_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=[::] dest_port=49665 pid=576 appname=wininit.exe


_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=[::] dest_port=49664 pid=708 appname=lsass.exe


_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=[::] dest_port=3389 pid=856 appname=svchost.exe


_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=[::] dest_port=135 pid=960 appname=svchost.exe


_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=1124 appname=streamfwd.exe


_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=696 appname=services.exe


_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2544 appname=svchost.exe


_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=0.0.0.0 dest_port=49670 pid=2616 appname=spoolsv.exe


_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2216 appname=svchost.exe


_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1544 appname=svchost.exe


_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1160 appname=svchost.exe


_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=576 appname=wininit.exe


_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=856 appname=svchost.exe


_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:13:35.314 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=960 appname=svchost.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::1] dest_port=53 pid=2308 appname=dns.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=60674 pid=2812 appname=dfsrs.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=58477 pid=2300 appname=svchost.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=55240 pid=616 appname=services.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=55218 pid=2440 appname=spoolsv.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=55217 pid=624 appname=lsass.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=49669 pid=624 appname=lsass.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=49668 pid=1656 appname=svchost.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=49667 pid=2056 appname=svchost.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=49666 pid=1144 appname=svchost.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=49665 pid=480 appname=wininit.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=49664 pid=624 appname=lsass.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=9389 pid=2660 appname=Microsoft.ActiveDirectory.WebServices.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=3389 pid=760 appname=svchost.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=3269 pid=624 appname=lsass.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=3268 pid=624 appname=lsass.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=636 pid=624 appname=lsass.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=593 pid=952 appname=svchost.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=464 pid=624 appname=lsass.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=389 pid=624 appname=lsass.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=135 pid=952 appname=svchost.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=[::] dest_port=88 pid=624 appname=lsass.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=10.0.1.6 dest_port=139 pid=4 appname=System


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=0.0.0.0 dest_port=58477 pid=2300 appname=svchost.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=0.0.0.0 dest_port=55240 pid=616 appname=services.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=0.0.0.0 dest_port=55218 pid=2440 appname=spoolsv.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=1656 appname=svchost.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=2056 appname=svchost.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1144 appname=svchost.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=480 appname=wininit.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=0.0.0.0 dest_port=9389 pid=2660 appname=Microsoft.ActiveDirectory.WebServices.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=760 appname=svchost.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=0.0.0.0 dest_port=3269 pid=624 appname=lsass.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=0.0.0.0 dest_port=3268 pid=624 appname=lsass.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=0.0.0.0 dest_port=636 pid=624 appname=lsass.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=0.0.0.0 dest_port=593 pid=952 appname=svchost.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=0.0.0.0 dest_port=464 pid=624 appname=lsass.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=0.0.0.0 dest_port=389 pid=624 appname=lsass.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=952 appname=svchost.exe


_raw: 2025-11-06 11:13:12.872 transport=TCP dest_ip=0.0.0.0 dest_port=88 pid=624 appname=lsass.exe


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=[::] dest_port=49710 pid=704 appname=services.exe


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=[::] dest_port=49709 pid=2156 appname=svchost.exe


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=[::] dest_port=49697 pid=3528 appname=svchost.exe


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=[::] dest_port=49685 pid=1656 appname=svchost.exe


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=[::] dest_port=49671 pid=2224 appname=spoolsv.exe


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=[::] dest_port=49667 pid=724 appname=lsass.exe


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=[::] dest_port=49666 pid=1140 appname=svchost.exe


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=[::] dest_port=49665 pid=580 appname=wininit.exe


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=[::] dest_port=49664 pid=724 appname=lsass.exe


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=[::] dest_port=3389 pid=512 appname=svchost.exe


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=[::] dest_port=135 pid=960 appname=svchost.exe


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=10.0.1.20 dest_port=139 pid=4 appname=System


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=0.0.0.0 dest_port=49710 pid=704 appname=services.exe


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=0.0.0.0 dest_port=49709 pid=2156 appname=svchost.exe


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=0.0.0.0 dest_port=49697 pid=3528 appname=svchost.exe


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=0.0.0.0 dest_port=49685 pid=1656 appname=svchost.exe


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2224 appname=spoolsv.exe


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1140 appname=svchost.exe


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=580 appname=wininit.exe


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=512 appname=svchost.exe


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:12:00.935 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=960 appname=svchost.exe


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=[::] dest_port=49705 pid=676 appname=services.exe


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=[::] dest_port=49698 pid=2536 appname=svchost.exe


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=[::] dest_port=49671 pid=2660 appname=spoolsv.exe


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=[::] dest_port=49669 pid=684 appname=lsass.exe


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=[::] dest_port=49668 pid=1840 appname=svchost.exe


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=[::] dest_port=49667 pid=2372 appname=svchost.exe


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=[::] dest_port=49666 pid=1364 appname=svchost.exe


