exe


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=1596 appname=svchost.exe


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=2088 appname=svchost.exe


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1152 appname=svchost.exe


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=552 appname=wininit.exe


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=772 appname=svchost.exe


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:44.399 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=[::] dest_port=49672 pid=672 appname=services.exe


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=[::] dest_port=49671 pid=2404 appname=svchost.exe


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=[::] dest_port=49669 pid=2444 appname=spoolsv.exe


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=[::] dest_port=49668 pid=2136 appname=svchost.exe


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=[::] dest_port=49667 pid=1612 appname=svchost.exe


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=[::] dest_port=49666 pid=1160 appname=svchost.exe


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=[::] dest_port=49665 pid=528 appname=wininit.exe


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=[::] dest_port=49664 pid=684 appname=lsass.exe


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=[::] dest_port=3389 pid=668 appname=svchost.exe


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=[::] dest_port=135 pid=920 appname=svchost.exe


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=672 appname=services.exe


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2404 appname=svchost.exe


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2444 appname=spoolsv.exe


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2136 appname=svchost.exe


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1612 appname=svchost.exe


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1160 appname=svchost.exe


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=528 appname=wininit.exe


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=668 appname=svchost.exe


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:43.449 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=920 appname=svchost.exe


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=[::] dest_port=49672 pid=672 appname=services.exe


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=[::] dest_port=49671 pid=2380 appname=svchost.exe


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=[::] dest_port=49669 pid=2520 appname=spoolsv.exe


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=[::] dest_port=49668 pid=2140 appname=svchost.exe


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=[::] dest_port=49667 pid=1600 appname=svchost.exe


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=[::] dest_port=49666 pid=1160 appname=svchost.exe


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=[::] dest_port=49665 pid=528 appname=wininit.exe


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=[::] dest_port=49664 pid=680 appname=lsass.exe


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=[::] dest_port=3389 pid=792 appname=svchost.exe


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=[::] dest_port=135 pid=920 appname=svchost.exe


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=672 appname=services.exe


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2380 appname=svchost.exe


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2520 appname=spoolsv.exe


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2140 appname=svchost.exe


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1600 appname=svchost.exe


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1160 appname=svchost.exe


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=528 appname=wininit.exe


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=792 appname=svchost.exe


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:43.006 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=920 appname=svchost.exe


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=[::] dest_port=49672 pid=688 appname=services.exe


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=[::] dest_port=49671 pid=2484 appname=svchost.exe


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=[::] dest_port=49669 pid=2508 appname=spoolsv.exe


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=[::] dest_port=49668 pid=2176 appname=svchost.exe


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=[::] dest_port=49667 pid=1592 appname=svchost.exe


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=[::] dest_port=49666 pid=1176 appname=svchost.exe


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=[::] dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=[::] dest_port=49664 pid=696 appname=lsass.exe


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=[::] dest_port=3389 pid=712 appname=svchost.exe


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=[::] dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=688 appname=services.exe


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2484 appname=svchost.exe


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2508 appname=spoolsv.exe


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2176 appname=svchost.exe


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1592 appname=svchost.exe


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1176 appname=svchost.exe


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=712 appname=svchost.exe


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:42.998 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=[::] dest_port=49672 pid=684 appname=services.exe


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=[::] dest_port=49671 pid=2464 appname=svchost.exe


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=[::] dest_port=49669 pid=2456 appname=spoolsv.exe


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=[::] dest_port=49668 pid=2112 appname=svchost.exe


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=[::] dest_port=49667 pid=1512 appname=svchost.exe


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=[::] dest_port=49666 pid=1184 appname=svchost.exe


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=[::] dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=[::] dest_port=49664 pid=692 appname=lsass.exe


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=[::] dest_port=3389 pid=716 appname=svchost.exe


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=[::] dest_port=135 pid=948 appname=svchost.exe


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=684 appname=services.exe


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2464 appname=svchost.exe


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2456 appname=spoolsv.exe


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2112 appname=svchost.exe


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1512 appname=svchost.exe


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1184 appname=svchost.exe


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=716 appname=svchost.exe


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:42.438 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=948 appname=svchost.exe


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=[::] dest_port=49672 pid=700 appname=services.exe


