xmrig | 516be2e243417ba11714f007299b4e5c5fd356d2353878c80b0f296891eac3ab

Analysis

max time kernel
157s
max time network
167s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10/05/2024, 12:05 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
Size

3.3MB
MD5

daeb2e0e8daa69b0f36c808995a93080
SHA1

907498436ef845c53707e8b4caa0205b995f16f5
SHA256

516be2e243417ba11714f007299b4e5c5fd356d2353878c80b0f296891eac3ab
SHA512

645252f4e9031b5bcf909172187c798084c85a6553e21baaf2a0aeb8d7f51af6557a7c073879e78f29d0daf22222cd92e2792b3ac48a134a6738b7e97c3c2f50
SSDEEP

98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWJ:SbBeSFkd

Score

10^/10

xmrig execution miner upx

Malware Config

Signatures

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

XMRig Miner payload 64 IoCs

miner

resource	yara_rule
behavioral2/memory/784-0-0x00007FF64FA10000-0x00007FF64FE06000-memory.dmp	xmrig
behavioral2/files/0x000800000002323e-16.dat	xmrig
behavioral2/files/0x0008000000023243-19.dat	xmrig
behavioral2/files/0x0009000000023245-18.dat	xmrig
behavioral2/files/0x0009000000023246-32.dat	xmrig
behavioral2/files/0x0007000000023247-35.dat	xmrig
behavioral2/files/0x0007000000023248-40.dat	xmrig
behavioral2/files/0x0007000000023249-46.dat	xmrig
behavioral2/files/0x000700000002324a-50.dat	xmrig
behavioral2/files/0x000700000002324b-55.dat	xmrig
behavioral2/memory/1472-60-0x00007FF64E580000-0x00007FF64E976000-memory.dmp	xmrig
behavioral2/memory/2228-61-0x00007FF64F7C0000-0x00007FF64FBB6000-memory.dmp	xmrig
behavioral2/memory/2820-63-0x00007FF76D260000-0x00007FF76D656000-memory.dmp	xmrig
behavioral2/memory/1056-65-0x00007FF652420000-0x00007FF652816000-memory.dmp	xmrig
behavioral2/memory/324-64-0x00007FF7DAF10000-0x00007FF7DB306000-memory.dmp	xmrig
behavioral2/memory/680-66-0x00007FF6EBF50000-0x00007FF6EC346000-memory.dmp	xmrig
behavioral2/memory/3012-62-0x00007FF65AAB0000-0x00007FF65AEA6000-memory.dmp	xmrig
behavioral2/memory/3096-67-0x00007FF69FFE0000-0x00007FF6A03D6000-memory.dmp	xmrig
behavioral2/memory/3804-70-0x00007FF6A73F0000-0x00007FF6A77E6000-memory.dmp	xmrig
behavioral2/files/0x000700000002324c-69.dat	xmrig
behavioral2/files/0x000700000002324d-77.dat	xmrig
behavioral2/files/0x000700000002324e-83.dat	xmrig
behavioral2/files/0x000700000002324f-87.dat	xmrig
behavioral2/files/0x0007000000023250-93.dat	xmrig
behavioral2/files/0x0007000000023251-97.dat	xmrig
behavioral2/memory/2180-98-0x00007FF756B60000-0x00007FF756F56000-memory.dmp	xmrig
behavioral2/memory/3276-103-0x00007FF7AF260000-0x00007FF7AF656000-memory.dmp	xmrig
behavioral2/memory/1388-104-0x00007FF689460000-0x00007FF689856000-memory.dmp	xmrig
behavioral2/memory/3888-105-0x00007FF6F7A20000-0x00007FF6F7E16000-memory.dmp	xmrig
behavioral2/memory/3644-102-0x00007FF6CB3C0000-0x00007FF6CB7B6000-memory.dmp	xmrig
behavioral2/memory/1836-101-0x00007FF676270000-0x00007FF676666000-memory.dmp	xmrig
behavioral2/files/0x0007000000023252-108.dat	xmrig
behavioral2/files/0x0007000000023253-114.dat	xmrig
behavioral2/files/0x0007000000023254-119.dat	xmrig
behavioral2/files/0x0007000000023255-124.dat	xmrig
behavioral2/files/0x0007000000023256-128.dat	xmrig
behavioral2/files/0x0007000000023257-134.dat	xmrig
behavioral2/files/0x0007000000023258-139.dat	xmrig
behavioral2/files/0x0007000000023259-144.dat	xmrig
behavioral2/files/0x000700000002325a-149.dat	xmrig
behavioral2/files/0x000700000002325b-154.dat	xmrig
behavioral2/files/0x000700000002325c-159.dat	xmrig
behavioral2/files/0x000700000002325d-164.dat	xmrig
behavioral2/files/0x000700000002325e-169.dat	xmrig
behavioral2/files/0x0007000000023260-179.dat	xmrig
behavioral2/files/0x0007000000023261-184.dat	xmrig
behavioral2/files/0x000700000002325f-174.dat	xmrig
behavioral2/files/0x0007000000023262-190.dat	xmrig
behavioral2/memory/3688-220-0x00007FF6D2020000-0x00007FF6D2416000-memory.dmp	xmrig
behavioral2/memory/4756-222-0x00007FF7E7DF0000-0x00007FF7E81E6000-memory.dmp	xmrig
behavioral2/memory/3568-224-0x00007FF6DB6C0000-0x00007FF6DBAB6000-memory.dmp	xmrig
behavioral2/memory/1596-223-0x00007FF6849B0000-0x00007FF684DA6000-memory.dmp	xmrig
behavioral2/memory/3376-227-0x00007FF605C40000-0x00007FF606036000-memory.dmp	xmrig
behavioral2/memory/3524-233-0x00007FF75ED00000-0x00007FF75F0F6000-memory.dmp	xmrig
behavioral2/memory/4944-240-0x00007FF7E7AA0000-0x00007FF7E7E96000-memory.dmp	xmrig
behavioral2/memory/4800-243-0x00007FF6C5630000-0x00007FF6C5A26000-memory.dmp	xmrig
behavioral2/memory/2644-241-0x00007FF6DC520000-0x00007FF6DC916000-memory.dmp	xmrig
behavioral2/memory/784-606-0x00007FF64FA10000-0x00007FF64FE06000-memory.dmp	xmrig
behavioral2/memory/1472-620-0x00007FF64E580000-0x00007FF64E976000-memory.dmp	xmrig
behavioral2/memory/2228-621-0x00007FF64F7C0000-0x00007FF64FBB6000-memory.dmp	xmrig
behavioral2/memory/3012-666-0x00007FF65AAB0000-0x00007FF65AEA6000-memory.dmp	xmrig
behavioral2/memory/2820-688-0x00007FF76D260000-0x00007FF76D656000-memory.dmp	xmrig
behavioral2/memory/324-708-0x00007FF7DAF10000-0x00007FF7DB306000-memory.dmp	xmrig
behavioral2/memory/1056-751-0x00007FF652420000-0x00007FF652816000-memory.dmp	xmrig

Blocklisted process makes network request 5 IoCs

flow	pid	Process
7	4580	powershell.exe
9	4580	powershell.exe
28	4580	powershell.exe
29	4580	powershell.exe
31	4580	powershell.exe

Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

Powershell Invoke Web Request.

execution

PowerShell

T1059.001

pid	Process
4580	powershell.exe

Executes dropped EXE 64 IoCs

pid	Process
1472	kDbSHsl.exe
2228	PmpYBFW.exe
3012	gbuRowW.exe
2820	IKClWHS.exe
324	vnpJjGz.exe
1056	yUFXvda.exe
680	OiuYrck.exe
3096	bbDOdPF.exe
3804	qXUMLnx.exe
2180	ssucgkW.exe
3888	zacZrFn.exe
1836	imbeZiL.exe
3644	ovXDCwy.exe
3276	yofgDIo.exe
1388	PPgJeDN.exe
3688	yOQSLpE.exe
4756	mATPSbY.exe
1596	CBkvfIm.exe
3568	EabroYG.exe
3376	bGMSKzL.exe
3524	wwWznUk.exe
4944	xpZNGAq.exe
2644	iemyJAL.exe
4800	jlqfOzG.exe
3452	DtYKYgA.exe
4020	lTIYgoB.exe
2688	ixDFvyj.exe
4384	IJWzEeR.exe
2992	uMgoduh.exe
4528	bLNzeIA.exe
4236	XxDfSSq.exe
4788	inOBYVL.exe
852	OXVEaPJ.exe
4500	uhBcUCC.exe
3592	MNNhdfR.exe
4392	pErdaeA.exe
1480	KGbZAGG.exe
4760	XAzaNrn.exe
3332	MplWbga.exe
3560	hNzHcoc.exe
4216	gVeQymH.exe
1028	rRTMRce.exe
4600	jKGDWEp.exe
4584	haSzkXQ.exe
900	jSVACOw.exe
1636	AFbGDzg.exe
3056	DxyIEOy.exe
1864	VWhfoaW.exe
2324	pbYdSjv.exe
3176	SXORnWb.exe
5048	ZHlUzyT.exe
3456	FoymsVE.exe
2528	pEsXjQZ.exe
5016	qkDcxch.exe
3036	klocJeS.exe
4912	WldVqZt.exe
776	GcLlIsF.exe
2556	lUdvSXf.exe
4924	PlAufsC.exe
1216	YfxSInq.exe
4840	CddVRlL.exe
4976	orPNFUo.exe
4396	jKYuVzi.exe
3800	ytWjUbb.exe