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=[::] dest_port=49665 pid=532 appname=wininit.exe


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=[::] dest_port=49664 pid=684 appname=lsass.exe


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=[::] dest_port=3389 pid=1064 appname=svchost.exe


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=[::] dest_port=135 pid=916 appname=svchost.exe


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=10.0.1.20 dest_port=139 pid=4 appname=System


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=0.0.0.0 dest_port=49705 pid=676 appname=services.exe


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=0.0.0.0 dest_port=49698 pid=2536 appname=svchost.exe


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2660 appname=spoolsv.exe


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=1840 appname=svchost.exe


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=2372 appname=svchost.exe


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1364 appname=svchost.exe


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=532 appname=wininit.exe


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=1064 appname=svchost.exe


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:11:55.529 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=916 appname=svchost.exe


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=[::] dest_port=49672 pid=668 appname=services.exe


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=[::] dest_port=49671 pid=2400 appname=svchost.exe


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=[::] dest_port=49669 pid=2412 appname=spoolsv.exe


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=[::] dest_port=49668 pid=2236 appname=svchost.exe


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=[::] dest_port=49667 pid=1512 appname=svchost.exe


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=[::] dest_port=49666 pid=1160 appname=svchost.exe


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=[::] dest_port=49665 pid=524 appname=wininit.exe


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=[::] dest_port=49664 pid=676 appname=lsass.exe


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=[::] dest_port=3389 pid=436 appname=svchost.exe


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=[::] dest_port=135 pid=916 appname=svchost.exe


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=2772 appname=streamfwd.exe


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=668 appname=services.exe


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2400 appname=svchost.exe


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2412 appname=spoolsv.exe


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2236 appname=svchost.exe


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1512 appname=svchost.exe


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1160 appname=svchost.exe


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=524 appname=wininit.exe


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=436 appname=svchost.exe


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:11:39.486 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=916 appname=svchost.exe


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=[::] dest_port=49672 pid=704 appname=services.exe


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=[::] dest_port=49671 pid=2356 appname=svchost.exe


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=[::] dest_port=49669 pid=2512 appname=svchost.exe


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=[::] dest_port=49668 pid=2408 appname=spoolsv.exe


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=[::] dest_port=49667 pid=1492 appname=svchost.exe


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=[::] dest_port=49666 pid=1136 appname=svchost.exe


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=[::] dest_port=49665 pid=580 appname=wininit.exe


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=[::] dest_port=49664 pid=712 appname=lsass.exe


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=[::] dest_port=3389 pid=748 appname=svchost.exe


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=[::] dest_port=135 pid=944 appname=svchost.exe


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=1784 appname=streamfwd.exe


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=704 appname=services.exe


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2356 appname=svchost.exe


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2512 appname=svchost.exe


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2408 appname=spoolsv.exe


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1492 appname=svchost.exe


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1136 appname=svchost.exe


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=580 appname=wininit.exe


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=748 appname=svchost.exe


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:11:25.983 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=944 appname=svchost.exe


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=[::] dest_port=49672 pid=668 appname=services.exe


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=[::] dest_port=49671 pid=2492 appname=svchost.exe


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=[::] dest_port=49669 pid=2508 appname=spoolsv.exe


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=[::] dest_port=49668 pid=2316 appname=svchost.exe


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=[::] dest_port=49667 pid=1536 appname=svchost.exe


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=[::] dest_port=49666 pid=1116 appname=svchost.exe


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=[::] dest_port=49665 pid=524 appname=wininit.exe


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=[::] dest_port=49664 pid=676 appname=lsass.exe


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=[::] dest_port=3389 pid=832 appname=svchost.exe


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=[::] dest_port=135 pid=916 appname=svchost.exe


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=5048 appname=streamfwd.exe


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=668 appname=services.exe


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2492 appname=svchost.exe


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2508 appname=spoolsv.exe


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2316 appname=svchost.exe


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1536 appname=svchost.exe


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1116 appname=svchost.exe


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=524 appname=wininit.exe


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=832 appname=svchost.exe


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:11:19.935 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=916 appname=svchost.exe


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=[::] dest_port=49672 pid=712 appname=services.exe


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=[::] dest_port=49671 pid=2452 appname=svchost.exe


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=[::] dest_port=49669 pid=2460 appname=spoolsv.exe


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=[::] dest_port=49668 pid=2104 appname=svchost.exe


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=[::] dest_port=49667 pid=1552 appname=svchost.exe


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=[::] dest_port=49666 pid=1220 appname=svchost.exe


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=[::] dest_port=49665 pid=588 appname=wininit.exe


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=[::] dest_port=49664 pid=720 appname=lsass.exe


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=[::] dest_port=3389 pid=732 appname=svchost.exe


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=[::] dest_port=135 pid=952 appname=svchost.exe