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=[::] dest_port=49671 pid=2428 appname=svchost.exe


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=[::] dest_port=49669 pid=2532 appname=spoolsv.exe


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=[::] dest_port=49668 pid=2264 appname=svchost.exe


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=[::] dest_port=49667 pid=1544 appname=svchost.exe


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=[::] dest_port=49666 pid=1132 appname=svchost.exe


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=[::] dest_port=49665 pid=556 appname=wininit.exe


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=[::] dest_port=49664 pid=720 appname=lsass.exe


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=[::] dest_port=3389 pid=948 appname=svchost.exe


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=[::] dest_port=135 pid=956 appname=svchost.exe


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=700 appname=services.exe


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2428 appname=svchost.exe


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2532 appname=spoolsv.exe


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2264 appname=svchost.exe


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1544 appname=svchost.exe


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1132 appname=svchost.exe


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=556 appname=wininit.exe


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=948 appname=svchost.exe


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:42.422 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=956 appname=svchost.exe


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=[::] dest_port=49672 pid=700 appname=services.exe


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=[::] dest_port=49671 pid=2400 appname=svchost.exe


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=[::] dest_port=49669 pid=2468 appname=spoolsv.exe


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=[::] dest_port=49668 pid=1624 appname=svchost.exe


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=[::] dest_port=49667 pid=2120 appname=svchost.exe


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=[::] dest_port=49666 pid=1176 appname=svchost.exe


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=[::] dest_port=49665 pid=556 appname=wininit.exe


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=[::] dest_port=49664 pid=708 appname=lsass.exe


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=[::] dest_port=3389 pid=744 appname=svchost.exe


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=[::] dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=700 appname=services.exe


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2400 appname=svchost.exe


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2468 appname=spoolsv.exe


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=1624 appname=svchost.exe


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=2120 appname=svchost.exe


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1176 appname=svchost.exe


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=556 appname=wininit.exe


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=744 appname=svchost.exe


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:41.034 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=[::] dest_port=49672 pid=668 appname=services.exe


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=[::] dest_port=49671 pid=2464 appname=svchost.exe


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=[::] dest_port=49669 pid=2488 appname=spoolsv.exe


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=[::] dest_port=49668 pid=2192 appname=svchost.exe


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=[::] dest_port=49667 pid=1616 appname=svchost.exe


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=[::] dest_port=49666 pid=1168 appname=svchost.exe


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=[::] dest_port=49665 pid=524 appname=wininit.exe


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=[::] dest_port=49664 pid=680 appname=lsass.exe


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=[::] dest_port=3389 pid=828 appname=svchost.exe


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=[::] dest_port=135 pid=908 appname=svchost.exe


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=668 appname=services.exe


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2464 appname=svchost.exe


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2488 appname=spoolsv.exe


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2192 appname=svchost.exe


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1616 appname=svchost.exe


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1168 appname=svchost.exe


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=524 appname=wininit.exe


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=828 appname=svchost.exe


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:40.923 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=908 appname=svchost.exe


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=[::] dest_port=49672 pid=680 appname=services.exe


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=[::] dest_port=49671 pid=2408 appname=svchost.exe


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=[::] dest_port=49669 pid=2504 appname=spoolsv.exe


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=[::] dest_port=49668 pid=2176 appname=svchost.exe


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=[::] dest_port=49667 pid=1624 appname=svchost.exe


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=[::] dest_port=49666 pid=1172 appname=svchost.exe


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=[::] dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=[::] dest_port=49664 pid=688 appname=lsass.exe


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=[::] dest_port=3389 pid=676 appname=svchost.exe


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=[::] dest_port=135 pid=920 appname=svchost.exe


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=680 appname=services.exe


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2408 appname=svchost.exe


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2504 appname=spoolsv.exe


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2176 appname=svchost.exe


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1624 appname=svchost.exe


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1172 appname=svchost.exe


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=676 appname=svchost.exe


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:40.384 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=920 appname=svchost.exe


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=[::] dest_port=49672 pid=688 appname=services.exe


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=[::] dest_port=49671 pid=2468 appname=svchost.exe


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=[::] dest_port=49669 pid=2488 appname=spoolsv.exe


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=[::] dest_port=49668 pid=2200 appname=svchost.exe