UPX packed file 64 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/784-0-0x00007FF64FA10000-0x00007FF64FE06000-memory.dmp	upx
behavioral2/files/0x000800000002323e-16.dat	upx
behavioral2/files/0x0008000000023243-19.dat	upx
behavioral2/files/0x0009000000023245-18.dat	upx
behavioral2/files/0x0009000000023246-32.dat	upx
behavioral2/files/0x0007000000023247-35.dat	upx
behavioral2/files/0x0007000000023248-40.dat	upx
behavioral2/files/0x0007000000023249-46.dat	upx
behavioral2/files/0x000700000002324a-50.dat	upx
behavioral2/files/0x000700000002324b-55.dat	upx
behavioral2/memory/1472-60-0x00007FF64E580000-0x00007FF64E976000-memory.dmp	upx
behavioral2/memory/2228-61-0x00007FF64F7C0000-0x00007FF64FBB6000-memory.dmp	upx
behavioral2/memory/2820-63-0x00007FF76D260000-0x00007FF76D656000-memory.dmp	upx
behavioral2/memory/1056-65-0x00007FF652420000-0x00007FF652816000-memory.dmp	upx
behavioral2/memory/324-64-0x00007FF7DAF10000-0x00007FF7DB306000-memory.dmp	upx
behavioral2/memory/680-66-0x00007FF6EBF50000-0x00007FF6EC346000-memory.dmp	upx
behavioral2/memory/3012-62-0x00007FF65AAB0000-0x00007FF65AEA6000-memory.dmp	upx
behavioral2/memory/3096-67-0x00007FF69FFE0000-0x00007FF6A03D6000-memory.dmp	upx
behavioral2/memory/3804-70-0x00007FF6A73F0000-0x00007FF6A77E6000-memory.dmp	upx
behavioral2/files/0x000700000002324c-69.dat	upx
behavioral2/files/0x000700000002324d-77.dat	upx
behavioral2/files/0x000700000002324e-83.dat	upx
behavioral2/files/0x000700000002324f-87.dat	upx
behavioral2/files/0x0007000000023250-93.dat	upx
behavioral2/files/0x0007000000023251-97.dat	upx
behavioral2/memory/2180-98-0x00007FF756B60000-0x00007FF756F56000-memory.dmp	upx
behavioral2/memory/3276-103-0x00007FF7AF260000-0x00007FF7AF656000-memory.dmp	upx
behavioral2/memory/1388-104-0x00007FF689460000-0x00007FF689856000-memory.dmp	upx
behavioral2/memory/3888-105-0x00007FF6F7A20000-0x00007FF6F7E16000-memory.dmp	upx
behavioral2/memory/3644-102-0x00007FF6CB3C0000-0x00007FF6CB7B6000-memory.dmp	upx
behavioral2/memory/1836-101-0x00007FF676270000-0x00007FF676666000-memory.dmp	upx
behavioral2/files/0x0007000000023252-108.dat	upx
behavioral2/files/0x0007000000023253-114.dat	upx
behavioral2/files/0x0007000000023254-119.dat	upx
behavioral2/files/0x0007000000023255-124.dat	upx
behavioral2/files/0x0007000000023256-128.dat	upx
behavioral2/files/0x0007000000023257-134.dat	upx
behavioral2/files/0x0007000000023258-139.dat	upx
behavioral2/files/0x0007000000023259-144.dat	upx
behavioral2/files/0x000700000002325a-149.dat	upx
behavioral2/files/0x000700000002325b-154.dat	upx
behavioral2/files/0x000700000002325c-159.dat	upx
behavioral2/files/0x000700000002325d-164.dat	upx
behavioral2/files/0x000700000002325e-169.dat	upx
behavioral2/files/0x0007000000023260-179.dat	upx
behavioral2/files/0x0007000000023261-184.dat	upx
behavioral2/files/0x000700000002325f-174.dat	upx
behavioral2/files/0x0007000000023262-190.dat	upx
behavioral2/memory/3688-220-0x00007FF6D2020000-0x00007FF6D2416000-memory.dmp	upx
behavioral2/memory/4756-222-0x00007FF7E7DF0000-0x00007FF7E81E6000-memory.dmp	upx
behavioral2/memory/3568-224-0x00007FF6DB6C0000-0x00007FF6DBAB6000-memory.dmp	upx
behavioral2/memory/1596-223-0x00007FF6849B0000-0x00007FF684DA6000-memory.dmp	upx
behavioral2/memory/3376-227-0x00007FF605C40000-0x00007FF606036000-memory.dmp	upx
behavioral2/memory/3524-233-0x00007FF75ED00000-0x00007FF75F0F6000-memory.dmp	upx
behavioral2/memory/4944-240-0x00007FF7E7AA0000-0x00007FF7E7E96000-memory.dmp	upx
behavioral2/memory/4800-243-0x00007FF6C5630000-0x00007FF6C5A26000-memory.dmp	upx
behavioral2/memory/2644-241-0x00007FF6DC520000-0x00007FF6DC916000-memory.dmp	upx
behavioral2/memory/784-606-0x00007FF64FA10000-0x00007FF64FE06000-memory.dmp	upx
behavioral2/memory/1472-620-0x00007FF64E580000-0x00007FF64E976000-memory.dmp	upx
behavioral2/memory/2228-621-0x00007FF64F7C0000-0x00007FF64FBB6000-memory.dmp	upx
behavioral2/memory/3012-666-0x00007FF65AAB0000-0x00007FF65AEA6000-memory.dmp	upx
behavioral2/memory/2820-688-0x00007FF76D260000-0x00007FF76D656000-memory.dmp	upx
behavioral2/memory/324-708-0x00007FF7DAF10000-0x00007FF7DB306000-memory.dmp	upx
behavioral2/memory/1056-751-0x00007FF652420000-0x00007FF652816000-memory.dmp	upx

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
6	raw.githubusercontent.com
7	raw.githubusercontent.com

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\System\zavzwyb.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\FhpxdLv.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\wfBirbv.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\vFtTOLI.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\yRnjOYG.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\liDUgQD.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\UscDHlZ.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\cYZaIwi.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\ZaOToTy.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\fHqcYNT.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\SvcjwQX.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\NyBxOIV.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\KCSLGkl.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\eBMhODD.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\cQgSpiL.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\ojdJYMt.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\XBLJIPu.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\MbndOyz.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\jntXkGH.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\znKNetc.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\Ocdosss.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\VqWBlSc.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\xyxkMcB.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\SrHYneK.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\NtrWGRj.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\VdrNGhH.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\UpQoxjn.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\txigRhC.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\vNJWMti.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\SXORnWb.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\kKxGsOJ.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\tlsjIWD.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\kfMXdAD.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\YLmEwRk.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\utzSYEs.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\wSuAlTM.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\svjQGuV.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\HPJLjEt.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\Ggyozei.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\HzqvSsf.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\HsmvlBU.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\praWWSg.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\nrwiZdX.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\YfCzYzg.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\SDOloAd.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\rFHiLCT.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\XwEnljH.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\temwGsC.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\AMNkger.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\xCmIQFb.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\lsEbmlv.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\BBqiXpO.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\obxqtYb.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\yUUobBB.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\NuWgfsq.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\ASzrzsq.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\lcLfXcE.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\FMXnwxe.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\agmFpBS.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\YhYxkXJ.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\lzPngLF.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\pFEnFqO.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\uWxzGgl.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
File created	C:\Windows\System\kuOoxLt.exe	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4580	powershell.exe
4580	powershell.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
Token: SeDebugPrivilege	4580	powershell.exe
Token: SeLockMemoryPrivilege	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 784 wrote to memory of 4580	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	91
PID 784 wrote to memory of 4580	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	91
PID 784 wrote to memory of 1472	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	92
PID 784 wrote to memory of 1472	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	92
PID 784 wrote to memory of 2228	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	93
PID 784 wrote to memory of 2228	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	93
PID 784 wrote to memory of 3012	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	94
PID 784 wrote to memory of 3012	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	94
PID 784 wrote to memory of 2820	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	95
PID 784 wrote to memory of 2820	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	95
PID 784 wrote to memory of 324	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	96
PID 784 wrote to memory of 324	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	96
PID 784 wrote to memory of 1056	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	97
PID 784 wrote to memory of 1056	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	97
PID 784 wrote to memory of 680	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	98
PID 784 wrote to memory of 680	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	98
PID 784 wrote to memory of 3096	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	99
PID 784 wrote to memory of 3096	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	99
PID 784 wrote to memory of 3804	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	100
PID 784 wrote to memory of 3804	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	100
PID 784 wrote to memory of 2180	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	101
PID 784 wrote to memory of 2180	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	101
PID 784 wrote to memory of 3888	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	102
PID 784 wrote to memory of 3888	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	102
PID 784 wrote to memory of 1836	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	103
PID 784 wrote to memory of 1836	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	103
PID 784 wrote to memory of 3644	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	104
PID 784 wrote to memory of 3644	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	104
PID 784 wrote to memory of 3276	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	105
PID 784 wrote to memory of 3276	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	105
PID 784 wrote to memory of 1388	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	106
PID 784 wrote to memory of 1388	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	106
PID 784 wrote to memory of 3688	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	107
PID 784 wrote to memory of 3688	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	107
PID 784 wrote to memory of 4756	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	108
PID 784 wrote to memory of 4756	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	108
PID 784 wrote to memory of 1596	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	109
PID 784 wrote to memory of 1596	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	109
PID 784 wrote to memory of 3568	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	110
PID 784 wrote to memory of 3568	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	110
PID 784 wrote to memory of 3376	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	111
PID 784 wrote to memory of 3376	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	111
PID 784 wrote to memory of 3524	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	112
PID 784 wrote to memory of 3524	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	112
PID 784 wrote to memory of 4944	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	113
PID 784 wrote to memory of 4944	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	113
PID 784 wrote to memory of 2644	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	114
PID 784 wrote to memory of 2644	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	114
PID 784 wrote to memory of 4800	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	115
PID 784 wrote to memory of 4800	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	115
PID 784 wrote to memory of 3452	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	116
PID 784 wrote to memory of 3452	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	116
PID 784 wrote to memory of 4020	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	117
PID 784 wrote to memory of 4020	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	117
PID 784 wrote to memory of 2688	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	118
PID 784 wrote to memory of 2688	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	118
PID 784 wrote to memory of 4384	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	119
PID 784 wrote to memory of 4384	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	119
PID 784 wrote to memory of 2992	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	120
PID 784 wrote to memory of 2992	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	120
PID 784 wrote to memory of 4528	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	121
PID 784 wrote to memory of 4528	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	121
PID 784 wrote to memory of 4236	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	122
PID 784 wrote to memory of 4236	784	daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe	122

