_raw: 2025-11-06 02:55:26.175 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-11-06 02:55:26.175 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:55:26.175 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:55:26.175 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:55:26.175 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=432 appname=svchost.exe


_raw: 2025-11-06 02:55:26.175 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:55:26.175 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=932 appname=svchost.exe


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=[::] dest_port=49672 pid=608 appname=services.exe


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=[::] dest_port=49671 pid=1668 appname=svchost.exe


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=[::] dest_port=49669 pid=2108 appname=spoolsv.exe


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=[::] dest_port=49668 pid=1036 appname=svchost.exe


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=[::] dest_port=49667 pid=1404 appname=svchost.exe


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=[::] dest_port=49666 pid=1132 appname=svchost.exe


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=[::] dest_port=49665 pid=472 appname=wininit.exe


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=[::] dest_port=49664 pid=616 appname=lsass.exe


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=[::] dest_port=3389 pid=332 appname=svchost.exe


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=[::] dest_port=135 pid=840 appname=svchost.exe


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=3400 appname=streamfwd.exe


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=608 appname=services.exe


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=1668 appname=svchost.exe


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2108 appname=spoolsv.exe


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=1036 appname=svchost.exe


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1404 appname=svchost.exe


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1132 appname=svchost.exe


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=472 appname=wininit.exe


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=332 appname=svchost.exe


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:55:03.739 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=840 appname=svchost.exe


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=[::] dest_port=49700 pid=684 appname=services.exe


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=[::] dest_port=49689 pid=2476 appname=svchost.exe


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=[::] dest_port=49670 pid=2576 appname=spoolsv.exe


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=[::] dest_port=49669 pid=2460 appname=svchost.exe


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=[::] dest_port=49668 pid=692 appname=lsass.exe


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=[::] dest_port=49667 pid=1856 appname=svchost.exe


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=[::] dest_port=49666 pid=1364 appname=svchost.exe


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=[::] dest_port=49665 pid=564 appname=wininit.exe


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=[::] dest_port=49664 pid=692 appname=lsass.exe


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=[::] dest_port=3389 pid=1052 appname=svchost.exe


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=[::] dest_port=135 pid=924 appname=svchost.exe


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=10.0.1.20 dest_port=139 pid=4 appname=System


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=0.0.0.0 dest_port=49700 pid=684 appname=services.exe


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=0.0.0.0 dest_port=49689 pid=2476 appname=svchost.exe


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=0.0.0.0 dest_port=49670 pid=2576 appname=spoolsv.exe


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2460 appname=svchost.exe


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1856 appname=svchost.exe


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1364 appname=svchost.exe


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=564 appname=wininit.exe


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=1052 appname=svchost.exe


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:54:56.828 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=924 appname=svchost.exe


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=[::] dest_port=49702 pid=684 appname=services.exe


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=[::] dest_port=49691 pid=2312 appname=svchost.exe


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=[::] dest_port=49683 pid=2784 appname=svchost.exe


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=[::] dest_port=49681 pid=1792 appname=svchost.exe


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=[::] dest_port=49672 pid=2440 appname=spoolsv.exe


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=[::] dest_port=49668 pid=696 appname=lsass.exe


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=[::] dest_port=49666 pid=1264 appname=svchost.exe


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=[::] dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=[::] dest_port=49664 pid=696 appname=lsass.exe


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=[::] dest_port=3389 pid=1068 appname=svchost.exe


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=[::] dest_port=135 pid=928 appname=svchost.exe


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=10.0.1.21 dest_port=139 pid=4 appname=System


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=0.0.0.0 dest_port=49702 pid=684 appname=services.exe


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=0.0.0.0 dest_port=49691 pid=2312 appname=svchost.exe


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=0.0.0.0 dest_port=49683 pid=2784 appname=svchost.exe


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=0.0.0.0 dest_port=49681 pid=1792 appname=svchost.exe


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=2440 appname=spoolsv.exe


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1264 appname=svchost.exe


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=1068 appname=svchost.exe


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:54:09.854 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=928 appname=svchost.exe


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=[::] dest_port=49672 pid=664 appname=services.exe


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=[::] dest_port=49671 pid=2356 appname=svchost.exe


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=[::] dest_port=49669 pid=2348 appname=spoolsv.exe


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=[::] dest_port=49668 pid=2148 appname=svchost.exe


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=[::] dest_port=49667 pid=1620 appname=svchost.exe


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=[::] dest_port=49666 pid=1152 appname=svchost.exe


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=[::] dest_port=49665 pid=520 appname=wininit.exe


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=[::] dest_port=49664 pid=672 appname=lsass.exe


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=[::] dest_port=3389 pid=512 appname=svchost.exe


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=[::] dest_port=135 pid=924 appname=svchost.exe


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=4528 appname=streamfwd.exe


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=664 appname=services.exe


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2356 appname=svchost.exe


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2348 appname=spoolsv.exe


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2148 appname=svchost.exe


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1620 appname=svchost.exe


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1152 appname=svchost.exe


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=520 appname=wininit.exe


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=512 appname=svchost.exe


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:54:08.775 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=924 appname=svchost.exe