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=[::] dest_port=49667 pid=1472 appname=svchost.exe


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=[::] dest_port=49666 pid=1168 appname=svchost.exe


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=[::] dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=[::] dest_port=49664 pid=700 appname=lsass.exe


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=[::] dest_port=3389 pid=928 appname=svchost.exe


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=[::] dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=688 appname=services.exe


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2468 appname=svchost.exe


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2488 appname=spoolsv.exe


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2200 appname=svchost.exe


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1472 appname=svchost.exe


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1168 appname=svchost.exe


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=928 appname=svchost.exe


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:39.875 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=[::] dest_port=49672 pid=680 appname=services.exe


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=[::] dest_port=49671 pid=2352 appname=svchost.exe


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=[::] dest_port=49669 pid=2368 appname=spoolsv.exe


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=[::] dest_port=49668 pid=1976 appname=svchost.exe


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=[::] dest_port=49667 pid=1552 appname=svchost.exe


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=[::] dest_port=49666 pid=1176 appname=svchost.exe


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=[::] dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=[::] dest_port=49664 pid=688 appname=lsass.exe


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=[::] dest_port=3389 pid=492 appname=svchost.exe


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=[::] dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=680 appname=services.exe


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2352 appname=svchost.exe


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2368 appname=spoolsv.exe


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=1976 appname=svchost.exe


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1552 appname=svchost.exe


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1176 appname=svchost.exe


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=492 appname=svchost.exe


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:39.848 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=[::] dest_port=49672 pid=668 appname=services.exe


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=[::] dest_port=49671 pid=2372 appname=svchost.exe


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=[::] dest_port=49669 pid=2452 appname=spoolsv.exe


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=[::] dest_port=49668 pid=2196 appname=svchost.exe


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=[::] dest_port=49667 pid=1612 appname=svchost.exe


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=[::] dest_port=49666 pid=1132 appname=svchost.exe


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=[::] dest_port=49665 pid=524 appname=wininit.exe


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=[::] dest_port=49664 pid=676 appname=lsass.exe


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=[::] dest_port=3389 pid=908 appname=svchost.exe


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=[::] dest_port=135 pid=916 appname=svchost.exe


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=668 appname=services.exe


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2372 appname=svchost.exe


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2452 appname=spoolsv.exe


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2196 appname=svchost.exe


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1612 appname=svchost.exe


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1132 appname=svchost.exe


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=524 appname=wininit.exe


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=908 appname=svchost.exe


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:39.434 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=916 appname=svchost.exe


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=[::] dest_port=49672 pid=688 appname=services.exe


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=[::] dest_port=49671 pid=2420 appname=svchost.exe


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=[::] dest_port=49669 pid=2568 appname=spoolsv.exe


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=[::] dest_port=49668 pid=2272 appname=svchost.exe


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=[::] dest_port=49667 pid=1580 appname=svchost.exe


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=[::] dest_port=49666 pid=1160 appname=svchost.exe


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=[::] dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=[::] dest_port=49664 pid=696 appname=lsass.exe


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=[::] dest_port=3389 pid=932 appname=svchost.exe


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=[::] dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=688 appname=services.exe


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2420 appname=svchost.exe


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2568 appname=spoolsv.exe


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2272 appname=svchost.exe


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1580 appname=svchost.exe


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1160 appname=svchost.exe


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=932 appname=svchost.exe


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:39.169 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=[::] dest_port=49672 pid=688 appname=services.exe


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=[::] dest_port=49671 pid=2464 appname=svchost.exe


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=[::] dest_port=49669 pid=2512 appname=spoolsv.exe


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=[::] dest_port=49668 pid=2096 appname=svchost.exe


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=[::] dest_port=49667 pid=1628 appname=svchost.exe


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=[::] dest_port=49666 pid=1176 appname=svchost.exe


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=[::] dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=[::] dest_port=49664 pid=696 appname=lsass.exe


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=[::] dest_port=3389 pid=964 appname=svchost.exe


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=[::] dest_port=135 pid=952 appname=svchost.exe


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=688 appname=services.exe


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2464 appname=svchost.exe


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2512 appname=spoolsv.exe


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2096 appname=svchost.exe


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1628 appname=svchost.exe


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1176 appname=svchost.exe


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=964 appname=svchost.exe


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:39.081 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=952 appname=svchost.exe