C:\Users\Admin\AppData\Local\Temp\daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe"
1⤵
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:784
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -command "Invoke-WebRequest "https://raw.githubusercontent.com/" "
  2⤵
  - Blocklisted process makes network request
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:4580
- C:\Windows\System\kDbSHsl.exe
  C:\Windows\System\kDbSHsl.exe
  2⤵
  - Executes dropped EXE
  PID:1472
- C:\Windows\System\PmpYBFW.exe
  C:\Windows\System\PmpYBFW.exe
  2⤵
  - Executes dropped EXE
  PID:2228
- C:\Windows\System\gbuRowW.exe
  C:\Windows\System\gbuRowW.exe
  2⤵
  - Executes dropped EXE
  PID:3012
- C:\Windows\System\IKClWHS.exe
  C:\Windows\System\IKClWHS.exe
  2⤵
  - Executes dropped EXE
  PID:2820
- C:\Windows\System\vnpJjGz.exe
  C:\Windows\System\vnpJjGz.exe
  2⤵
  - Executes dropped EXE
  PID:324
- C:\Windows\System\yUFXvda.exe
  C:\Windows\System\yUFXvda.exe
  2⤵
  - Executes dropped EXE
  PID:1056
- C:\Windows\System\OiuYrck.exe
  C:\Windows\System\OiuYrck.exe
  2⤵
  - Executes dropped EXE
  PID:680
- C:\Windows\System\bbDOdPF.exe
  C:\Windows\System\bbDOdPF.exe
  2⤵
  - Executes dropped EXE
  PID:3096
- C:\Windows\System\qXUMLnx.exe
  C:\Windows\System\qXUMLnx.exe
  2⤵
  - Executes dropped EXE
  PID:3804
- C:\Windows\System\ssucgkW.exe
  C:\Windows\System\ssucgkW.exe
  2⤵
  - Executes dropped EXE
  PID:2180
- C:\Windows\System\zacZrFn.exe
  C:\Windows\System\zacZrFn.exe
  2⤵
  - Executes dropped EXE
  PID:3888
- C:\Windows\System\imbeZiL.exe
  C:\Windows\System\imbeZiL.exe
  2⤵
  - Executes dropped EXE
  PID:1836
- C:\Windows\System\ovXDCwy.exe
  C:\Windows\System\ovXDCwy.exe
  2⤵
  - Executes dropped EXE
  PID:3644
- C:\Windows\System\yofgDIo.exe
  C:\Windows\System\yofgDIo.exe
  2⤵
  - Executes dropped EXE
  PID:3276
- C:\Windows\System\PPgJeDN.exe
  C:\Windows\System\PPgJeDN.exe
  2⤵
  - Executes dropped EXE
  PID:1388
- C:\Windows\System\yOQSLpE.exe
  C:\Windows\System\yOQSLpE.exe
  2⤵
  - Executes dropped EXE
  PID:3688
- C:\Windows\System\mATPSbY.exe
  C:\Windows\System\mATPSbY.exe
  2⤵
  - Executes dropped EXE
  PID:4756
- C:\Windows\System\CBkvfIm.exe
  C:\Windows\System\CBkvfIm.exe
  2⤵
  - Executes dropped EXE
  PID:1596
- C:\Windows\System\EabroYG.exe
  C:\Windows\System\EabroYG.exe
  2⤵
  - Executes dropped EXE
  PID:3568
- C:\Windows\System\bGMSKzL.exe
  C:\Windows\System\bGMSKzL.exe
  2⤵
  - Executes dropped EXE
  PID:3376
- C:\Windows\System\wwWznUk.exe
  C:\Windows\System\wwWznUk.exe
  2⤵
  - Executes dropped EXE
  PID:3524
- C:\Windows\System\xpZNGAq.exe
  C:\Windows\System\xpZNGAq.exe
  2⤵
  - Executes dropped EXE
  PID:4944
- C:\Windows\System\iemyJAL.exe
  C:\Windows\System\iemyJAL.exe
  2⤵
  - Executes dropped EXE
  PID:2644
- C:\Windows\System\jlqfOzG.exe
  C:\Windows\System\jlqfOzG.exe
  2⤵
  - Executes dropped EXE
  PID:4800
- C:\Windows\System\DtYKYgA.exe
  C:\Windows\System\DtYKYgA.exe
  2⤵
  - Executes dropped EXE
  PID:3452
- C:\Windows\System\lTIYgoB.exe
  C:\Windows\System\lTIYgoB.exe
  2⤵
  - Executes dropped EXE
  PID:4020
- C:\Windows\System\ixDFvyj.exe
  C:\Windows\System\ixDFvyj.exe
  2⤵
  - Executes dropped EXE
  PID:2688
- C:\Windows\System\IJWzEeR.exe
  C:\Windows\System\IJWzEeR.exe
  2⤵
  - Executes dropped EXE
  PID:4384
- C:\Windows\System\uMgoduh.exe
  C:\Windows\System\uMgoduh.exe
  2⤵
  - Executes dropped EXE
  PID:2992
- C:\Windows\System\bLNzeIA.exe
  C:\Windows\System\bLNzeIA.exe
  2⤵
  - Executes dropped EXE
  PID:4528
- C:\Windows\System\XxDfSSq.exe
  C:\Windows\System\XxDfSSq.exe
  2⤵
  - Executes dropped EXE
  PID:4236
- C:\Windows\System\inOBYVL.exe
  C:\Windows\System\inOBYVL.exe
  2⤵
  - Executes dropped EXE
  PID:4788
- C:\Windows\System\OXVEaPJ.exe
  C:\Windows\System\OXVEaPJ.exe
  2⤵
  - Executes dropped EXE
  PID:852
- C:\Windows\System\uhBcUCC.exe
  C:\Windows\System\uhBcUCC.exe
  2⤵
  - Executes dropped EXE
  PID:4500
- C:\Windows\System\MNNhdfR.exe
  C:\Windows\System\MNNhdfR.exe
  2⤵
  - Executes dropped EXE
  PID:3592
- C:\Windows\System\pErdaeA.exe
  C:\Windows\System\pErdaeA.exe
  2⤵
  - Executes dropped EXE
  PID:4392
- C:\Windows\System\KGbZAGG.exe
  C:\Windows\System\KGbZAGG.exe
  2⤵
  - Executes dropped EXE
  PID:1480
- C:\Windows\System\XAzaNrn.exe
  C:\Windows\System\XAzaNrn.exe
  2⤵
  - Executes dropped EXE
  PID:4760
- C:\Windows\System\MplWbga.exe
  C:\Windows\System\MplWbga.exe
  2⤵
  - Executes dropped EXE
  PID:3332
- C:\Windows\System\hNzHcoc.exe
  C:\Windows\System\hNzHcoc.exe
  2⤵
  - Executes dropped EXE
  PID:3560
- C:\Windows\System\gVeQymH.exe
  C:\Windows\System\gVeQymH.exe
  2⤵
  - Executes dropped EXE
  PID:4216
- C:\Windows\System\rRTMRce.exe
  C:\Windows\System\rRTMRce.exe
  2⤵
  - Executes dropped EXE
  PID:1028
- C:\Windows\System\jKGDWEp.exe
  C:\Windows\System\jKGDWEp.exe
  2⤵
  - Executes dropped EXE
  PID:4600
- C:\Windows\System\haSzkXQ.exe
  C:\Windows\System\haSzkXQ.exe
  2⤵
  - Executes dropped EXE
  PID:4584
- C:\Windows\System\jSVACOw.exe
  C:\Windows\System\jSVACOw.exe
  2⤵
  - Executes dropped EXE
  PID:900
- C:\Windows\System\AFbGDzg.exe
  C:\Windows\System\AFbGDzg.exe
  2⤵
  - Executes dropped EXE
  PID:1636
- C:\Windows\System\DxyIEOy.exe
  C:\Windows\System\DxyIEOy.exe
  2⤵
  - Executes dropped EXE
  PID:3056
- C:\Windows\System\VWhfoaW.exe
  C:\Windows\System\VWhfoaW.exe
  2⤵
  - Executes dropped EXE
  PID:1864
- C:\Windows\System\pbYdSjv.exe
  C:\Windows\System\pbYdSjv.exe
  2⤵
  - Executes dropped EXE
  PID:2324
- C:\Windows\System\SXORnWb.exe
  C:\Windows\System\SXORnWb.exe
  2⤵
  - Executes dropped EXE
  PID:3176
- C:\Windows\System\ZHlUzyT.exe
  C:\Windows\System\ZHlUzyT.exe
  2⤵
  - Executes dropped EXE
  PID:5048
- C:\Windows\System\FoymsVE.exe
  C:\Windows\System\FoymsVE.exe
  2⤵
  - Executes dropped EXE
  PID:3456
- C:\Windows\System\pEsXjQZ.exe
  C:\Windows\System\pEsXjQZ.exe
  2⤵
  - Executes dropped EXE