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=[::] dest_port=49672 pid=700 appname=services.exe


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=[::] dest_port=49671 pid=2492 appname=svchost.exe


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=[::] dest_port=49669 pid=2540 appname=spoolsv.exe


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=[::] dest_port=49668 pid=2216 appname=svchost.exe


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=[::] dest_port=49667 pid=1496 appname=svchost.exe


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=[::] dest_port=49666 pid=1168 appname=svchost.exe


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=[::] dest_port=49665 pid=556 appname=wininit.exe


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=[::] dest_port=49664 pid=708 appname=lsass.exe


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=[::] dest_port=3389 pid=940 appname=svchost.exe


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=[::] dest_port=135 pid=948 appname=svchost.exe


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=1184 appname=streamfwd.exe


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=700 appname=services.exe


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2492 appname=svchost.exe


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2540 appname=spoolsv.exe


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2216 appname=svchost.exe


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1496 appname=svchost.exe


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1168 appname=svchost.exe


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=556 appname=wininit.exe


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=940 appname=svchost.exe


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:53:40.092 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=948 appname=svchost.exe


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=[::] dest_port=49672 pid=664 appname=services.exe


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=[::] dest_port=49671 pid=2492 appname=svchost.exe


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=[::] dest_port=49670 pid=2576 appname=spoolsv.exe


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=[::] dest_port=49668 pid=2172 appname=svchost.exe


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=[::] dest_port=49667 pid=1520 appname=svchost.exe


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=[::] dest_port=49666 pid=1092 appname=svchost.exe


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=[::] dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=[::] dest_port=49664 pid=672 appname=lsass.exe


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=[::] dest_port=3389 pid=412 appname=svchost.exe


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=[::] dest_port=135 pid=924 appname=svchost.exe


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=1000 appname=streamfwd.exe


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=664 appname=services.exe


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2492 appname=svchost.exe


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=0.0.0.0 dest_port=49670 pid=2576 appname=spoolsv.exe


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2172 appname=svchost.exe


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1520 appname=svchost.exe


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1092 appname=svchost.exe


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=412 appname=svchost.exe


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:53:34.436 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=924 appname=svchost.exe


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=[::] dest_port=49703 pid=684 appname=services.exe


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=[::] dest_port=49693 pid=2332 appname=svchost.exe


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=[::] dest_port=49670 pid=2692 appname=svchost.exe


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=[::] dest_port=49669 pid=2492 appname=spoolsv.exe


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=[::] dest_port=49668 pid=1872 appname=svchost.exe


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=[::] dest_port=49667 pid=692 appname=lsass.exe


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=[::] dest_port=49666 pid=1176 appname=svchost.exe


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=[::] dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=[::] dest_port=49664 pid=692 appname=lsass.exe


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=[::] dest_port=3389 pid=536 appname=svchost.exe


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=[::] dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=10.0.1.20 dest_port=139 pid=4 appname=System


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=0.0.0.0 dest_port=49703 pid=684 appname=services.exe


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=0.0.0.0 dest_port=49693 pid=2332 appname=svchost.exe


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=0.0.0.0 dest_port=49670 pid=2692 appname=svchost.exe


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2492 appname=spoolsv.exe


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=1872 appname=svchost.exe


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1176 appname=svchost.exe


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=536 appname=svchost.exe


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:53:05.122 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=[::] dest_port=49672 pid=616 appname=services.exe


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=[::] dest_port=49671 pid=2228 appname=svchost.exe


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=[::] dest_port=49669 pid=2324 appname=spoolsv.exe


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=[::] dest_port=49668 pid=348 appname=svchost.exe


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=[::] dest_port=49667 pid=1476 appname=svchost.exe


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=[::] dest_port=49666 pid=1148 appname=svchost.exe


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=[::] dest_port=49665 pid=500 appname=wininit.exe


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=[::] dest_port=49664 pid=636 appname=lsass.exe


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=[::] dest_port=3389 pid=360 appname=svchost.exe


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=[::] dest_port=135 pid=816 appname=svchost.exe


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=3856 appname=streamfwd.exe


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=616 appname=services.exe


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2228 appname=svchost.exe


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2324 appname=spoolsv.exe


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=348 appname=svchost.exe


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1476 appname=svchost.exe


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1148 appname=svchost.exe


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=500 appname=wininit.exe


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=360 appname=svchost.exe


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:52:50.953 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=816 appname=svchost.exe


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=[::] dest_port=49695 pid=680 appname=services.exe


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=[::] dest_port=49690 pid=2524 appname=svchost.exe


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=[::] dest_port=49670 pid=2720 appname=spoolsv.exe


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=[::] dest_port=49669 pid=692 appname=lsass.exe


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=[::] dest_port=49668 pid=2340 appname=svchost.exe


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=[::] dest_port=49667 pid=1808 appname=svchost.exe


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=[::] dest_port=49666 pid=1184 appname=svchost.exe


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=[::] dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=[::] dest_port=49664 pid=692 appname=lsass.exe


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=[::] dest_port=3389 pid=452 appname=svchost.exe


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=[::] dest_port=135 pid=932 appname=svchost.exe