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=[::] dest_port=49672 pid=680 appname=services.exe


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=[::] dest_port=49671 pid=2468 appname=svchost.exe


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=[::] dest_port=49669 pid=2540 appname=spoolsv.exe


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=[::] dest_port=49668 pid=2160 appname=svchost.exe


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=[::] dest_port=49667 pid=1640 appname=svchost.exe


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=[::] dest_port=49666 pid=1196 appname=svchost.exe


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=[::] dest_port=49665 pid=556 appname=wininit.exe


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=[::] dest_port=49664 pid=688 appname=lsass.exe


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=[::] dest_port=3389 pid=432 appname=svchost.exe


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=[::] dest_port=135 pid=928 appname=svchost.exe


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=680 appname=services.exe


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2468 appname=svchost.exe


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2540 appname=spoolsv.exe


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2160 appname=svchost.exe


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1640 appname=svchost.exe


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1196 appname=svchost.exe


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=556 appname=wininit.exe


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=432 appname=svchost.exe


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:38.887 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=928 appname=svchost.exe


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=[::] dest_port=49672 pid=2488 appname=svchost.exe


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=[::] dest_port=49671 pid=700 appname=services.exe


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=[::] dest_port=49669 pid=2480 appname=spoolsv.exe


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=[::] dest_port=49668 pid=2160 appname=svchost.exe


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=[::] dest_port=49667 pid=1508 appname=svchost.exe


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=[::] dest_port=49666 pid=1116 appname=svchost.exe


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=[::] dest_port=49665 pid=556 appname=wininit.exe


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=[::] dest_port=49664 pid=708 appname=lsass.exe


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=[::] dest_port=3389 pid=400 appname=svchost.exe


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=[::] dest_port=135 pid=952 appname=svchost.exe


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=2488 appname=svchost.exe


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=700 appname=services.exe


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2480 appname=spoolsv.exe


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2160 appname=svchost.exe


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1508 appname=svchost.exe


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1116 appname=svchost.exe


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=556 appname=wininit.exe


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=400 appname=svchost.exe


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:38.781 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=952 appname=svchost.exe


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=[::] dest_port=49672 pid=684 appname=services.exe


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=[::] dest_port=49671 pid=2416 appname=svchost.exe


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=[::] dest_port=49669 pid=2444 appname=spoolsv.exe


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=[::] dest_port=49668 pid=2144 appname=svchost.exe


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=[::] dest_port=49667 pid=1500 appname=svchost.exe


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=[::] dest_port=49666 pid=1144 appname=svchost.exe


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=[::] dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=[::] dest_port=49664 pid=692 appname=lsass.exe


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=[::] dest_port=3389 pid=656 appname=svchost.exe


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=[::] dest_port=135 pid=932 appname=svchost.exe


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=684 appname=services.exe


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2416 appname=svchost.exe


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2444 appname=spoolsv.exe


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2144 appname=svchost.exe


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1500 appname=svchost.exe


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1144 appname=svchost.exe


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=656 appname=svchost.exe


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:38.656 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=932 appname=svchost.exe


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=[::] dest_port=49672 pid=668 appname=services.exe


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=[::] dest_port=49671 pid=2432 appname=svchost.exe


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=[::] dest_port=49669 pid=2564 appname=spoolsv.exe


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=[::] dest_port=49668 pid=2208 appname=svchost.exe


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=[::] dest_port=49667 pid=1652 appname=svchost.exe


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=[::] dest_port=49666 pid=1152 appname=svchost.exe


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=[::] dest_port=49665 pid=524 appname=wininit.exe


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=[::] dest_port=49664 pid=676 appname=lsass.exe


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=[::] dest_port=3389 pid=664 appname=svchost.exe


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=[::] dest_port=135 pid=924 appname=svchost.exe


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=668 appname=services.exe


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2432 appname=svchost.exe


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2564 appname=spoolsv.exe


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2208 appname=svchost.exe


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1652 appname=svchost.exe


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1152 appname=svchost.exe


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=524 appname=wininit.exe


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=664 appname=svchost.exe


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:37.840 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=924 appname=svchost.exe