  PID:2528
- C:\Windows\System\qkDcxch.exe
  C:\Windows\System\qkDcxch.exe
  2⤵
  - Executes dropped EXE
  PID:5016
- C:\Windows\System\klocJeS.exe
  C:\Windows\System\klocJeS.exe
  2⤵
  - Executes dropped EXE
  PID:3036
- C:\Windows\System\WldVqZt.exe
  C:\Windows\System\WldVqZt.exe
  2⤵
  - Executes dropped EXE
  PID:4912
- C:\Windows\System\GcLlIsF.exe
  C:\Windows\System\GcLlIsF.exe
  2⤵
  - Executes dropped EXE
  PID:776
- C:\Windows\System\lUdvSXf.exe
  C:\Windows\System\lUdvSXf.exe
  2⤵
  - Executes dropped EXE
  PID:2556
- C:\Windows\System\PlAufsC.exe
  C:\Windows\System\PlAufsC.exe
  2⤵
  - Executes dropped EXE
  PID:4924
- C:\Windows\System\YfxSInq.exe
  C:\Windows\System\YfxSInq.exe
  2⤵
  - Executes dropped EXE
  PID:1216
- C:\Windows\System\CddVRlL.exe
  C:\Windows\System\CddVRlL.exe
  2⤵
  - Executes dropped EXE
  PID:4840
- C:\Windows\System\orPNFUo.exe
  C:\Windows\System\orPNFUo.exe
  2⤵
  - Executes dropped EXE
  PID:4976
- C:\Windows\System\jKYuVzi.exe
  C:\Windows\System\jKYuVzi.exe
  2⤵
  - Executes dropped EXE
  PID:4396
- C:\Windows\System\ytWjUbb.exe
  C:\Windows\System\ytWjUbb.exe
  2⤵
  - Executes dropped EXE
  PID:3800
- C:\Windows\System\zavzwyb.exe
  C:\Windows\System\zavzwyb.exe
  2⤵
  PID:4468
- C:\Windows\System\wSuAlTM.exe
  C:\Windows\System\wSuAlTM.exe
  2⤵
  PID:5140
- C:\Windows\System\OUJjRyS.exe
  C:\Windows\System\OUJjRyS.exe
  2⤵
  PID:5168
- C:\Windows\System\jZtdpTU.exe
  C:\Windows\System\jZtdpTU.exe
  2⤵
  PID:5196
- C:\Windows\System\jNWLnxi.exe
  C:\Windows\System\jNWLnxi.exe
  2⤵
  PID:5228
- C:\Windows\System\FzBSmVd.exe
  C:\Windows\System\FzBSmVd.exe
  2⤵
  PID:5260
- C:\Windows\System\QuJrWAU.exe
  C:\Windows\System\QuJrWAU.exe
  2⤵
  PID:5288
- C:\Windows\System\rFHiLCT.exe
  C:\Windows\System\rFHiLCT.exe
  2⤵
  PID:5316
- C:\Windows\System\hyqfdnb.exe
  C:\Windows\System\hyqfdnb.exe
  2⤵
  PID:5344
- C:\Windows\System\ajzcmvS.exe
  C:\Windows\System\ajzcmvS.exe
  2⤵
  PID:5372
- C:\Windows\System\oBJyqtU.exe
  C:\Windows\System\oBJyqtU.exe
  2⤵
  PID:5400
- C:\Windows\System\eQhcxUn.exe
  C:\Windows\System\eQhcxUn.exe
  2⤵
  PID:5428
- C:\Windows\System\JmMPsLU.exe
  C:\Windows\System\JmMPsLU.exe
  2⤵
  PID:5456
- C:\Windows\System\MpspGrC.exe
  C:\Windows\System\MpspGrC.exe
  2⤵
  PID:5488
- C:\Windows\System\fYbBLPX.exe
  C:\Windows\System\fYbBLPX.exe
  2⤵
  PID:5512
- C:\Windows\System\XwEnljH.exe
  C:\Windows\System\XwEnljH.exe
  2⤵
  PID:5552
- C:\Windows\System\IeppfCt.exe
  C:\Windows\System\IeppfCt.exe
  2⤵
  PID:5576
- C:\Windows\System\GzsbgRD.exe
  C:\Windows\System\GzsbgRD.exe
  2⤵
  PID:5608
- C:\Windows\System\ETDmnsA.exe
  C:\Windows\System\ETDmnsA.exe
  2⤵
  PID:5632
- C:\Windows\System\LTrdeyW.exe
  C:\Windows\System\LTrdeyW.exe
  2⤵
  PID:5660
- C:\Windows\System\WbZoGBm.exe
  C:\Windows\System\WbZoGBm.exe
  2⤵
  PID:5688
- C:\Windows\System\PXLCZOQ.exe
  C:\Windows\System\PXLCZOQ.exe
  2⤵
  PID:5724
- C:\Windows\System\YqYokmf.exe
  C:\Windows\System\YqYokmf.exe
  2⤵
  PID:5748
- C:\Windows\System\fFlbsCC.exe
  C:\Windows\System\fFlbsCC.exe
  2⤵
  PID:5776
- C:\Windows\System\mYBDCza.exe
  C:\Windows\System\mYBDCza.exe
  2⤵
  PID:5804
- C:\Windows\System\ngZhnEm.exe
  C:\Windows\System\ngZhnEm.exe
  2⤵
  PID:5828
- C:\Windows\System\DGorLiQ.exe
  C:\Windows\System\DGorLiQ.exe
  2⤵
  PID:5864
- C:\Windows\System\YQzXZSh.exe
  C:\Windows\System\YQzXZSh.exe
  2⤵
  PID:5892
- C:\Windows\System\iJJUyly.exe
  C:\Windows\System\iJJUyly.exe
  2⤵
  PID:5924
- C:\Windows\System\VxBiNJi.exe
  C:\Windows\System\VxBiNJi.exe
  2⤵
  PID:5952
- C:\Windows\System\dlYhHYb.exe
  C:\Windows\System\dlYhHYb.exe
  2⤵
  PID:5968
- C:\Windows\System\NCnGlqd.exe
  C:\Windows\System\NCnGlqd.exe
  2⤵
  PID:5984
- C:\Windows\System\hvPecmX.exe
  C:\Windows\System\hvPecmX.exe
  2⤵
  PID:6004
- C:\Windows\System\sjxDieY.exe
  C:\Windows\System\sjxDieY.exe
  2⤵
  PID:6028
- C:\Windows\System\fXjlHoy.exe
  C:\Windows\System\fXjlHoy.exe
  2⤵
  PID:6080
- C:\Windows\System\zlEBewK.exe
  C:\Windows\System\zlEBewK.exe
  2⤵
  PID:6112
- C:\Windows\System\RMxHtNE.exe
  C:\Windows\System\RMxHtNE.exe
  2⤵
  PID:5152
- C:\Windows\System\hUlzepV.exe
  C:\Windows\System\hUlzepV.exe
  2⤵
  PID:5180
- C:\Windows\System\AEgNhXD.exe
  C:\Windows\System\AEgNhXD.exe
  2⤵
  PID:2364
- C:\Windows\System\qYqhjZe.exe
  C:\Windows\System\qYqhjZe.exe
  2⤵
  PID:5312
- C:\Windows\System\FeAyDFn.exe
  C:\Windows\System\FeAyDFn.exe
  2⤵
  PID:5412
- C:\Windows\System\oLmIvfx.exe
  C:\Windows\System\oLmIvfx.exe
  2⤵
  PID:5496
- C:\Windows\System\GIJEZkE.exe
  C:\Windows\System\GIJEZkE.exe
  2⤵
  PID:5540
- C:\Windows\System\kTwUoJy.exe
  C:\Windows\System\kTwUoJy.exe
  2⤵
  PID:1408
- C:\Windows\System\UzGGBLK.exe
  C:\Windows\System\UzGGBLK.exe
  2⤵
  PID:5652
- C:\Windows\System\wFEKkpD.exe
  C:\Windows\System\wFEKkpD.exe
  2⤵
  PID:5744
- C:\Windows\System\WrXZPPE.exe
  C:\Windows\System\WrXZPPE.exe
  2⤵
  PID:5788
- C:\Windows\System\EMWsSVD.exe
  C:\Windows\System\EMWsSVD.exe
  2⤵
  PID:5856
- C:\Windows\System\iyRIvQb.exe
  C:\Windows\System\iyRIvQb.exe
  2⤵
  PID:5944
- C:\Windows\System\TiBPiig.exe
  C:\Windows\System\TiBPiig.exe
  2⤵
  PID:5964
- C:\Windows\System\utsGAQx.exe
  C:\Windows\System\utsGAQx.exe
  2⤵
  PID:6056
- C:\Windows\System\JGfKpSi.exe
  C:\Windows\System\JGfKpSi.exe
  2⤵
  PID:6120
- C:\Windows\System\iDcUSHR.exe
  C:\Windows\System\iDcUSHR.exe
  2⤵
  PID:2520
- C:\Windows\System\UrTCRUK.exe
  C:\Windows\System\UrTCRUK.exe
  2⤵
  PID:3836
- C:\Windows\System\PHGKDMH.exe
  C:\Windows\System\PHGKDMH.exe
  2⤵
  PID:5520
- C:\Windows\System\baLjJaW.exe
  C:\Windows\System\baLjJaW.exe
  2⤵
  PID:5648
- C:\Windows\System\zasJZGg.exe
  C:\Windows\System\zasJZGg.exe
  2⤵
  PID:3904
- C:\Windows\System\qpLstsW.exe
  C:\Windows\System\qpLstsW.exe
  2⤵
  PID:5836
- C:\Windows\System\ryGgHVN.exe
  C:\Windows\System\ryGgHVN.exe
  2⤵
  PID:116
- C:\Windows\System\itbicLz.exe