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=10.0.1.20 dest_port=139 pid=4 appname=System


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=0.0.0.0 dest_port=49695 pid=680 appname=services.exe


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=0.0.0.0 dest_port=49690 pid=2524 appname=svchost.exe


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=0.0.0.0 dest_port=49670 pid=2720 appname=spoolsv.exe


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2340 appname=svchost.exe


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1808 appname=svchost.exe


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1184 appname=svchost.exe


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=452 appname=svchost.exe


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:52:47.396 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=932 appname=svchost.exe


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=[::] dest_port=49672 pid=684 appname=services.exe


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=[::] dest_port=49671 pid=2456 appname=svchost.exe


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=[::] dest_port=49669 pid=2496 appname=spoolsv.exe


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=[::] dest_port=49668 pid=2052 appname=svchost.exe


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=[::] dest_port=49667 pid=1512 appname=svchost.exe


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=[::] dest_port=49666 pid=1160 appname=svchost.exe


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=[::] dest_port=49665 pid=548 appname=wininit.exe


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=[::] dest_port=49664 pid=692 appname=lsass.exe


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=[::] dest_port=3389 pid=764 appname=svchost.exe


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=[::] dest_port=135 pid=932 appname=svchost.exe


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=4760 appname=streamfwd.exe


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=684 appname=services.exe


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2456 appname=svchost.exe


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2496 appname=spoolsv.exe


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2052 appname=svchost.exe


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1512 appname=svchost.exe


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1160 appname=svchost.exe


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=548 appname=wininit.exe


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=764 appname=svchost.exe


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:52:43.305 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=932 appname=svchost.exe


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=[::] dest_port=49672 pid=672 appname=services.exe


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=[::] dest_port=49671 pid=2488 appname=svchost.exe


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=[::] dest_port=49669 pid=2520 appname=spoolsv.exe


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=[::] dest_port=49668 pid=2180 appname=svchost.exe


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=[::] dest_port=49667 pid=1500 appname=svchost.exe


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=[::] dest_port=49666 pid=1200 appname=svchost.exe


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=[::] dest_port=49665 pid=552 appname=wininit.exe


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=[::] dest_port=49664 pid=692 appname=lsass.exe


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=[::] dest_port=3389 pid=704 appname=svchost.exe


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=[::] dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=4832 appname=streamfwd.exe


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=672 appname=services.exe


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2488 appname=svchost.exe


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2520 appname=spoolsv.exe


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2180 appname=svchost.exe


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1500 appname=svchost.exe


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1200 appname=svchost.exe


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=552 appname=wininit.exe


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=704 appname=svchost.exe


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:52:37.918 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=[::] dest_port=49672 pid=684 appname=services.exe


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=[::] dest_port=49671 pid=2516 appname=svchost.exe


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=[::] dest_port=49669 pid=2488 appname=spoolsv.exe


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=[::] dest_port=49668 pid=2228 appname=svchost.exe


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=[::] dest_port=49667 pid=1536 appname=svchost.exe


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=[::] dest_port=49666 pid=1172 appname=svchost.exe


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=[::] dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=[::] dest_port=49664 pid=696 appname=lsass.exe


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=[::] dest_port=3389 pid=656 appname=svchost.exe


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=[::] dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=1480 appname=streamfwd.exe


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=684 appname=services.exe


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2516 appname=svchost.exe


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2488 appname=spoolsv.exe


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2228 appname=svchost.exe


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1536 appname=svchost.exe


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1172 appname=svchost.exe


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=656 appname=svchost.exe


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:52:34.418 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=[::] dest_port=49672 pid=684 appname=services.exe


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=[::] dest_port=49671 pid=2540 appname=svchost.exe


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=[::] dest_port=49669 pid=2524 appname=spoolsv.exe


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=[::] dest_port=49668 pid=2240 appname=svchost.exe


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=[::] dest_port=49667 pid=1576 appname=svchost.exe


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=[::] dest_port=49666 pid=1176 appname=svchost.exe


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=[::] dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=[::] dest_port=49664 pid=692 appname=lsass.exe


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=[::] dest_port=3389 pid=724 appname=svchost.exe


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=[::] dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=1108 appname=streamfwd.exe


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=684 appname=services.exe


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2540 appname=svchost.exe


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2524 appname=spoolsv.exe


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2240 appname=svchost.exe


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1576 appname=svchost.exe


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1176 appname=svchost.exe


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=724 appname=svchost.exe


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:52:31.069 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=[::] dest_port=49676 pid=684 appname=services.exe


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=[::] dest_port=49675 pid=2516 appname=svchost.exe


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=[::] dest_port=49674 pid=2564 appname=spoolsv.exe


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=[::] dest_port=49669 pid=2324 appname=svchost.exe


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=[::] dest_port=49667 pid=1468 appname=svchost.exe


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=[::] dest_port=49666 pid=1080 appname=svchost.exe


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=[::] dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=[::] dest_port=49664 pid=696 appname=lsass.exe


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=[::] dest_port=3389 pid=760 appname=svchost.exe


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=[::] dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=4560 appname=streamfwd.exe