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=[::] dest_port=49672 pid=672 appname=services.exe


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=[::] dest_port=49671 pid=2444 appname=svchost.exe


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=[::] dest_port=49669 pid=2480 appname=spoolsv.exe


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=[::] dest_port=49668 pid=2188 appname=svchost.exe


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=[::] dest_port=49667 pid=1584 appname=svchost.exe


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=[::] dest_port=49666 pid=1148 appname=svchost.exe


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=[::] dest_port=49665 pid=528 appname=wininit.exe


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=[::] dest_port=49664 pid=680 appname=lsass.exe


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=[::] dest_port=3389 pid=704 appname=svchost.exe


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=[::] dest_port=135 pid=920 appname=svchost.exe


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=672 appname=services.exe


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2444 appname=svchost.exe


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2480 appname=spoolsv.exe


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2188 appname=svchost.exe


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1584 appname=svchost.exe


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1148 appname=svchost.exe


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=528 appname=wininit.exe


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=704 appname=svchost.exe


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:37.220 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=920 appname=svchost.exe


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=[::] dest_port=49672 pid=692 appname=services.exe


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=[::] dest_port=49671 pid=2476 appname=svchost.exe


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=[::] dest_port=49669 pid=2484 appname=spoolsv.exe


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=[::] dest_port=49668 pid=1668 appname=svchost.exe


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=[::] dest_port=49667 pid=2144 appname=svchost.exe


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=[::] dest_port=49666 pid=1160 appname=svchost.exe


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=[::] dest_port=49665 pid=548 appname=wininit.exe


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=[::] dest_port=49664 pid=700 appname=lsass.exe


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=[::] dest_port=3389 pid=724 appname=svchost.exe


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=[::] dest_port=135 pid=948 appname=svchost.exe


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=692 appname=services.exe


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2476 appname=svchost.exe


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2484 appname=spoolsv.exe


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=1668 appname=svchost.exe


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=2144 appname=svchost.exe


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1160 appname=svchost.exe


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=548 appname=wininit.exe


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=724 appname=svchost.exe


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:36.361 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=948 appname=svchost.exe


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=[::] dest_port=49672 pid=680 appname=services.exe


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=[::] dest_port=49671 pid=2492 appname=svchost.exe


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=[::] dest_port=49669 pid=2484 appname=spoolsv.exe


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=[::] dest_port=49668 pid=2280 appname=svchost.exe


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=[::] dest_port=49667 pid=1640 appname=svchost.exe


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=[::] dest_port=49666 pid=1140 appname=svchost.exe


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=[::] dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=[::] dest_port=49664 pid=688 appname=lsass.exe


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=[::] dest_port=3389 pid=700 appname=svchost.exe


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=[::] dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=680 appname=services.exe


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2492 appname=svchost.exe


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2484 appname=spoolsv.exe


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2280 appname=svchost.exe


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1640 appname=svchost.exe


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1140 appname=svchost.exe


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=700 appname=svchost.exe


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:35.389 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=[::] dest_port=49672 pid=688 appname=services.exe


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=[::] dest_port=49671 pid=2468 appname=svchost.exe


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=[::] dest_port=49669 pid=2484 appname=spoolsv.exe


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=[::] dest_port=49668 pid=2144 appname=svchost.exe


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=[::] dest_port=49667 pid=1680 appname=svchost.exe


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=[::] dest_port=49666 pid=1172 appname=svchost.exe


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=[::] dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=[::] dest_port=49664 pid=696 appname=lsass.exe


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=[::] dest_port=3389 pid=684 appname=svchost.exe


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=[::] dest_port=135 pid=944 appname=svchost.exe


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=688 appname=services.exe


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2468 appname=svchost.exe


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2484 appname=spoolsv.exe


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2144 appname=svchost.exe


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1680 appname=svchost.exe


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1172 appname=svchost.exe


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=684 appname=svchost.exe


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:34.992 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=944 appname=svchost.exe


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=[::] dest_port=49672 pid=700 appname=services.exe


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=[::] dest_port=49671 pid=2440 appname=svchost.exe


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=[::] dest_port=49669 pid=2516 appname=spoolsv.exe


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=[::] dest_port=49668 pid=2156 appname=svchost.exe