  C:\Windows\System\itbicLz.exe
  2⤵
  PID:1360
- C:\Windows\System\zzQsBvd.exe
  C:\Windows\System\zzQsBvd.exe
  2⤵
  PID:4124
- C:\Windows\System\wQvzfZz.exe
  C:\Windows\System\wQvzfZz.exe
  2⤵
  PID:2704
- C:\Windows\System\hXYRzWW.exe
  C:\Windows\System\hXYRzWW.exe
  2⤵
  PID:3668
- C:\Windows\System\EXIzIcL.exe
  C:\Windows\System\EXIzIcL.exe
  2⤵
  PID:5948
- C:\Windows\System\aHwBTGY.exe
  C:\Windows\System\aHwBTGY.exe
  2⤵
  PID:5340
- C:\Windows\System\Pxycypi.exe
  C:\Windows\System\Pxycypi.exe
  2⤵
  PID:3284
- C:\Windows\System\ScLtFFk.exe
  C:\Windows\System\ScLtFFk.exe
  2⤵
  PID:5084
- C:\Windows\System\ZSgDZdF.exe
  C:\Windows\System\ZSgDZdF.exe
  2⤵
  PID:764
- C:\Windows\System\YehRscC.exe
  C:\Windows\System\YehRscC.exe
  2⤵
  PID:2416
- C:\Windows\System\fHqcYNT.exe
  C:\Windows\System\fHqcYNT.exe
  2⤵
  PID:5732
- C:\Windows\System\lDoReyX.exe
  C:\Windows\System\lDoReyX.exe
  2⤵
  PID:6188
- C:\Windows\System\ZWZygyh.exe
  C:\Windows\System\ZWZygyh.exe
  2⤵
  PID:6228
- C:\Windows\System\AqkwYOI.exe
  C:\Windows\System\AqkwYOI.exe
  2⤵
  PID:6260
- C:\Windows\System\ZhbMHLj.exe
  C:\Windows\System\ZhbMHLj.exe
  2⤵
  PID:6292
- C:\Windows\System\KbJsZBd.exe
  C:\Windows\System\KbJsZBd.exe
  2⤵
  PID:6340
- C:\Windows\System\yUUobBB.exe
  C:\Windows\System\yUUobBB.exe
  2⤵
  PID:6376
- C:\Windows\System\rBlkNzz.exe
  C:\Windows\System\rBlkNzz.exe
  2⤵
  PID:6404
- C:\Windows\System\GkGAaVv.exe
  C:\Windows\System\GkGAaVv.exe
  2⤵
  PID:6432
- C:\Windows\System\urmMWKI.exe
  C:\Windows\System\urmMWKI.exe
  2⤵
  PID:6460
- C:\Windows\System\RRyMPXz.exe
  C:\Windows\System\RRyMPXz.exe
  2⤵
  PID:6488
- C:\Windows\System\ZWQSRhd.exe
  C:\Windows\System\ZWQSRhd.exe
  2⤵
  PID:6528
- C:\Windows\System\xgeMAsh.exe
  C:\Windows\System\xgeMAsh.exe
  2⤵
  PID:6544
- C:\Windows\System\JvKmRGf.exe
  C:\Windows\System\JvKmRGf.exe
  2⤵
  PID:6572
- C:\Windows\System\yRaeYZr.exe
  C:\Windows\System\yRaeYZr.exe
  2⤵
  PID:6600
- C:\Windows\System\WwCFuUQ.exe
  C:\Windows\System\WwCFuUQ.exe
  2⤵
  PID:6628
- C:\Windows\System\QbGxugU.exe
  C:\Windows\System\QbGxugU.exe
  2⤵
  PID:6664
- C:\Windows\System\dwyVSTK.exe
  C:\Windows\System\dwyVSTK.exe
  2⤵
  PID:6688
- C:\Windows\System\NYqDlWc.exe
  C:\Windows\System\NYqDlWc.exe
  2⤵
  PID:6720
- C:\Windows\System\hYvvulH.exe
  C:\Windows\System\hYvvulH.exe
  2⤵
  PID:6748
- C:\Windows\System\zhxKJmz.exe
  C:\Windows\System\zhxKJmz.exe
  2⤵
  PID:6776
- C:\Windows\System\mEfFLMp.exe
  C:\Windows\System\mEfFLMp.exe
  2⤵
  PID:6804
- C:\Windows\System\IYViLiD.exe
  C:\Windows\System\IYViLiD.exe
  2⤵
  PID:6832
- C:\Windows\System\UBvgAVA.exe
  C:\Windows\System\UBvgAVA.exe
  2⤵
  PID:6860
- C:\Windows\System\LkxwKlC.exe
  C:\Windows\System\LkxwKlC.exe
  2⤵
  PID:6888
- C:\Windows\System\fLhxdti.exe
  C:\Windows\System\fLhxdti.exe
  2⤵
  PID:6916
- C:\Windows\System\hoGedtH.exe
  C:\Windows\System\hoGedtH.exe
  2⤵
  PID:6944
- C:\Windows\System\MFyxosL.exe
  C:\Windows\System\MFyxosL.exe
  2⤵
  PID:6972
- C:\Windows\System\coolQrj.exe
  C:\Windows\System\coolQrj.exe
  2⤵
  PID:7000
- C:\Windows\System\QlJROZv.exe
  C:\Windows\System\QlJROZv.exe
  2⤵
  PID:7028
- C:\Windows\System\NuWgfsq.exe
  C:\Windows\System\NuWgfsq.exe
  2⤵
  PID:7056
- C:\Windows\System\kcmpplG.exe
  C:\Windows\System\kcmpplG.exe
  2⤵
  PID:7084
- C:\Windows\System\ThQZcyC.exe
  C:\Windows\System\ThQZcyC.exe
  2⤵
  PID:7104
- C:\Windows\System\nrwiZdX.exe
  C:\Windows\System\nrwiZdX.exe
  2⤵
  PID:7140
- C:\Windows\System\dHozGcN.exe
  C:\Windows\System\dHozGcN.exe
  2⤵
  PID:7164
- C:\Windows\System\qNnLhct.exe
  C:\Windows\System\qNnLhct.exe
  2⤵
  PID:384
- C:\Windows\System\SNXsXwo.exe
  C:\Windows\System\SNXsXwo.exe
  2⤵
  PID:6164
- C:\Windows\System\feuhjFj.exe
  C:\Windows\System\feuhjFj.exe
  2⤵
  PID:6252
- C:\Windows\System\VpjXlhl.exe
  C:\Windows\System\VpjXlhl.exe
  2⤵
  PID:6364
- C:\Windows\System\njxIpNB.exe
  C:\Windows\System\njxIpNB.exe
  2⤵
  PID:6388
- C:\Windows\System\LeeQEqh.exe
  C:\Windows\System\LeeQEqh.exe
  2⤵
  PID:6424
- C:\Windows\System\FuIdSYI.exe
  C:\Windows\System\FuIdSYI.exe
  2⤵
  PID:6480
- C:\Windows\System\BcFVbhe.exe
  C:\Windows\System\BcFVbhe.exe
  2⤵
  PID:6256
- C:\Windows\System\cLCpewG.exe
  C:\Windows\System\cLCpewG.exe
  2⤵
  PID:6592
- C:\Windows\System\yZTlcXi.exe
  C:\Windows\System\yZTlcXi.exe
  2⤵
  PID:6656
- C:\Windows\System\pTXIQsA.exe
  C:\Windows\System\pTXIQsA.exe
  2⤵
  PID:6732
- C:\Windows\System\IcxlneT.exe
  C:\Windows\System\IcxlneT.exe
  2⤵
  PID:788
- C:\Windows\System\lIPZhSm.exe
  C:\Windows\System\lIPZhSm.exe
  2⤵
  PID:3000
- C:\Windows\System\VnIGPfa.exe
  C:\Windows\System\VnIGPfa.exe
  2⤵
  PID:6816
- C:\Windows\System\OXhBfBr.exe
  C:\Windows\System\OXhBfBr.exe
  2⤵
  PID:6884
- C:\Windows\System\NqTNMhY.exe
  C:\Windows\System\NqTNMhY.exe
  2⤵
  PID:6940
- C:\Windows\System\cgWcDse.exe
  C:\Windows\System\cgWcDse.exe
  2⤵
  PID:7012
- C:\Windows\System\ltfeWKl.exe
  C:\Windows\System\ltfeWKl.exe
  2⤵
  PID:3488
- C:\Windows\System\gDnLvrM.exe
  C:\Windows\System\gDnLvrM.exe
  2⤵
  PID:7080
- C:\Windows\System\sjVTOHi.exe
  C:\Windows\System\sjVTOHi.exe
  2⤵
  PID:7128
- C:\Windows\System\xpiWIRz.exe
  C:\Windows\System\xpiWIRz.exe
  2⤵
  PID:1004
- C:\Windows\System\LJEMzVl.exe
  C:\Windows\System\LJEMzVl.exe
  2⤵
  PID:4968
- C:\Windows\System\HpPOeVl.exe
  C:\Windows\System\HpPOeVl.exe
  2⤵
  PID:6284
- C:\Windows\System\XhJvoTk.exe
  C:\Windows\System\XhJvoTk.exe
  2⤵
  PID:6476
- C:\Windows\System\cVxKLKo.exe
  C:\Windows\System\cVxKLKo.exe
  2⤵
  PID:4508
- C:\Windows\System\jzIZmAB.exe
  C:\Windows\System\jzIZmAB.exe
  2⤵
  PID:6708
- C:\Windows\System\ITMDJBG.exe
  C:\Windows\System\ITMDJBG.exe
  2⤵
  PID:8
- C:\Windows\System\vQsOvfh.exe
  C:\Windows\System\vQsOvfh.exe
  2⤵
  PID:6912
- C:\Windows\System\vCofYdb.exe
  C:\Windows\System\vCofYdb.exe
  2⤵
  PID:7044
- C:\Windows\System\lkLTuAT.exe
  C:\Windows\System\lkLTuAT.exe