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=0.0.0.0 dest_port=49676 pid=684 appname=services.exe


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=0.0.0.0 dest_port=49675 pid=2516 appname=svchost.exe


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=0.0.0.0 dest_port=49674 pid=2564 appname=spoolsv.exe


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2324 appname=svchost.exe


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1468 appname=svchost.exe


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1080 appname=svchost.exe


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=540 appname=wininit.exe


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=760 appname=svchost.exe


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:52:30.610 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=[::] dest_port=49672 pid=704 appname=services.exe


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=[::] dest_port=49671 pid=2152 appname=svchost.exe


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=[::] dest_port=49670 pid=3196 appname=svchost.exe


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=[::] dest_port=49668 pid=2192 appname=spoolsv.exe


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=[::] dest_port=49667 pid=1540 appname=svchost.exe


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=[::] dest_port=49666 pid=1196 appname=svchost.exe


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=[::] dest_port=49665 pid=560 appname=wininit.exe


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=[::] dest_port=49664 pid=712 appname=lsass.exe


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=[::] dest_port=3389 pid=832 appname=svchost.exe


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=[::] dest_port=135 pid=964 appname=svchost.exe


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=468 appname=streamfwd.exe


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=704 appname=services.exe


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2152 appname=svchost.exe


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=0.0.0.0 dest_port=49670 pid=3196 appname=svchost.exe


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2192 appname=spoolsv.exe


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1540 appname=svchost.exe


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1196 appname=svchost.exe


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=560 appname=wininit.exe


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=832 appname=svchost.exe


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:52:11.909 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=964 appname=svchost.exe


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=[::] dest_port=49672 pid=676 appname=services.exe


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=[::] dest_port=49671 pid=2512 appname=svchost.exe


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=[::] dest_port=49670 pid=2488 appname=spoolsv.exe


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=[::] dest_port=49668 pid=1524 appname=svchost.exe


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=[::] dest_port=49667 pid=1572 appname=svchost.exe


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=[::] dest_port=49666 pid=1088 appname=svchost.exe


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=[::] dest_port=49665 pid=532 appname=wininit.exe


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=[::] dest_port=49664 pid=684 appname=lsass.exe


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=[::] dest_port=3389 pid=448 appname=svchost.exe


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=[::] dest_port=135 pid=924 appname=svchost.exe


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=4224 appname=streamfwd.exe


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=676 appname=services.exe


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2512 appname=svchost.exe


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=0.0.0.0 dest_port=49670 pid=2488 appname=spoolsv.exe


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=1524 appname=svchost.exe


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1572 appname=svchost.exe


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1088 appname=svchost.exe


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=532 appname=wininit.exe


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=448 appname=svchost.exe


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:51:42.910 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=924 appname=svchost.exe


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=[::] dest_port=49705 pid=696 appname=services.exe


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=[::] dest_port=49703 pid=2488 appname=svchost.exe


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=[::] dest_port=49674 pid=2796 appname=svchost.exe


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=[::] dest_port=49671 pid=2628 appname=spoolsv.exe


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=[::] dest_port=49670 pid=704 appname=lsass.exe


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=[::] dest_port=49668 pid=1720 appname=svchost.exe


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=[::] dest_port=49666 pid=1320 appname=svchost.exe


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=[::] dest_port=49665 pid=552 appname=wininit.exe


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=[::] dest_port=49664 pid=704 appname=lsass.exe


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=[::] dest_port=3389 pid=1072 appname=svchost.exe


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=[::] dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=10.0.1.21 dest_port=139 pid=4 appname=System


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=0.0.0.0 dest_port=49705 pid=696 appname=services.exe


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=0.0.0.0 dest_port=49703 pid=2488 appname=svchost.exe


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=0.0.0.0 dest_port=49674 pid=2796 appname=svchost.exe


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2628 appname=spoolsv.exe


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=1720 appname=svchost.exe


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1320 appname=svchost.exe


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=552 appname=wininit.exe


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=1072 appname=svchost.exe


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:51:27.126 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=940 appname=svchost.exe


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=[::] dest_port=49710 pid=676 appname=services.exe


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=[::] dest_port=49701 pid=2732 appname=svchost.exe


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=[::] dest_port=49677 pid=2812 appname=spoolsv.exe


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=[::] dest_port=49675 pid=684 appname=lsass.exe


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=[::] dest_port=49669 pid=2268 appname=svchost.exe


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=[::] dest_port=49668 pid=1660 appname=svchost.exe


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=[::] dest_port=49666 pid=1168 appname=svchost.exe


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=[::] dest_port=49665 pid=532 appname=wininit.exe


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=[::] dest_port=49664 pid=684 appname=lsass.exe


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=[::] dest_port=3389 pid=528 appname=svchost.exe


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=[::] dest_port=135 pid=932 appname=svchost.exe


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=10.0.1.21 dest_port=139 pid=4 appname=System


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=0.0.0.0 dest_port=49710 pid=676 appname=services.exe


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=0.0.0.0 dest_port=49701 pid=2732 appname=svchost.exe


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=0.0.0.0 dest_port=49677 pid=2812 appname=spoolsv.exe