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=5108 appname=streamfwd.exe


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=712 appname=services.exe


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2452 appname=svchost.exe


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2460 appname=spoolsv.exe


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2104 appname=svchost.exe


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1552 appname=svchost.exe


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1220 appname=svchost.exe


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=588 appname=wininit.exe


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=732 appname=svchost.exe


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:10:43.452 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=952 appname=svchost.exe


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=[::] dest_port=49672 pid=696 appname=services.exe


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=[::] dest_port=49671 pid=2328 appname=svchost.exe


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=[::] dest_port=49669 pid=2452 appname=spoolsv.exe


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=[::] dest_port=49668 pid=2288 appname=svchost.exe


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=[::] dest_port=49667 pid=1504 appname=svchost.exe


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=[::] dest_port=49666 pid=1128 appname=svchost.exe


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=[::] dest_port=49665 pid=552 appname=wininit.exe


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=[::] dest_port=49664 pid=704 appname=lsass.exe


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=[::] dest_port=3389 pid=668 appname=svchost.exe


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=[::] dest_port=135 pid=948 appname=svchost.exe


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=2832 appname=streamfwd.exe


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=696 appname=services.exe


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2328 appname=svchost.exe


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2452 appname=spoolsv.exe


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2288 appname=svchost.exe


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1504 appname=svchost.exe


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1128 appname=svchost.exe


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=552 appname=wininit.exe


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=668 appname=svchost.exe


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:10:20.215 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=948 appname=svchost.exe


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=[::] dest_port=49672 pid=684 appname=services.exe


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=[::] dest_port=49671 pid=2452 appname=svchost.exe


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=[::] dest_port=49669 pid=2500 appname=spoolsv.exe


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=[::] dest_port=49668 pid=2208 appname=svchost.exe


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=[::] dest_port=49667 pid=1588 appname=svchost.exe


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=[::] dest_port=49666 pid=1140 appname=svchost.exe


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=[::] dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=[::] dest_port=49664 pid=696 appname=lsass.exe


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=[::] dest_port=3389 pid=400 appname=svchost.exe


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=[::] dest_port=135 pid=932 appname=svchost.exe


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=976 appname=streamfwd.exe


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=684 appname=services.exe


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2452 appname=svchost.exe


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2500 appname=spoolsv.exe


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2208 appname=svchost.exe


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1588 appname=svchost.exe


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1140 appname=svchost.exe


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=400 appname=svchost.exe


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:10:07.186 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=932 appname=svchost.exe


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=[::] dest_port=49672 pid=700 appname=services.exe


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=[::] dest_port=49671 pid=2448 appname=svchost.exe


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=[::] dest_port=49669 pid=2528 appname=spoolsv.exe


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=[::] dest_port=49668 pid=2292 appname=svchost.exe


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=[::] dest_port=49667 pid=1552 appname=svchost.exe


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=[::] dest_port=49666 pid=1092 appname=svchost.exe


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=[::] dest_port=49665 pid=572 appname=wininit.exe


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=[::] dest_port=49664 pid=708 appname=lsass.exe


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=[::] dest_port=3389 pid=692 appname=svchost.exe


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=[::] dest_port=135 pid=948 appname=svchost.exe


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=956 appname=streamfwd.exe


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=700 appname=services.exe


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2448 appname=svchost.exe


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2528 appname=spoolsv.exe


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2292 appname=svchost.exe


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1552 appname=svchost.exe


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1092 appname=svchost.exe


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=572 appname=wininit.exe


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=692 appname=svchost.exe


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:09:53.025 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=948 appname=svchost.exe


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=[::] dest_port=49699 pid=688 appname=services.exe


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=[::] dest_port=49692 pid=2460 appname=svchost.exe


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=[::] dest_port=49684 pid=2600 appname=spoolsv.exe


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=[::] dest_port=49670 pid=708 appname=lsass.exe


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=[::] dest_port=49669 pid=2312 appname=svchost.exe


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=[::] dest_port=49668 pid=1620 appname=svchost.exe


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=[::] dest_port=49666 pid=1228 appname=svchost.exe


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=[::] dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=[::] dest_port=49664 pid=708 appname=lsass.exe


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=[::] dest_port=3389 pid=500 appname=svchost.exe


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=[::] dest_port=135 pid=944 appname=svchost.exe


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=10.0.1.21 dest_port=139 pid=4 appname=System


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=0.0.0.0 dest_port=49699 pid=688 appname=services.exe


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=0.0.0.0 dest_port=49692 pid=2460 appname=svchost.exe


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=0.0.0.0 dest_port=49684 pid=2600 appname=spoolsv.exe


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2312 appname=svchost.exe


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=1620 appname=svchost.exe


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1228 appname=svchost.exe


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=500 appname=svchost.exe


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:09:41.753 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=944 appname=svchost.exe


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=[::] dest_port=49672 pid=692 appname=services.exe