  2⤵
  PID:7116
- C:\Windows\System\RlIxQAg.exe
  C:\Windows\System\RlIxQAg.exe
  2⤵
  PID:3548
- C:\Windows\System\dSLKRLo.exe
  C:\Windows\System\dSLKRLo.exe
  2⤵
  PID:3880
- C:\Windows\System\GDrnJMQ.exe
  C:\Windows\System\GDrnJMQ.exe
  2⤵
  PID:6640
- C:\Windows\System\yKlAshA.exe
  C:\Windows\System\yKlAshA.exe
  2⤵
  PID:6852
- C:\Windows\System\iJrVnHT.exe
  C:\Windows\System\iJrVnHT.exe
  2⤵
  PID:3440
- C:\Windows\System\KYrGbZu.exe
  C:\Windows\System\KYrGbZu.exe
  2⤵
  PID:6216
- C:\Windows\System\CSTsbUK.exe
  C:\Windows\System\CSTsbUK.exe
  2⤵
  PID:6556
- C:\Windows\System\bEoNFla.exe
  C:\Windows\System\bEoNFla.exe
  2⤵
  PID:6880
- C:\Windows\System\paOgLFE.exe
  C:\Windows\System\paOgLFE.exe
  2⤵
  PID:4440
- C:\Windows\System\cpLeYXA.exe
  C:\Windows\System\cpLeYXA.exe
  2⤵
  PID:6456
- C:\Windows\System\WXngcqP.exe
  C:\Windows\System\WXngcqP.exe
  2⤵
  PID:7196
- C:\Windows\System\AUHoUPL.exe
  C:\Windows\System\AUHoUPL.exe
  2⤵
  PID:7220
- C:\Windows\System\ASzrzsq.exe
  C:\Windows\System\ASzrzsq.exe
  2⤵
  PID:7272
- C:\Windows\System\twamjfj.exe
  C:\Windows\System\twamjfj.exe
  2⤵
  PID:7320
- C:\Windows\System\DtSKxAr.exe
  C:\Windows\System\DtSKxAr.exe
  2⤵
  PID:7340
- C:\Windows\System\NDSqEJf.exe
  C:\Windows\System\NDSqEJf.exe
  2⤵
  PID:7368
- C:\Windows\System\KOGXoYH.exe
  C:\Windows\System\KOGXoYH.exe
  2⤵
  PID:7404
- C:\Windows\System\QOKjufG.exe
  C:\Windows\System\QOKjufG.exe
  2⤵
  PID:7456
- C:\Windows\System\vGBxPmm.exe
  C:\Windows\System\vGBxPmm.exe
  2⤵
  PID:7476
- C:\Windows\System\wZnLWBJ.exe
  C:\Windows\System\wZnLWBJ.exe
  2⤵
  PID:7504
- C:\Windows\System\uUNwurH.exe
  C:\Windows\System\uUNwurH.exe
  2⤵
  PID:7532
- C:\Windows\System\HZDGjZc.exe
  C:\Windows\System\HZDGjZc.exe
  2⤵
  PID:7548
- C:\Windows\System\PIdlhHf.exe
  C:\Windows\System\PIdlhHf.exe
  2⤵
  PID:7564
- C:\Windows\System\ksrjpBV.exe
  C:\Windows\System\ksrjpBV.exe
  2⤵
  PID:7616
- C:\Windows\System\tyrrtpd.exe
  C:\Windows\System\tyrrtpd.exe
  2⤵
  PID:7660
- C:\Windows\System\nphXJcS.exe
  C:\Windows\System\nphXJcS.exe
  2⤵
  PID:7692
- C:\Windows\System\iXOPZNi.exe
  C:\Windows\System\iXOPZNi.exe
  2⤵
  PID:7732
- C:\Windows\System\ZUeYiJy.exe
  C:\Windows\System\ZUeYiJy.exe
  2⤵
  PID:7748
- C:\Windows\System\nOJlQgO.exe
  C:\Windows\System\nOJlQgO.exe
  2⤵
  PID:7776
- C:\Windows\System\jYsRpQF.exe
  C:\Windows\System\jYsRpQF.exe
  2⤵
  PID:7800
- C:\Windows\System\GwCHcuN.exe
  C:\Windows\System\GwCHcuN.exe
  2⤵
  PID:7824
- C:\Windows\System\BnEGfbm.exe
  C:\Windows\System\BnEGfbm.exe
  2⤵
  PID:7856
- C:\Windows\System\NcFFCqG.exe
  C:\Windows\System\NcFFCqG.exe
  2⤵
  PID:7888
- C:\Windows\System\CdladXw.exe
  C:\Windows\System\CdladXw.exe
  2⤵
  PID:7916
- C:\Windows\System\adOtAOa.exe
  C:\Windows\System\adOtAOa.exe
  2⤵
  PID:7944
- C:\Windows\System\BJSkUuQ.exe
  C:\Windows\System\BJSkUuQ.exe
  2⤵
  PID:7972
- C:\Windows\System\WvVLZbf.exe
  C:\Windows\System\WvVLZbf.exe
  2⤵
  PID:8000
- C:\Windows\System\DFbYDpQ.exe
  C:\Windows\System\DFbYDpQ.exe
  2⤵
  PID:8028
- C:\Windows\System\QibvkxV.exe
  C:\Windows\System\QibvkxV.exe
  2⤵
  PID:8056
- C:\Windows\System\mdIwJSC.exe
  C:\Windows\System\mdIwJSC.exe
  2⤵
  PID:8084
- C:\Windows\System\kWjTwAn.exe
  C:\Windows\System\kWjTwAn.exe
  2⤵
  PID:8112
- C:\Windows\System\nEHHwJF.exe
  C:\Windows\System\nEHHwJF.exe
  2⤵
  PID:8128
- C:\Windows\System\JsEtLHs.exe
  C:\Windows\System\JsEtLHs.exe
  2⤵
  PID:8144
- C:\Windows\System\TKPgatt.exe
  C:\Windows\System\TKPgatt.exe
  2⤵
  PID:8160
- C:\Windows\System\BTfesZf.exe
  C:\Windows\System\BTfesZf.exe
  2⤵
  PID:8184
- C:\Windows\System\uALpHyT.exe
  C:\Windows\System\uALpHyT.exe
  2⤵
  PID:1384
- C:\Windows\System\xokCUyj.exe
  C:\Windows\System\xokCUyj.exe
  2⤵
  PID:7236
- C:\Windows\System\iIqIaVc.exe
  C:\Windows\System\iIqIaVc.exe
  2⤵
  PID:7300
- C:\Windows\System\oERPBRx.exe
  C:\Windows\System\oERPBRx.exe
  2⤵
  PID:7332
- C:\Windows\System\temwGsC.exe
  C:\Windows\System\temwGsC.exe
  2⤵
  PID:7520
- C:\Windows\System\EEEZzgz.exe
  C:\Windows\System\EEEZzgz.exe
  2⤵
  PID:7576
- C:\Windows\System\lQjXsZp.exe
  C:\Windows\System\lQjXsZp.exe
  2⤵
  PID:7680
- C:\Windows\System\TSuFWHx.exe
  C:\Windows\System\TSuFWHx.exe
  2⤵
  PID:7744
- C:\Windows\System\RjDbRpM.exe
  C:\Windows\System\RjDbRpM.exe
  2⤵
  PID:7796
- C:\Windows\System\BGfVDdK.exe
  C:\Windows\System\BGfVDdK.exe
  2⤵
  PID:7852
- C:\Windows\System\igBKwQd.exe
  C:\Windows\System\igBKwQd.exe
  2⤵
  PID:7876
- C:\Windows\System\RhwtDbG.exe
  C:\Windows\System\RhwtDbG.exe
  2⤵
  PID:7448
- C:\Windows\System\ARNMwoF.exe
  C:\Windows\System\ARNMwoF.exe
  2⤵
  PID:7468
- C:\Windows\System\CHzFhVi.exe
  C:\Windows\System\CHzFhVi.exe
  2⤵
  PID:8048
- C:\Windows\System\hRZapBZ.exe
  C:\Windows\System\hRZapBZ.exe
  2⤵
  PID:8108
- C:\Windows\System\gxYyFjc.exe
  C:\Windows\System\gxYyFjc.exe
  2⤵
  PID:8180
- C:\Windows\System\JXtFiZX.exe
  C:\Windows\System\JXtFiZX.exe
  2⤵
  PID:7280
- C:\Windows\System\vJoivqc.exe
  C:\Windows\System\vJoivqc.exe
  2⤵
  PID:7316
- C:\Windows\System\zjphXLe.exe
  C:\Windows\System\zjphXLe.exe
  2⤵
  PID:1784
- C:\Windows\System\WUpEoNg.exe
  C:\Windows\System\WUpEoNg.exe
  2⤵
  PID:2616
- C:\Windows\System\HSCimdQ.exe
  C:\Windows\System\HSCimdQ.exe
  2⤵
  PID:7832
- C:\Windows\System\IiPUvCW.exe
  C:\Windows\System\IiPUvCW.exe
  2⤵
  PID:7912
- C:\Windows\System\keWUoTb.exe
  C:\Windows\System\keWUoTb.exe
  2⤵
  PID:2340
- C:\Windows\System\XBofBNt.exe
  C:\Windows\System\XBofBNt.exe
  2⤵
  PID:6764
- C:\Windows\System\RqrSxNK.exe
  C:\Windows\System\RqrSxNK.exe
  2⤵
  PID:7608
- C:\Windows\System\gOYlPKu.exe
  C:\Windows\System\gOYlPKu.exe
  2⤵
  PID:7908
- C:\Windows\System\UZzwsNY.exe
  C:\Windows\System\UZzwsNY.exe
  2⤵
  PID:3984
- C:\Windows\System\ojnfNWa.exe
  C:\Windows\System\ojnfNWa.exe
  2⤵
  PID:8172
- C:\Windows\System\GVycFAN.exe
  C:\Windows\System\GVycFAN.exe