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2268 appname=svchost.exe


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=1660 appname=svchost.exe


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1168 appname=svchost.exe


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=532 appname=wininit.exe


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=528 appname=svchost.exe


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:51:26.077 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=932 appname=svchost.exe


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=[::] dest_port=49672 pid=696 appname=services.exe


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=[::] dest_port=49671 pid=2472 appname=svchost.exe


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=[::] dest_port=49669 pid=2456 appname=spoolsv.exe


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=[::] dest_port=49668 pid=2152 appname=svchost.exe


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=[::] dest_port=49667 pid=1592 appname=svchost.exe


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=[::] dest_port=49666 pid=1124 appname=svchost.exe


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=[::] dest_port=49665 pid=552 appname=wininit.exe


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=[::] dest_port=49664 pid=704 appname=lsass.exe


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=[::] dest_port=3389 pid=432 appname=svchost.exe


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=[::] dest_port=135 pid=956 appname=svchost.exe


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=2212 appname=streamfwd.exe


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=696 appname=services.exe


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2472 appname=svchost.exe


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2456 appname=spoolsv.exe


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2152 appname=svchost.exe


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1592 appname=svchost.exe


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1124 appname=svchost.exe


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=552 appname=wininit.exe


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=432 appname=svchost.exe


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:51:14.592 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=956 appname=svchost.exe


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=[::] dest_port=49672 pid=680 appname=services.exe


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=[::] dest_port=49670 pid=2424 appname=svchost.exe


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=[::] dest_port=49669 pid=2564 appname=spoolsv.exe


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=[::] dest_port=49668 pid=1612 appname=svchost.exe


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=[::] dest_port=49667 pid=2152 appname=svchost.exe


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=[::] dest_port=49666 pid=1156 appname=svchost.exe


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=[::] dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=[::] dest_port=49664 pid=688 appname=lsass.exe


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=[::] dest_port=3389 pid=804 appname=svchost.exe


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=[::] dest_port=135 pid=932 appname=svchost.exe


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=1796 appname=streamfwd.exe


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=680 appname=services.exe


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=0.0.0.0 dest_port=49670 pid=2424 appname=svchost.exe


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2564 appname=spoolsv.exe


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=1612 appname=svchost.exe


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=2152 appname=svchost.exe


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1156 appname=svchost.exe


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=804 appname=svchost.exe


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:50:44.715 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=932 appname=svchost.exe


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=[::] dest_port=49672 pid=688 appname=services.exe


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=[::] dest_port=49671 pid=2480 appname=svchost.exe


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=[::] dest_port=49669 pid=2528 appname=spoolsv.exe


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=[::] dest_port=49668 pid=2332 appname=svchost.exe


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=[::] dest_port=49667 pid=1436 appname=svchost.exe


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=[::] dest_port=49666 pid=1112 appname=svchost.exe


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=[::] dest_port=49665 pid=576 appname=wininit.exe


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=[::] dest_port=49664 pid=696 appname=lsass.exe


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=[::] dest_port=3389 pid=772 appname=svchost.exe


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=[::] dest_port=135 pid=944 appname=svchost.exe


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=1064 appname=streamfwd.exe


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=688 appname=services.exe


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2480 appname=svchost.exe


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2528 appname=spoolsv.exe


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2332 appname=svchost.exe


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1436 appname=svchost.exe


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1112 appname=svchost.exe


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=576 appname=wininit.exe


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=772 appname=svchost.exe


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:50:33.798 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=944 appname=svchost.exe


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=[::] dest_port=49672 pid=684 appname=services.exe


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=[::] dest_port=49671 pid=2484 appname=svchost.exe


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=[::] dest_port=49669 pid=2496 appname=spoolsv.exe


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=[::] dest_port=49668 pid=2300 appname=svchost.exe


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=[::] dest_port=49667 pid=1488 appname=svchost.exe


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=[::] dest_port=49666 pid=1128 appname=svchost.exe


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=[::] dest_port=49665 pid=560 appname=wininit.exe


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=[::] dest_port=49664 pid=704 appname=lsass.exe


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=[::] dest_port=3389 pid=500 appname=svchost.exe


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=[::] dest_port=135 pid=944 appname=svchost.exe


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=4612 appname=streamfwd.exe


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=684 appname=services.exe


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2484 appname=svchost.exe


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2496 appname=spoolsv.exe


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2300 appname=svchost.exe


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1488 appname=svchost.exe


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1128 appname=svchost.exe


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=560 appname=wininit.exe


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=500 appname=svchost.exe


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:50:31.730 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=944 appname=svchost.exe


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=[::] dest_port=49672 pid=676 appname=services.exe


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=[::] dest_port=49671 pid=2368 appname=svchost.exe


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=[::] dest_port=49669 pid=2452 appname=spoolsv.exe


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=[::] dest_port=49668 pid=2168 appname=svchost.exe


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=[::] dest_port=49667 pid=1612 appname=svchost.exe


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=[::] dest_port=49666 pid=1132 appname=svchost.exe


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=[::] dest_port=49665 pid=532 appname=wininit.exe


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=[::] dest_port=49664 pid=696 appname=lsass.exe