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=[::] dest_port=49671 pid=2364 appname=svchost.exe


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=[::] dest_port=49669 pid=2380 appname=spoolsv.exe


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=[::] dest_port=49668 pid=2212 appname=svchost.exe


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=[::] dest_port=49667 pid=1560 appname=svchost.exe


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=[::] dest_port=49666 pid=1136 appname=svchost.exe


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=[::] dest_port=49665 pid=548 appname=wininit.exe


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=[::] dest_port=49664 pid=700 appname=lsass.exe


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=[::] dest_port=3389 pid=540 appname=svchost.exe


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=[::] dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=3068 appname=streamfwd.exe


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=692 appname=services.exe


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2364 appname=svchost.exe


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2380 appname=spoolsv.exe


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2212 appname=svchost.exe


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1560 appname=svchost.exe


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1136 appname=svchost.exe


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=548 appname=wininit.exe


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=540 appname=svchost.exe


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:09:33.589 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=[::] dest_port=49672 pid=684 appname=services.exe


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=[::] dest_port=49671 pid=2364 appname=svchost.exe


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=[::] dest_port=49669 pid=2448 appname=spoolsv.exe


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=[::] dest_port=49668 pid=2124 appname=svchost.exe


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=[::] dest_port=49667 pid=1480 appname=svchost.exe


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=[::] dest_port=49666 pid=1136 appname=svchost.exe


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=[::] dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=[::] dest_port=49664 pid=692 appname=lsass.exe


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=[::] dest_port=3389 pid=420 appname=svchost.exe


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=[::] dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=1256 appname=streamfwd.exe


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=684 appname=services.exe


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2364 appname=svchost.exe


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2448 appname=spoolsv.exe


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2124 appname=svchost.exe


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1480 appname=svchost.exe


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1136 appname=svchost.exe


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=420 appname=svchost.exe


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:09:15.432 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=[::] dest_port=49672 pid=660 appname=services.exe


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=[::] dest_port=49671 pid=2432 appname=svchost.exe


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=[::] dest_port=49669 pid=2440 appname=spoolsv.exe


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=[::] dest_port=49668 pid=2172 appname=svchost.exe


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=[::] dest_port=49667 pid=1472 appname=svchost.exe


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=[::] dest_port=49666 pid=1148 appname=svchost.exe


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=[::] dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=[::] dest_port=49664 pid=668 appname=lsass.exe


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=[::] dest_port=3389 pid=392 appname=svchost.exe


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=[::] dest_port=135 pid=912 appname=svchost.exe


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=4788 appname=streamfwd.exe


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=660 appname=services.exe


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2432 appname=svchost.exe


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2440 appname=spoolsv.exe


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2172 appname=svchost.exe


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1472 appname=svchost.exe


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1148 appname=svchost.exe


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=392 appname=svchost.exe


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:08:29.353 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=912 appname=svchost.exe


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=[::] dest_port=49706 pid=664 appname=services.exe


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=[::] dest_port=49700 pid=2316 appname=svchost.exe


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=[::] dest_port=49689 pid=1936 appname=svchost.exe


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=[::] dest_port=49680 pid=2620 appname=svchost.exe


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=[::] dest_port=49669 pid=2436 appname=spoolsv.exe


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=[::] dest_port=49668 pid=676 appname=lsass.exe


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=[::] dest_port=49666 pid=1388 appname=svchost.exe


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=[::] dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=[::] dest_port=49664 pid=676 appname=lsass.exe


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=[::] dest_port=3389 pid=1072 appname=svchost.exe


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=[::] dest_port=135 pid=912 appname=svchost.exe


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=10.0.1.21 dest_port=139 pid=4 appname=System


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=0.0.0.0 dest_port=49706 pid=664 appname=services.exe


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=0.0.0.0 dest_port=49700 pid=2316 appname=svchost.exe


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=0.0.0.0 dest_port=49689 pid=1936 appname=svchost.exe


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=0.0.0.0 dest_port=49680 pid=2620 appname=svchost.exe


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2436 appname=spoolsv.exe


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1388 appname=svchost.exe


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=1072 appname=svchost.exe


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:07:51.761 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=912 appname=svchost.exe


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=[::] dest_port=49699 pid=664 appname=services.exe


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=[::] dest_port=49690 pid=2336 appname=svchost.exe


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=[::] dest_port=49676 pid=2520 appname=spoolsv.exe


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=[::] dest_port=49672 pid=2320 appname=svchost.exe


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=[::] dest_port=49668 pid=1752 appname=svchost.exe


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=[::] dest_port=49667 pid=672 appname=lsass.exe


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=[::] dest_port=49666 pid=1200 appname=svchost.exe


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=[::] dest_port=49665 pid=520 appname=wininit.exe


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=[::] dest_port=49664 pid=672 appname=lsass.exe


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=[::] dest_port=3389 pid=412 appname=svchost.exe