  2⤵
  PID:7556
- C:\Windows\System\Lpfkyzo.exe
  C:\Windows\System\Lpfkyzo.exe
  2⤵
  PID:7760
- C:\Windows\System\ywepIcm.exe
  C:\Windows\System\ywepIcm.exe
  2⤵
  PID:7176
- C:\Windows\System\ZkrzFoF.exe
  C:\Windows\System\ZkrzFoF.exe
  2⤵
  PID:8224
- C:\Windows\System\ToTnIwS.exe
  C:\Windows\System\ToTnIwS.exe
  2⤵
  PID:8252
- C:\Windows\System\yxEDLhu.exe
  C:\Windows\System\yxEDLhu.exe
  2⤵
  PID:8284
- C:\Windows\System\mpydUdV.exe
  C:\Windows\System\mpydUdV.exe
  2⤵
  PID:8312
- C:\Windows\System\ueSMUTL.exe
  C:\Windows\System\ueSMUTL.exe
  2⤵
  PID:8336
- C:\Windows\System\FnQHShc.exe
  C:\Windows\System\FnQHShc.exe
  2⤵
  PID:8384
- C:\Windows\System\NIYIxiQ.exe
  C:\Windows\System\NIYIxiQ.exe
  2⤵
  PID:8416
- C:\Windows\System\LYbxTQb.exe
  C:\Windows\System\LYbxTQb.exe
  2⤵
  PID:8472
- C:\Windows\System\UDueBri.exe
  C:\Windows\System\UDueBri.exe
  2⤵
  PID:8516
- C:\Windows\System\WPqRRPn.exe
  C:\Windows\System\WPqRRPn.exe
  2⤵
  PID:8560
- C:\Windows\System\cCtlKFq.exe
  C:\Windows\System\cCtlKFq.exe
  2⤵
  PID:8636
- C:\Windows\System\FhpxdLv.exe
  C:\Windows\System\FhpxdLv.exe
  2⤵
  PID:8732
- C:\Windows\System\LquPjFF.exe
  C:\Windows\System\LquPjFF.exe
  2⤵
  PID:8764
- C:\Windows\System\rNKLppx.exe
  C:\Windows\System\rNKLppx.exe
  2⤵
  PID:8924
- C:\Windows\System\vqunkVM.exe
  C:\Windows\System\vqunkVM.exe
  2⤵
  PID:8968
- C:\Windows\System\oDWKoUS.exe
  C:\Windows\System\oDWKoUS.exe
  2⤵
  PID:8984
- C:\Windows\System\bmspVIN.exe
  C:\Windows\System\bmspVIN.exe
  2⤵
  PID:9008
- C:\Windows\System\cMjUaCu.exe
  C:\Windows\System\cMjUaCu.exe
  2⤵
  PID:9036
- C:\Windows\System\hHMmcFB.exe
  C:\Windows\System\hHMmcFB.exe
  2⤵
  PID:9096
- C:\Windows\System\ruEYNLw.exe
  C:\Windows\System\ruEYNLw.exe
  2⤵
  PID:9160
- C:\Windows\System\bGSmAbz.exe
  C:\Windows\System\bGSmAbz.exe
  2⤵
  PID:2788
- C:\Windows\System\MaIsrUI.exe
  C:\Windows\System\MaIsrUI.exe
  2⤵
  PID:1452
- C:\Windows\System\CKeBtDe.exe
  C:\Windows\System\CKeBtDe.exe
  2⤵
  PID:8308
- C:\Windows\System\TZltAdE.exe
  C:\Windows\System\TZltAdE.exe
  2⤵
  PID:8376
- C:\Windows\System\uzUAreI.exe
  C:\Windows\System\uzUAreI.exe
  2⤵
  PID:8408
- C:\Windows\System\UlLjrMB.exe
  C:\Windows\System\UlLjrMB.exe
  2⤵
  PID:8500
- C:\Windows\System\CwcNuOu.exe
  C:\Windows\System\CwcNuOu.exe
  2⤵
  PID:8596
- C:\Windows\System\RYHCsud.exe
  C:\Windows\System\RYHCsud.exe
  2⤵
  PID:8568
- C:\Windows\System\bwWaDfE.exe
  C:\Windows\System\bwWaDfE.exe
  2⤵
  PID:8672
- C:\Windows\System\QXsUZrZ.exe
  C:\Windows\System\QXsUZrZ.exe
  2⤵
  PID:8688
- C:\Windows\System\FDmitVQ.exe
  C:\Windows\System\FDmitVQ.exe
  2⤵
  PID:8808
- C:\Windows\System\dHqzLNU.exe
  C:\Windows\System\dHqzLNU.exe
  2⤵
  PID:8900
- C:\Windows\System\KfjhXjT.exe
  C:\Windows\System\KfjhXjT.exe
  2⤵
  PID:9132
- C:\Windows\System\QNewlId.exe
  C:\Windows\System\QNewlId.exe
  2⤵
  PID:9208
- C:\Windows\System\WEXsCEc.exe
  C:\Windows\System\WEXsCEc.exe
  2⤵
  PID:8352
- C:\Windows\System\ufxFSrF.exe
  C:\Windows\System\ufxFSrF.exe
  2⤵
  PID:8448
- C:\Windows\System\OyNvAIq.exe
  C:\Windows\System\OyNvAIq.exe
  2⤵
  PID:8624
- C:\Windows\System\nQcqJRh.exe
  C:\Windows\System\nQcqJRh.exe
  2⤵
  PID:2012
- C:\Windows\System\seIQlEG.exe
  C:\Windows\System\seIQlEG.exe
  2⤵
  PID:8796
- C:\Windows\System\WDRcpqy.exe
  C:\Windows\System\WDRcpqy.exe
  2⤵
  PID:8916
- C:\Windows\System\MhMgALW.exe
  C:\Windows\System\MhMgALW.exe
  2⤵
  PID:8892
- C:\Windows\System\GHvspLN.exe
  C:\Windows\System\GHvspLN.exe
  2⤵
  PID:8856
- C:\Windows\System\PdiHJmy.exe
  C:\Windows\System\PdiHJmy.exe
  2⤵
  PID:1488
- C:\Windows\System\pMUzkKE.exe
  C:\Windows\System\pMUzkKE.exe
  2⤵
  PID:8280
- C:\Windows\System\DNdaFjC.exe
  C:\Windows\System\DNdaFjC.exe
  2⤵
  PID:8880
- C:\Windows\System\HNHdENr.exe
  C:\Windows\System\HNHdENr.exe
  2⤵
  PID:2656
- C:\Windows\System\DTCGAPz.exe
  C:\Windows\System\DTCGAPz.exe
  2⤵
  PID:3308
- C:\Windows\System\RaFmVDB.exe
  C:\Windows\System\RaFmVDB.exe
  2⤵
  PID:408
- C:\Windows\System\lfGYQRL.exe
  C:\Windows\System\lfGYQRL.exe
  2⤵
  PID:9064
- C:\Windows\System\izypDdX.exe
  C:\Windows\System\izypDdX.exe
  2⤵
  PID:1432
- C:\Windows\System\dQgoaxe.exe
  C:\Windows\System\dQgoaxe.exe
  2⤵
  PID:5148
- C:\Windows\System\QTQhZkg.exe
  C:\Windows\System\QTQhZkg.exe
  2⤵
  PID:5304
- C:\Windows\System\SVaQaRD.exe
  C:\Windows\System\SVaQaRD.exe
  2⤵
  PID:9152
- C:\Windows\System\eYtDOss.exe
  C:\Windows\System\eYtDOss.exe
  2⤵
  PID:9024
- C:\Windows\System\qJvMzeX.exe
  C:\Windows\System\qJvMzeX.exe
  2⤵
  PID:5500
- C:\Windows\System\UuedovR.exe
  C:\Windows\System\UuedovR.exe
  2⤵
  PID:5548
- C:\Windows\System\iVAgLdI.exe
  C:\Windows\System\iVAgLdI.exe
  2⤵
  PID:8264
- C:\Windows\System\UxjIcDE.exe
  C:\Windows\System\UxjIcDE.exe
  2⤵
  PID:8428
- C:\Windows\System\vWYtEhP.exe
  C:\Windows\System\vWYtEhP.exe
  2⤵
  PID:5640
- C:\Windows\System\ZPyqaox.exe
  C:\Windows\System\ZPyqaox.exe
  2⤵
  PID:5720
- C:\Windows\System\OVIwNHr.exe
  C:\Windows\System\OVIwNHr.exe
  2⤵
  PID:5824
- C:\Windows\System\lHMtRTL.exe
  C:\Windows\System\lHMtRTL.exe
  2⤵
  PID:1088
- C:\Windows\System\YNgHZis.exe
  C:\Windows\System\YNgHZis.exe
  2⤵
  PID:8668
- C:\Windows\System\RuBifaS.exe
  C:\Windows\System\RuBifaS.exe
  2⤵
  PID:2156
- C:\Windows\System\wZyzywW.exe
  C:\Windows\System\wZyzywW.exe
  2⤵
  PID:8820
- C:\Windows\System\BiUjaUr.exe
  C:\Windows\System\BiUjaUr.exe
  2⤵
  PID:9112
- C:\Windows\System\ukFFdTa.exe
  C:\Windows\System\ukFFdTa.exe
  2⤵
  PID:5596
- C:\Windows\System\asirVkB.exe
  C:\Windows\System\asirVkB.exe
  2⤵
  PID:3816
- C:\Windows\System\COKXeWN.exe
  C:\Windows\System\COKXeWN.exe
  2⤵
  PID:1840
- C:\Windows\System\LntgCVA.exe
  C:\Windows\System\LntgCVA.exe
  2⤵
  PID:5700
- C:\Windows\System\nMLSWyZ.exe
  C:\Windows\System\nMLSWyZ.exe
  2⤵
  PID:3116
- C:\Windows\System\LWTuElO.exe
  C:\Windows\System\LWTuElO.exe
  2⤵