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=[::] dest_port=3389 pid=820 appname=svchost.exe


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=[::] dest_port=135 pid=924 appname=svchost.exe


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=1692 appname=streamfwd.exe


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=676 appname=services.exe


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2368 appname=svchost.exe


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2452 appname=spoolsv.exe


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2168 appname=svchost.exe


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1612 appname=svchost.exe


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1132 appname=svchost.exe


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=532 appname=wininit.exe


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=820 appname=svchost.exe


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:50:23.502 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=924 appname=svchost.exe


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=[::] dest_port=49672 pid=676 appname=services.exe


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=[::] dest_port=49671 pid=2436 appname=svchost.exe


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=[::] dest_port=49669 pid=2564 appname=spoolsv.exe


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=[::] dest_port=49668 pid=2252 appname=svchost.exe


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=[::] dest_port=49667 pid=1624 appname=svchost.exe


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=[::] dest_port=49666 pid=1196 appname=svchost.exe


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=[::] dest_port=49665 pid=532 appname=wininit.exe


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=[::] dest_port=49664 pid=684 appname=lsass.exe


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=[::] dest_port=3389 pid=492 appname=svchost.exe


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=[::] dest_port=135 pid=928 appname=svchost.exe


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=4704 appname=streamfwd.exe


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=676 appname=services.exe


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2436 appname=svchost.exe


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2564 appname=spoolsv.exe


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2252 appname=svchost.exe


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1624 appname=svchost.exe


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1196 appname=svchost.exe


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=532 appname=wininit.exe


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=492 appname=svchost.exe


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:50:14.636 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=928 appname=svchost.exe


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=[::] dest_port=49691 pid=2348 appname=svchost.exe


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=[::] dest_port=49690 pid=688 appname=services.exe


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=[::] dest_port=49675 pid=2500 appname=spoolsv.exe


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=[::] dest_port=49671 pid=2444 appname=svchost.exe


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=[::] dest_port=49669 pid=1760 appname=svchost.exe


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=[::] dest_port=49668 pid=696 appname=lsass.exe


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=[::] dest_port=49666 pid=1192 appname=svchost.exe


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=[::] dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=[::] dest_port=49664 pid=696 appname=lsass.exe


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=[::] dest_port=3389 pid=440 appname=svchost.exe


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=[::] dest_port=135 pid=948 appname=svchost.exe


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=10.0.1.21 dest_port=139 pid=4 appname=System


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=0.0.0.0 dest_port=49691 pid=2348 appname=svchost.exe


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=0.0.0.0 dest_port=49690 pid=688 appname=services.exe


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=0.0.0.0 dest_port=49675 pid=2500 appname=spoolsv.exe


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2444 appname=svchost.exe


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=1760 appname=svchost.exe


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1192 appname=svchost.exe


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=544 appname=wininit.exe


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=440 appname=svchost.exe


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:50:13.154 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=948 appname=svchost.exe


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=[::] dest_port=49672 pid=680 appname=services.exe


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=[::] dest_port=49671 pid=2488 appname=svchost.exe


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=[::] dest_port=49670 pid=2528 appname=spoolsv.exe


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=[::] dest_port=49668 pid=2304 appname=svchost.exe


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=[::] dest_port=49667 pid=1524 appname=svchost.exe


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=[::] dest_port=49666 pid=1128 appname=svchost.exe


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=[::] dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=[::] dest_port=49664 pid=692 appname=lsass.exe


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=[::] dest_port=3389 pid=752 appname=svchost.exe


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=[::] dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=832 appname=streamfwd.exe


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=680 appname=services.exe


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2488 appname=svchost.exe


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=0.0.0.0 dest_port=49670 pid=2528 appname=spoolsv.exe


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2304 appname=svchost.exe


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1524 appname=svchost.exe


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1128 appname=svchost.exe


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=752 appname=svchost.exe


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:50:01.624 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=936 appname=svchost.exe


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=[::] dest_port=49672 pid=672 appname=services.exe


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=[::] dest_port=49671 pid=2452 appname=svchost.exe


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=[::] dest_port=49669 pid=2484 appname=spoolsv.exe


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=[::] dest_port=49668 pid=2268 appname=svchost.exe


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=[::] dest_port=49667 pid=1504 appname=svchost.exe


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=[::] dest_port=49666 pid=1104 appname=svchost.exe


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=[::] dest_port=49665 pid=528 appname=wininit.exe


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=[::] dest_port=49664 pid=680 appname=lsass.exe


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=[::] dest_port=3389 pid=760 appname=svchost.exe


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=[::] dest_port=135 pid=928 appname=svchost.exe


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=2172 appname=streamfwd.exe


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=672 appname=services.exe


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2452 appname=svchost.exe


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2484 appname=spoolsv.exe


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2268 appname=svchost.exe


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1504 appname=svchost.exe


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1104 appname=svchost.exe


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=528 appname=wininit.exe


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=760 appname=svchost.exe


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:49:31.761 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=928 appname=svchost.exe


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=[::] dest_port=49672 pid=660 appname=services.exe


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=[::] dest_port=49671 pid=2436 appname=svchost.exe