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=[::] dest_port=135 pid=916 appname=svchost.exe


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=10.0.1.20 dest_port=139 pid=4 appname=System


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=0.0.0.0 dest_port=49699 pid=664 appname=services.exe


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=0.0.0.0 dest_port=49690 pid=2336 appname=svchost.exe


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=0.0.0.0 dest_port=49676 pid=2520 appname=spoolsv.exe


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=2320 appname=svchost.exe


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=1752 appname=svchost.exe


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1200 appname=svchost.exe


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=520 appname=wininit.exe


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=412 appname=svchost.exe


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:06:44.472 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=916 appname=svchost.exe


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=[::] dest_port=49672 pid=680 appname=services.exe


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=[::] dest_port=49671 pid=2444 appname=svchost.exe


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=[::] dest_port=49669 pid=2480 appname=spoolsv.exe


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=[::] dest_port=49668 pid=2172 appname=svchost.exe


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=[::] dest_port=49667 pid=1620 appname=svchost.exe


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=[::] dest_port=49666 pid=1176 appname=svchost.exe


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=[::] dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=[::] dest_port=49664 pid=688 appname=lsass.exe


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=[::] dest_port=3389 pid=724 appname=svchost.exe


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=[::] dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=1080 appname=streamfwd.exe


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=680 appname=services.exe


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2444 appname=svchost.exe


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2480 appname=spoolsv.exe


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2172 appname=svchost.exe


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1620 appname=svchost.exe


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1176 appname=svchost.exe


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=724 appname=svchost.exe


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:06:07.118 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=[::] dest_port=49672 pid=616 appname=services.exe


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=[::] dest_port=49671 pid=2260 appname=svchost.exe


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=[::] dest_port=49670 pid=2352 appname=spoolsv.exe


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=[::] dest_port=49668 pid=2092 appname=svchost.exe


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=[::] dest_port=49667 pid=1396 appname=svchost.exe


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=[::] dest_port=49666 pid=1104 appname=svchost.exe


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=[::] dest_port=49665 pid=480 appname=wininit.exe


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=[::] dest_port=49664 pid=624 appname=lsass.exe


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=[::] dest_port=3389 pid=356 appname=svchost.exe


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=[::] dest_port=135 pid=848 appname=svchost.exe


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=3972 appname=streamfwd.exe


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=616 appname=services.exe


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2260 appname=svchost.exe


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=0.0.0.0 dest_port=49670 pid=2352 appname=spoolsv.exe


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2092 appname=svchost.exe


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1396 appname=svchost.exe


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1104 appname=svchost.exe


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=480 appname=wininit.exe


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=356 appname=svchost.exe


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:06:06.204 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=848 appname=svchost.exe


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=[::] dest_port=49672 pid=676 appname=services.exe


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=[::] dest_port=49671 pid=2440 appname=svchost.exe


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=[::] dest_port=49669 pid=2556 appname=spoolsv.exe


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=[::] dest_port=49668 pid=2192 appname=svchost.exe


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=[::] dest_port=49667 pid=1596 appname=svchost.exe


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=[::] dest_port=49666 pid=1204 appname=svchost.exe


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=[::] dest_port=49665 pid=556 appname=wininit.exe


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=[::] dest_port=49664 pid=696 appname=lsass.exe


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=[::] dest_port=3389 pid=668 appname=svchost.exe


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=[::] dest_port=135 pid=932 appname=svchost.exe


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=3236 appname=streamfwd.exe


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=676 appname=services.exe


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2440 appname=svchost.exe


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2556 appname=spoolsv.exe


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2192 appname=svchost.exe


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1596 appname=svchost.exe


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1204 appname=svchost.exe


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=556 appname=wininit.exe


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=668 appname=svchost.exe


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:05:56.129 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=932 appname=svchost.exe


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=[::] dest_port=49672 pid=672 appname=services.exe


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=[::] dest_port=49671 pid=2420 appname=svchost.exe


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=[::] dest_port=49669 pid=2492 appname=spoolsv.exe


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=[::] dest_port=49668 pid=2240 appname=svchost.exe


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=[::] dest_port=49667 pid=1504 appname=svchost.exe


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=[::] dest_port=49666 pid=1116 appname=svchost.exe


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=[::] dest_port=49665 pid=528 appname=wininit.exe


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=[::] dest_port=49664 pid=680 appname=lsass.exe


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=[::] dest_port=3389 pid=716 appname=svchost.exe


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=[::] dest_port=135 pid=920 appname=svchost.exe


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=1640 appname=streamfwd.exe


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=672 appname=services.exe


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2420 appname=svchost.exe


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2492 appname=spoolsv.exe


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2240 appname=svchost.exe


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1504 appname=svchost.exe


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1116 appname=svchost.exe


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=528 appname=wininit.exe


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=716 appname=svchost.exe


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:04:53.014 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=920 appname=svchost.exe