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=[::] dest_port=49667 pid=1692 appname=svchost.exe


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=[::] dest_port=49666 pid=1152 appname=svchost.exe


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=[::] dest_port=49665 pid=556 appname=wininit.exe


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=[::] dest_port=49664 pid=720 appname=lsass.exe


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=[::] dest_port=3389 pid=696 appname=svchost.exe


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=[::] dest_port=135 pid=968 appname=svchost.exe


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=700 appname=services.exe


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2440 appname=svchost.exe


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2516 appname=spoolsv.exe


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2156 appname=svchost.exe


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1692 appname=svchost.exe


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1152 appname=svchost.exe


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=556 appname=wininit.exe


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=696 appname=svchost.exe


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:34.889 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=968 appname=svchost.exe


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=[::] dest_port=49672 pid=692 appname=services.exe


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=[::] dest_port=49671 pid=2476 appname=svchost.exe


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=[::] dest_port=49669 pid=2528 appname=spoolsv.exe


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=[::] dest_port=49668 pid=2272 appname=svchost.exe


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=[::] dest_port=49667 pid=1564 appname=svchost.exe


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=[::] dest_port=49666 pid=1124 appname=svchost.exe


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=[::] dest_port=49665 pid=548 appname=wininit.exe


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=[::] dest_port=49664 pid=700 appname=lsass.exe


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=[::] dest_port=3389 pid=844 appname=svchost.exe


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=[::] dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=692 appname=services.exe


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2476 appname=svchost.exe


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2528 appname=spoolsv.exe


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2272 appname=svchost.exe


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1564 appname=svchost.exe


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1124 appname=svchost.exe


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=548 appname=wininit.exe


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=844 appname=svchost.exe


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:34.403 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=[::] dest_port=49672 pid=696 appname=services.exe


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=[::] dest_port=49671 pid=2444 appname=svchost.exe


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=[::] dest_port=49669 pid=2512 appname=spoolsv.exe


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=[::] dest_port=49668 pid=2104 appname=svchost.exe


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=[::] dest_port=49667 pid=1500 appname=svchost.exe


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=[::] dest_port=49666 pid=1168 appname=svchost.exe


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=[::] dest_port=49665 pid=552 appname=wininit.exe


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=[::] dest_port=49664 pid=704 appname=lsass.exe


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=[::] dest_port=3389 pid=780 appname=svchost.exe


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=[::] dest_port=135 pid=944 appname=svchost.exe


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=696 appname=services.exe


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2444 appname=svchost.exe


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2512 appname=spoolsv.exe


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2104 appname=svchost.exe


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1500 appname=svchost.exe


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1168 appname=svchost.exe


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=552 appname=wininit.exe


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=780 appname=svchost.exe


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:33.868 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=944 appname=svchost.exe


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=[::] dest_port=49672 pid=2416 appname=svchost.exe


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=[::] dest_port=49671 pid=680 appname=services.exe


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=[::] dest_port=49669 pid=2492 appname=spoolsv.exe


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=[::] dest_port=49668 pid=2124 appname=svchost.exe


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=[::] dest_port=49667 pid=1604 appname=svchost.exe


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=[::] dest_port=49666 pid=1116 appname=svchost.exe


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=[::] dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=[::] dest_port=49664 pid=688 appname=lsass.exe


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=[::] dest_port=3389 pid=756 appname=svchost.exe


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=[::] dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=2416 appname=svchost.exe


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=680 appname=services.exe


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2492 appname=spoolsv.exe


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2124 appname=svchost.exe


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1604 appname=svchost.exe


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1116 appname=svchost.exe


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=756 appname=svchost.exe


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:32.382 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=[::] dest_port=49672 pid=680 appname=services.exe


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=[::] dest_port=49671 pid=2472 appname=svchost.exe


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=[::] dest_port=49669 pid=2496 appname=spoolsv.exe


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=[::] dest_port=49668 pid=2152 appname=svchost.exe


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=[::] dest_port=49667 pid=1596 appname=svchost.exe


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=[::] dest_port=49666 pid=1156 appname=svchost.exe


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=[::] dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=[::] dest_port=49664 pid=688 appname=lsass.exe


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=[::] dest_port=3389 pid=928 appname=svchost.exe