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=[::] dest_port=49669 pid=2448 appname=spoolsv.exe


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=[::] dest_port=49668 pid=2244 appname=svchost.exe


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=[::] dest_port=49667 pid=1504 appname=svchost.exe


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=[::] dest_port=49666 pid=1168 appname=svchost.exe


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=[::] dest_port=49665 pid=516 appname=wininit.exe


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=[::] dest_port=49664 pid=668 appname=lsass.exe


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=[::] dest_port=3389 pid=812 appname=svchost.exe


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=[::] dest_port=135 pid=912 appname=svchost.exe


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=2164 appname=streamfwd.exe


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=660 appname=services.exe


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2436 appname=svchost.exe


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2448 appname=spoolsv.exe


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2244 appname=svchost.exe


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1504 appname=svchost.exe


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1168 appname=svchost.exe


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=516 appname=wininit.exe


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=812 appname=svchost.exe


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:49:28.860 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=912 appname=svchost.exe


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=[::] dest_port=49688 pid=668 appname=services.exe


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=[::] dest_port=49687 pid=2424 appname=svchost.exe


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=[::] dest_port=49678 pid=2708 appname=spoolsv.exe


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=[::] dest_port=49670 pid=680 appname=lsass.exe


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=[::] dest_port=49669 pid=2304 appname=svchost.exe


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=[::] dest_port=49668 pid=1784 appname=svchost.exe


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=[::] dest_port=49666 pid=1124 appname=svchost.exe


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=[::] dest_port=49665 pid=548 appname=wininit.exe


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=[::] dest_port=49664 pid=680 appname=lsass.exe


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=[::] dest_port=3389 pid=936 appname=svchost.exe


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=[::] dest_port=135 pid=924 appname=svchost.exe


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=10.0.1.21 dest_port=139 pid=4 appname=System


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=0.0.0.0 dest_port=49688 pid=668 appname=services.exe


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=0.0.0.0 dest_port=49687 pid=2424 appname=svchost.exe


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=0.0.0.0 dest_port=49678 pid=2708 appname=spoolsv.exe


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2304 appname=svchost.exe


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=1784 appname=svchost.exe


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1124 appname=svchost.exe


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=548 appname=wininit.exe


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=936 appname=svchost.exe


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:49:00.400 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=924 appname=svchost.exe


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=[::] dest_port=49672 pid=620 appname=services.exe


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=[::] dest_port=49671 pid=2316 appname=svchost.exe


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=[::] dest_port=49670 pid=2324 appname=spoolsv.exe


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=[::] dest_port=49668 pid=1652 appname=svchost.exe


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=[::] dest_port=49667 pid=1336 appname=svchost.exe


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=[::] dest_port=49666 pid=1032 appname=svchost.exe


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=[::] dest_port=49665 pid=504 appname=wininit.exe


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=[::] dest_port=49664 pid=640 appname=lsass.exe


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=[::] dest_port=3389 pid=436 appname=svchost.exe


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=[::] dest_port=135 pid=844 appname=svchost.exe


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=1128 appname=streamfwd.exe


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=620 appname=services.exe


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2316 appname=svchost.exe


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=0.0.0.0 dest_port=49670 pid=2324 appname=spoolsv.exe


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=1652 appname=svchost.exe


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1336 appname=svchost.exe


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1032 appname=svchost.exe


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=504 appname=wininit.exe


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=436 appname=svchost.exe


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:48:24.144 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=844 appname=svchost.exe


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=[::] dest_port=49672 pid=680 appname=services.exe


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=[::] dest_port=49671 pid=2528 appname=svchost.exe


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=[::] dest_port=49670 pid=2576 appname=spoolsv.exe


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=[::] dest_port=49668 pid=2028 appname=svchost.exe


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=[::] dest_port=49667 pid=1456 appname=svchost.exe


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=[::] dest_port=49666 pid=1240 appname=svchost.exe


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=[::] dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=[::] dest_port=49664 pid=692 appname=lsass.exe


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=[::] dest_port=3389 pid=832 appname=svchost.exe


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=[::] dest_port=135 pid=884 appname=svchost.exe


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=1920 appname=streamfwd.exe


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=680 appname=services.exe


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2528 appname=svchost.exe


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=0.0.0.0 dest_port=49670 pid=2576 appname=spoolsv.exe


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2028 appname=svchost.exe


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1456 appname=svchost.exe


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1240 appname=svchost.exe


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=536 appname=wininit.exe


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=832 appname=svchost.exe


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:47:59.455 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=884 appname=svchost.exe


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=[::] dest_port=49672 pid=696 appname=services.exe


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=[::] dest_port=49671 pid=2460 appname=svchost.exe


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=[::] dest_port=49669 pid=2484 appname=spoolsv.exe


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=[::] dest_port=49668 pid=2212 appname=svchost.exe


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=[::] dest_port=49667 pid=1536 appname=svchost.exe


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=[::] dest_port=49666 pid=1156 appname=svchost.exe


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=[::] dest_port=49665 pid=552 appname=wininit.exe


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=[::] dest_port=49664 pid=704 appname=lsass.exe