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=[::] dest_port=49672 pid=704 appname=services.exe


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=[::] dest_port=49671 pid=2336 appname=svchost.exe


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=[::] dest_port=49669 pid=2416 appname=spoolsv.exe


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=[::] dest_port=49668 pid=2124 appname=svchost.exe


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=[::] dest_port=49667 pid=1616 appname=svchost.exe


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=[::] dest_port=49666 pid=1236 appname=svchost.exe


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=[::] dest_port=49665 pid=560 appname=wininit.exe


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=[::] dest_port=49664 pid=724 appname=lsass.exe


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=[::] dest_port=3389 pid=520 appname=svchost.exe


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=[::] dest_port=135 pid=948 appname=svchost.exe


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=2436 appname=streamfwd.exe


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=704 appname=services.exe


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2336 appname=svchost.exe


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2416 appname=spoolsv.exe


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2124 appname=svchost.exe


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1616 appname=svchost.exe


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1236 appname=svchost.exe


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=560 appname=wininit.exe


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=520 appname=svchost.exe


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:04:25.712 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=948 appname=svchost.exe


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=[::] dest_port=49672 pid=692 appname=services.exe


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=[::] dest_port=49671 pid=2472 appname=svchost.exe


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=[::] dest_port=49669 pid=2528 appname=spoolsv.exe


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=[::] dest_port=49668 pid=2296 appname=svchost.exe


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=[::] dest_port=49667 pid=1552 appname=svchost.exe


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=[::] dest_port=49666 pid=1160 appname=svchost.exe


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=[::] dest_port=49665 pid=548 appname=wininit.exe


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=[::] dest_port=49664 pid=700 appname=lsass.exe


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=[::] dest_port=3389 pid=732 appname=svchost.exe


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=[::] dest_port=135 pid=932 appname=svchost.exe


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=2116 appname=streamfwd.exe


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=692 appname=services.exe


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2472 appname=svchost.exe


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2528 appname=spoolsv.exe


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2296 appname=svchost.exe


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1552 appname=svchost.exe


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1160 appname=svchost.exe


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=548 appname=wininit.exe


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=732 appname=svchost.exe


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:03:16.594 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=932 appname=svchost.exe


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=[::] dest_port=49702 pid=684 appname=services.exe


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=[::] dest_port=49696 pid=2528 appname=svchost.exe


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=[::] dest_port=49673 pid=2520 appname=svchost.exe


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=[::] dest_port=49669 pid=2616 appname=spoolsv.exe


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=[::] dest_port=49668 pid=692 appname=lsass.exe


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=[::] dest_port=49667 pid=1816 appname=svchost.exe


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=[::] dest_port=49666 pid=1296 appname=svchost.exe


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=[::] dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=[::] dest_port=49664 pid=692 appname=lsass.exe


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=[::] dest_port=3389 pid=860 appname=svchost.exe


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=[::] dest_port=135 pid=896 appname=svchost.exe


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=10.0.1.20 dest_port=139 pid=4 appname=System


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=0.0.0.0 dest_port=49702 pid=684 appname=services.exe


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=0.0.0.0 dest_port=49696 pid=2528 appname=svchost.exe


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=0.0.0.0 dest_port=49673 pid=2520 appname=svchost.exe


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2616 appname=spoolsv.exe


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1816 appname=svchost.exe


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1296 appname=svchost.exe


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=860 appname=svchost.exe


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:03:02.792 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=896 appname=svchost.exe


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=[::] dest_port=49672 pid=692 appname=services.exe


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=[::] dest_port=49671 pid=2476 appname=svchost.exe


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=[::] dest_port=49670 pid=2524 appname=spoolsv.exe


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=[::] dest_port=49668 pid=2320 appname=svchost.exe


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=[::] dest_port=49667 pid=1544 appname=svchost.exe


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=[::] dest_port=49666 pid=1160 appname=svchost.exe


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=[::] dest_port=49665 pid=548 appname=wininit.exe


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=[::] dest_port=49664 pid=700 appname=lsass.exe


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=[::] dest_port=3389 pid=948 appname=svchost.exe


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=[::] dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=4652 appname=streamfwd.exe


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=692 appname=services.exe


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2476 appname=svchost.exe


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=0.0.0.0 dest_port=49670 pid=2524 appname=spoolsv.exe


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2320 appname=svchost.exe


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1544 appname=svchost.exe


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1160 appname=svchost.exe


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=548 appname=wininit.exe


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=948 appname=svchost.exe


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:02:56.024 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=[::] dest_port=49672 pid=668 appname=services.exe


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=[::] dest_port=49671 pid=2520 appname=svchost.exe


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=[::] dest_port=49669 pid=2536 appname=spoolsv.exe


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=[::] dest_port=49668 pid=2200 appname=svchost.exe