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=[::] dest_port=135 pid=916 appname=svchost.exe


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=680 appname=services.exe


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2472 appname=svchost.exe


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2496 appname=spoolsv.exe


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2152 appname=svchost.exe


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1596 appname=svchost.exe


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1156 appname=svchost.exe


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=928 appname=svchost.exe


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:30.762 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=916 appname=svchost.exe


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=[::] dest_port=49672 pid=680 appname=services.exe


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=[::] dest_port=49671 pid=2440 appname=svchost.exe


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=[::] dest_port=49669 pid=2412 appname=spoolsv.exe


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=[::] dest_port=49668 pid=2208 appname=svchost.exe


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=[::] dest_port=49667 pid=1612 appname=svchost.exe


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=[::] dest_port=49666 pid=1140 appname=svchost.exe


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=[::] dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=[::] dest_port=49664 pid=688 appname=lsass.exe


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=[::] dest_port=3389 pid=724 appname=svchost.exe


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=[::] dest_port=135 pid=924 appname=svchost.exe


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=680 appname=services.exe


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2440 appname=svchost.exe


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2412 appname=spoolsv.exe


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2208 appname=svchost.exe


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1612 appname=svchost.exe


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1140 appname=svchost.exe


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=724 appname=svchost.exe


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:29.060 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=924 appname=svchost.exe


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=[::] dest_port=49672 pid=692 appname=services.exe


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=[::] dest_port=49671 pid=2436 appname=svchost.exe


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=[::] dest_port=49669 pid=2464 appname=spoolsv.exe


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=[::] dest_port=49668 pid=2188 appname=svchost.exe


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=[::] dest_port=49667 pid=1488 appname=svchost.exe


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=[::] dest_port=49666 pid=1144 appname=svchost.exe


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=[::] dest_port=49665 pid=548 appname=wininit.exe


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=[::] dest_port=49664 pid=700 appname=lsass.exe


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=[::] dest_port=3389 pid=764 appname=svchost.exe


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=[::] dest_port=135 pid=956 appname=svchost.exe


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=692 appname=services.exe


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2436 appname=svchost.exe


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2464 appname=spoolsv.exe


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2188 appname=svchost.exe


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1488 appname=svchost.exe


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1144 appname=svchost.exe


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=548 appname=wininit.exe


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=764 appname=svchost.exe


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:29.049 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=956 appname=svchost.exe


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=[::] dest_port=49672 pid=680 appname=services.exe


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=[::] dest_port=49671 pid=2408 appname=svchost.exe


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=[::] dest_port=49669 pid=2496 appname=spoolsv.exe


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=[::] dest_port=49668 pid=2184 appname=svchost.exe


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=[::] dest_port=49667 pid=1636 appname=svchost.exe


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=[::] dest_port=49666 pid=1148 appname=svchost.exe


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=[::] dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=[::] dest_port=49664 pid=688 appname=lsass.exe


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=[::] dest_port=3389 pid=756 appname=svchost.exe


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=[::] dest_port=135 pid=932 appname=svchost.exe


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=680 appname=services.exe


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2408 appname=svchost.exe


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2496 appname=spoolsv.exe


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2184 appname=svchost.exe


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1636 appname=svchost.exe


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1148 appname=svchost.exe


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=756 appname=svchost.exe


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-10-17 14:32:28.713 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=932 appname=svchost.exe


_raw: 2025-10-17 14:32:28.672 transport=TCP dest_ip=[::] dest_port=49672 pid=680 appname=services.exe


_raw: 2025-10-17 14:32:28.672 transport=TCP dest_ip=[::] dest_port=49671 pid=2380 appname=svchost.exe


_raw: 2025-10-17 14:32:28.672 transport=TCP dest_ip=[::] dest_port=49669 pid=2536 appname=spoolsv.exe


_raw: 2025-10-17 14:32:28.672 transport=TCP dest_ip=[::] dest_port=49668 pid=2164 appname=svchost.exe


_raw: 2025-10-17 14:32:28.672 transport=TCP dest_ip=[::] dest_port=49667 pid=1596 appname=svchost.exe


_raw: 2025-10-17 14:32:28.672 transport=TCP dest_ip=[::] dest_port=49666 pid=1156 appname=svchost.exe