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=[::] dest_port=3389 pid=692 appname=svchost.exe


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=[::] dest_port=135 pid=944 appname=svchost.exe


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=3648 appname=streamfwd.exe


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=0.0.0.0 dest_port=49672 pid=696 appname=services.exe


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2460 appname=svchost.exe


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2484 appname=spoolsv.exe


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2212 appname=svchost.exe


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1536 appname=svchost.exe


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1156 appname=svchost.exe


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=552 appname=wininit.exe


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=692 appname=svchost.exe


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:47:26.762 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=944 appname=svchost.exe


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=[::] dest_port=49700 pid=700 appname=services.exe


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=[::] dest_port=49694 pid=2516 appname=svchost.exe


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=[::] dest_port=49674 pid=2604 appname=spoolsv.exe


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=[::] dest_port=49669 pid=2388 appname=svchost.exe


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=[::] dest_port=49668 pid=708 appname=lsass.exe


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=[::] dest_port=49667 pid=1804 appname=svchost.exe


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=[::] dest_port=49666 pid=1196 appname=svchost.exe


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=[::] dest_port=49665 pid=556 appname=wininit.exe


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=[::] dest_port=49664 pid=708 appname=lsass.exe


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=[::] dest_port=3389 pid=744 appname=svchost.exe


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=[::] dest_port=135 pid=956 appname=svchost.exe


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=10.0.1.20 dest_port=139 pid=4 appname=System


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=0.0.0.0 dest_port=49700 pid=700 appname=services.exe


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=0.0.0.0 dest_port=49694 pid=2516 appname=svchost.exe


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=0.0.0.0 dest_port=49674 pid=2604 appname=spoolsv.exe


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=0.0.0.0 dest_port=49669 pid=2388 appname=svchost.exe


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1804 appname=svchost.exe


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1196 appname=svchost.exe


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=556 appname=wininit.exe


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=744 appname=svchost.exe


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:47:18.444 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=956 appname=svchost.exe


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=[::] dest_port=49673 pid=676 appname=services.exe


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=[::] dest_port=49671 pid=2512 appname=svchost.exe


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=[::] dest_port=49670 pid=2520 appname=spoolsv.exe


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=[::] dest_port=49668 pid=2364 appname=svchost.exe


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=[::] dest_port=49667 pid=1532 appname=svchost.exe


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=[::] dest_port=49666 pid=1120 appname=svchost.exe


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=[::] dest_port=49665 pid=532 appname=wininit.exe


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=[::] dest_port=49664 pid=684 appname=lsass.exe


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=[::] dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=[::] dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=[::] dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=[::] dest_port=3389 pid=720 appname=svchost.exe


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=[::] dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=[::] dest_port=135 pid=924 appname=svchost.exe


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=127.0.0.1 dest_port=8889 pid=836 appname=streamfwd.exe


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=0.0.0.0 dest_port=49673 pid=676 appname=services.exe


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=0.0.0.0 dest_port=49671 pid=2512 appname=svchost.exe


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=0.0.0.0 dest_port=49670 pid=2520 appname=spoolsv.exe


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=0.0.0.0 dest_port=49668 pid=2364 appname=svchost.exe


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=0.0.0.0 dest_port=49667 pid=1532 appname=svchost.exe


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=0.0.0.0 dest_port=49666 pid=1120 appname=svchost.exe


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=0.0.0.0 dest_port=49665 pid=532 appname=wininit.exe


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=0.0.0.0 dest_port=47001 pid=4 appname=System


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=0.0.0.0 dest_port=5986 pid=4 appname=System


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=0.0.0.0 dest_port=5985 pid=4 appname=System


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=0.0.0.0 dest_port=3389 pid=720 appname=svchost.exe


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=0.0.0.0 dest_port=445 pid=4 appname=System


_raw: 2025-11-06 02:47:18.051 transport=TCP dest_ip=0.0.0.0 dest_port=135 pid=924 appname=svchost.exe


_raw: 2025-11-06 02:47:16.242 transport=TCP dest_ip=[::] dest_port=49672 pid=680 appname=services.exe


_raw: 2025-11-06 02:47:16.242 transport=TCP dest_ip=[::] dest_port=49671 pid=2476 appname=svchost.exe


_raw: 2025-11-06 02:47:16.242 transport=TCP dest_ip=[::] dest_port=49669 pid=2456 appname=spoolsv.exe


_raw: 2025-11-06 02:47:16.242 transport=TCP dest_ip=[::] dest_port=49668 pid=2188 appname=svchost.exe


_raw: 2025-11-06 02:47:16.242 transport=TCP dest_ip=[::] dest_port=49667 pid=1596 appname=svchost.exe


_raw: 2025-11-06 02:47:16.242 transport=TCP dest_ip=[::] dest_port=49666 pid=1136 appname=svchost.exe


_raw: 2025-11-06 02:47:16.242 transport=TCP dest_ip=[::] dest_port=49665 pid=560 appname=wininit.exe


_raw: 2025-11-06 02:47:16.242 transport=TCP dest_ip=[::] dest_port=49664 pid=688 appname=lsass.exe