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=[::] dest_port=49667 pid=1632 appname=svchost.exe


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=[::] dest_port=49666 pid=1112 appname=svchost.exe


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=[::] dest_port=49665 pid=524 appname=wininit.exe


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=[::] dest_port=49664 pid=676 appname=lsass.exe


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=[::] dest_port=3389 pid=924 appname=svchost.exe


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=[::] dest_port=135 pid=908 appname=svchost.exe


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=4088 appname=streamfwd.exe


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=668 appname=services.exe


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2520 appname=svchost.exe


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2536 appname=spoolsv.exe


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2200 appname=svchost.exe


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1632 appname=svchost.exe


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1112 appname=svchost.exe


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=524 appname=wininit.exe


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=924 appname=svchost.exe


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:02:37.844 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=908 appname=svchost.exe


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=[::] dest_port=49672 pid=684 appname=services.exe


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=[::] dest_port=49671 pid=2420 appname=svchost.exe


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=[::] dest_port=49669 pid=2436 appname=spoolsv.exe


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=[::] dest_port=49668 pid=2336 appname=svchost.exe


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=[::] dest_port=49667 pid=1484 appname=svchost.exe


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=[::] dest_port=49666 pid=1132 appname=svchost.exe


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=[::] dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=[::] dest_port=49664 pid=692 appname=lsass.exe


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=[::] dest_port=3389 pid=728 appname=svchost.exe


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=[::] dest_port=135 pid=932 appname=svchost.exe


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=4532 appname=streamfwd.exe


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=684 appname=services.exe


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2420 appname=svchost.exe


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2436 appname=spoolsv.exe


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2336 appname=svchost.exe


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1484 appname=svchost.exe


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1132 appname=svchost.exe


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=728 appname=svchost.exe


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:02:34.786 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=932 appname=svchost.exe


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=[::] dest_port=49672 pid=704 appname=services.exe


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=[::] dest_port=49671 pid=2400 appname=svchost.exe


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=[::] dest_port=49669 pid=2436 appname=spoolsv.exe


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=[::] dest_port=49668 pid=2192 appname=svchost.exe


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=[::] dest_port=49667 pid=1560 appname=svchost.exe


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=[::] dest_port=49666 pid=1152 appname=svchost.exe


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=[::] dest_port=49665 pid=560 appname=wininit.exe


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=[::] dest_port=49664 pid=712 appname=lsass.exe


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=[::] dest_port=3389 pid=960 appname=svchost.exe


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=[::] dest_port=135 pid=948 appname=svchost.exe


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=436 appname=streamfwd.exe


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=704 appname=services.exe


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2400 appname=svchost.exe


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2436 appname=spoolsv.exe


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2192 appname=svchost.exe


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1560 appname=svchost.exe


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1152 appname=svchost.exe


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=560 appname=wininit.exe


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=960 appname=svchost.exe


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:02:11.160 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=948 appname=svchost.exe


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=[::] dest_port=49690 pid=680 appname=services.exe


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=[::] dest_port=49689 pid=2468 appname=svchost.exe


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=[::] dest_port=49682 pid=2636 appname=spoolsv.exe


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=[::] dest_port=49670 pid=2356 appname=svchost.exe


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=[::] dest_port=49669 pid=692 appname=lsass.exe


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=[::] dest_port=49668 pid=1728 appname=svchost.exe


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=[::] dest_port=49666 pid=1092 appname=svchost.exe


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=[::] dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=[::] dest_port=49664 pid=692 appname=lsass.exe


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=[::] dest_port=3389 pid=500 appname=svchost.exe


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=[::] dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=10.0.1.21 dest_port=139 pid=4 appname=System


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=0.0.0.0 dest_port=49690 pid=680 appname=services.exe


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=0.0.0.0 dest_port=49689 pid=2468 appname=svchost.exe


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=0.0.0.0 dest_port=49682 pid=2636 appname=spoolsv.exe


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=0.0.0.0 dest_port=49670 pid=2356 appname=svchost.exe


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=1728 appname=svchost.exe


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1092 appname=svchost.exe


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=500 appname=svchost.exe


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:01:59.888 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=[::] dest_port=49672 pid=620 appname=services.exe


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=[::] dest_port=49671 pid=2132 appname=svchost.exe


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=[::] dest_port=49669 pid=2224 appname=spoolsv.exe


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=[::] dest_port=49668 pid=1508 appname=svchost.exe


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=[::] dest_port=49667 pid=1492 appname=svchost.exe


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=[::] dest_port=49666 pid=1064 appname=svchost.exe


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=[::] dest_port=49665 pid=488 appname=wininit.exe


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=[::] dest_port=49664 pid=628 appname=lsass.exe


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=[::] dest_port=3389 pid=344 appname=svchost.exe


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=[::] dest_port=135 pid=856 appname=svchost.exe


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=520 appname=streamfwd.exe


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=620 appname=services.exe


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2132 appname=svchost.exe


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2224 appname=spoolsv.exe


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=1508 appname=svchost.exe


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1492 appname=svchost.exe


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1064 appname=svchost.exe


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=488 appname=wininit.exe


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=344 appname=svchost.exe


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:01:58.881 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=856 appname=svchost.exe


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=[::] dest_port=49672 pid=684 appname=services.exe


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=[::] dest_port=49671 pid=2004 appname=svchost.exe


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=[::] dest_port=49670 pid=1716 appname=svchost.exe


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=[::] dest_port=49668 pid=2120 appname=spoolsv.exe


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=[::] dest_port=49667 pid=1488 appname=svchost.exe


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=[::] dest_port=49666 pid=1156 appname=svchost.exe


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=[::] dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=[::] dest_port=49664 pid=696 appname=lsass.exe


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=[::] dest_port=3389 pid=436 appname=svchost.exe


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=[::] dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=4828 appname=streamfwd.exe


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=684 appname=services.exe


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2004 appname=svchost.exe


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=0.0.0.0 dest_port=49670 pid=1716 appname=svchost.exe


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2120 appname=spoolsv.exe


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1488 appname=svchost.exe


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1156 appname=svchost.exe


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=436 appname=svchost.exe


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:01:09.254 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=[::] dest_port=49672 pid=680 appname=services.exe


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=[::] dest_port=49671 pid=2440 appname=svchost.exe


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=[::] dest_port=49669 pid=2492 appname=spoolsv.exe


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=[::] dest_port=49668 pid=2332 appname=svchost.exe


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=[::] dest_port=49667 pid=1488 appname=svchost.exe


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=[::] dest_port=49666 pid=1148 appname=svchost.exe


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=[::] dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=[::] dest_port=49664 pid=688 appname=lsass.exe


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=[::] dest_port=3389 pid=752 appname=svchost.exe


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=[::] dest_port=135 pid=944 appname=svchost.exe


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=856 appname=streamfwd.exe


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=680 appname=services.exe


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2440 appname=svchost.exe


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2492 appname=spoolsv.exe


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2332 appname=svchost.exe


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1488 appname=svchost.exe


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1148 appname=svchost.exe


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=752 appname=svchost.exe


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:01:09.039 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=944 appname=svchost.exe


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=[::] dest_port=49672 pid=696 appname=services.exe


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=[::] dest_port=49671 pid=2432 appname=svchost.exe


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=[::] dest_port=49669 pid=2452 appname=spoolsv.exe


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=[::] dest_port=49668 pid=2236 appname=svchost.exe


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=[::] dest_port=49667 pid=1508 appname=svchost.exe


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=[::] dest_port=49666 pid=1156 appname=svchost.exe


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=[::] dest_port=49665 pid=552 appname=wininit.exe


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=[::] dest_port=49664 pid=708 appname=lsass.exe


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=[::] dest_port=3389 pid=692 appname=svchost.exe


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=[::] dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=1252 appname=streamfwd.exe


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=696 appname=services.exe


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2432 appname=svchost.exe


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2452 appname=spoolsv.exe


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2236 appname=svchost.exe


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1508 appname=svchost.exe


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1156 appname=svchost.exe


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=552 appname=wininit.exe


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=692 appname=svchost.exe


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:00:29.066 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=[::] dest_port=49672 pid=672 appname=services.exe


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=[::] dest_port=49671 pid=2468 appname=svchost.exe


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=[::] dest_port=49669 pid=2556 appname=spoolsv.exe


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=[::] dest_port=49668 pid=2280 appname=svchost.exe


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=[::] dest_port=49667 pid=1536 appname=svchost.exe


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=[::] dest_port=49666 pid=1132 appname=svchost.exe


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=[::] dest_port=49665 pid=528 appname=wininit.exe


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=[::] dest_port=49664 pid=684 appname=lsass.exe


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=[::] dest_port=3389 pid=796 appname=svchost.exe


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=[::] dest_port=135 pid=920 appname=svchost.exe


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=4184 appname=streamfwd.exe


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=672 appname=services.exe


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2468 appname=svchost.exe


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2556 appname=spoolsv.exe


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2280 appname=svchost.exe


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1536 appname=svchost.exe


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1132 appname=svchost.exe


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=528 appname=wininit.exe


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=796 appname=svchost.exe


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 11:00:17.708 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=920 appname=svchost.exe


_raw: 2025-11-06 11:00:13.068 transport=TCP dest_ip=[::] dest_port=49699 pid=684 appname=services.exe


_raw: 2025-11-06 11:00:13.068 transport=TCP dest_ip=[::] dest_port=49697 pid=2572 appname=svchost.exe


_raw: 2025-11-06 11:00:13.068 transport=TCP dest_ip=[::] dest_port=49675 pid=2704 appname=spoolsv.exe