  PID:5236
- C:\Windows\System\HhJBgkJ.exe
  C:\Windows\System\HhJBgkJ.exe
  2⤵
  PID:9144
- C:\Windows\System\lfyhRod.exe
  C:\Windows\System\lfyhRod.exe
  2⤵
  PID:5444
- C:\Windows\System\GvPCOlO.exe
  C:\Windows\System\GvPCOlO.exe
  2⤵
  PID:9176
- C:\Windows\System\tgfVfZX.exe
  C:\Windows\System\tgfVfZX.exe
  2⤵
  PID:9184
- C:\Windows\System\YLtGufR.exe
  C:\Windows\System\YLtGufR.exe
  2⤵
  PID:8400
- C:\Windows\System\McFgonN.exe
  C:\Windows\System\McFgonN.exe
  2⤵
  PID:8600
- C:\Windows\System\NLPNQhs.exe
  C:\Windows\System\NLPNQhs.exe
  2⤵
  PID:5704
- C:\Windows\System\wBxBpIr.exe
  C:\Windows\System\wBxBpIr.exe
  2⤵
  PID:5848
- C:\Windows\System\BFJWSlw.exe
  C:\Windows\System\BFJWSlw.exe
  2⤵
  PID:8524
- C:\Windows\System\NlSyckK.exe
  C:\Windows\System\NlSyckK.exe
  2⤵
  PID:5384
- C:\Windows\System\iBMwPUR.exe
  C:\Windows\System\iBMwPUR.exe
  2⤵
  PID:8744
- C:\Windows\System\siJNoqN.exe
  C:\Windows\System\siJNoqN.exe
  2⤵
  PID:1860
- C:\Windows\System\JpHxVWD.exe
  C:\Windows\System\JpHxVWD.exe
  2⤵
  PID:5528
- C:\Windows\System\UhdSNtw.exe
  C:\Windows\System\UhdSNtw.exe
  2⤵
  PID:948
- C:\Windows\System\FIfEQPA.exe
  C:\Windows\System\FIfEQPA.exe
  2⤵
  PID:5324
- C:\Windows\System\KkmZkNt.exe
  C:\Windows\System\KkmZkNt.exe
  2⤵
  PID:6020
- C:\Windows\System\kKxGsOJ.exe
  C:\Windows\System\kKxGsOJ.exe
  2⤵
  PID:8332
- C:\Windows\System\wrAwJOJ.exe
  C:\Windows\System\wrAwJOJ.exe
  2⤵
  PID:5908
- C:\Windows\System\OdLccYa.exe
  C:\Windows\System\OdLccYa.exe
  2⤵
  PID:8444
- C:\Windows\System\rFLTgQX.exe
  C:\Windows\System\rFLTgQX.exe
  2⤵
  PID:5392
- C:\Windows\System\BWRwEVc.exe
  C:\Windows\System\BWRwEVc.exe
  2⤵
  PID:8836
- C:\Windows\System\RJnutOZ.exe
  C:\Windows\System\RJnutOZ.exe
  2⤵
  PID:656
- C:\Windows\System\eXFGRCn.exe
  C:\Windows\System\eXFGRCn.exe
  2⤵
  PID:8528
- C:\Windows\System\RbvGolA.exe
  C:\Windows\System\RbvGolA.exe
  2⤵
  PID:5672
- C:\Windows\System\tehzuPY.exe
  C:\Windows\System\tehzuPY.exe
  2⤵
  PID:3796
- C:\Windows\System\ufJYYCu.exe
  C:\Windows\System\ufJYYCu.exe
  2⤵
  PID:9248
- C:\Windows\System\qjGJMLz.exe
  C:\Windows\System\qjGJMLz.exe
  2⤵
  PID:9276
- C:\Windows\System\eioDNkA.exe
  C:\Windows\System\eioDNkA.exe
  2⤵
  PID:9292
- C:\Windows\System\whOBYia.exe
  C:\Windows\System\whOBYia.exe
  2⤵
  PID:9316
- C:\Windows\System\uiclXnF.exe
  C:\Windows\System\uiclXnF.exe
  2⤵
  PID:9360
- C:\Windows\System\fwjlMbo.exe
  C:\Windows\System\fwjlMbo.exe
  2⤵
  PID:9384
- C:\Windows\System\CkJKmDL.exe
  C:\Windows\System\CkJKmDL.exe
  2⤵
  PID:9440
- C:\Windows\System\evZzvVf.exe
  C:\Windows\System\evZzvVf.exe
  2⤵
  PID:9456
- C:\Windows\System\XNzUnbI.exe
  C:\Windows\System\XNzUnbI.exe
  2⤵
  PID:9496
- C:\Windows\System\qAwWQUO.exe
  C:\Windows\System\qAwWQUO.exe
  2⤵
  PID:9512
- C:\Windows\System\fxLmIUC.exe
  C:\Windows\System\fxLmIUC.exe
  2⤵
  PID:9552
- C:\Windows\System\IPryerN.exe
  C:\Windows\System\IPryerN.exe
  2⤵
  PID:9568
- C:\Windows\System\bQcZbHp.exe
  C:\Windows\System\bQcZbHp.exe
  2⤵
  PID:9596
- C:\Windows\System\QpltWEm.exe
  C:\Windows\System\QpltWEm.exe
  2⤵
  PID:9624
- C:\Windows\System\qFjzQtj.exe
  C:\Windows\System\qFjzQtj.exe
  2⤵
  PID:9656
- C:\Windows\System\TrWDTlv.exe
  C:\Windows\System\TrWDTlv.exe
  2⤵
  PID:9684
- C:\Windows\System\SIwLKsv.exe
  C:\Windows\System\SIwLKsv.exe
  2⤵
  PID:9712
- C:\Windows\System\dRCfRZB.exe
  C:\Windows\System\dRCfRZB.exe
  2⤵
  PID:9740
- C:\Windows\System\FrHDVgc.exe
  C:\Windows\System\FrHDVgc.exe
  2⤵
  PID:9768
- C:\Windows\System\SuMqhAQ.exe
  C:\Windows\System\SuMqhAQ.exe
  2⤵
  PID:9792
- C:\Windows\System\KCSLGkl.exe
  C:\Windows\System\KCSLGkl.exe
  2⤵
  PID:9824
- C:\Windows\System\XdcGxin.exe
  C:\Windows\System\XdcGxin.exe
  2⤵
  PID:9852
- C:\Windows\System\aMcyYMh.exe
  C:\Windows\System\aMcyYMh.exe
  2⤵
  PID:9880
- C:\Windows\System\XgymUus.exe
  C:\Windows\System\XgymUus.exe
  2⤵
  PID:9908
- C:\Windows\System\CyksEMR.exe
  C:\Windows\System\CyksEMR.exe
  2⤵
  PID:9940
- C:\Windows\System\HALiAhk.exe
  C:\Windows\System\HALiAhk.exe
  2⤵
  PID:9964
- C:\Windows\System\VqWBlSc.exe
  C:\Windows\System\VqWBlSc.exe
  2⤵
  PID:9992
- C:\Windows\System\gfyvvWC.exe
  C:\Windows\System\gfyvvWC.exe
  2⤵
  PID:10020
- C:\Windows\System\pFEnFqO.exe
  C:\Windows\System\pFEnFqO.exe
  2⤵
  PID:10044
- C:\Windows\System\sxBjxxi.exe
  C:\Windows\System\sxBjxxi.exe
  2⤵
  PID:10064
- C:\Windows\System\NDuvipi.exe
  C:\Windows\System\NDuvipi.exe
  2⤵
  PID:10104
- C:\Windows\System\UxHozyv.exe
  C:\Windows\System\UxHozyv.exe
  2⤵
  PID:10132
- C:\Windows\System\TAuxXPg.exe
  C:\Windows\System\TAuxXPg.exe
  2⤵
  PID:10152
- C:\Windows\System\wfBirbv.exe
  C:\Windows\System\wfBirbv.exe
  2⤵
  PID:10180
- C:\Windows\System\CkEeIig.exe
  C:\Windows\System\CkEeIig.exe
  2⤵
  PID:10216
- C:\Windows\System\dczsWwu.exe
  C:\Windows\System\dczsWwu.exe
  2⤵
  PID:10232
- C:\Windows\System\vKNcuhA.exe
  C:\Windows\System\vKNcuhA.exe
  2⤵
  PID:9232
- C:\Windows\System\AVIjAwA.exe
  C:\Windows\System\AVIjAwA.exe
  2⤵
  PID:9304
- C:\Windows\System\NPlMdbR.exe
  C:\Windows\System\NPlMdbR.exe
  2⤵
  PID:3872
- C:\Windows\System\svjQGuV.exe
  C:\Windows\System\svjQGuV.exe
  2⤵
  PID:4820
- C:\Windows\System\vPGMmMO.exe
  C:\Windows\System\vPGMmMO.exe
  2⤵
  PID:6132
- C:\Windows\System\yoUPGBq.exe
  C:\Windows\System\yoUPGBq.exe
  2⤵
  PID:9368
- C:\Windows\System\pDqHHmK.exe
  C:\Windows\System\pDqHHmK.exe
  2⤵
  PID:2628
- C:\Windows\System\ZppujYX.exe
  C:\Windows\System\ZppujYX.exe
  2⤵
  PID:9424
- C:\Windows\System\HzXtjKi.exe
  C:\Windows\System\HzXtjKi.exe
  2⤵
  PID:9452
- C:\Windows\System\eBMhODD.exe
  C:\Windows\System\eBMhODD.exe
  2⤵
  PID:9524
- C:\Windows\System\WeKwhKM.exe
  C:\Windows\System\WeKwhKM.exe
  2⤵
  PID:1116
- C:\Windows\System\MnRmXvM.exe
  C:\Windows\System\MnRmXvM.exe
  2⤵
  PID:9536
- C:\Windows\System\CaOxzBZ.exe
  C:\Windows\System\CaOxzBZ.exe
  2⤵
  PID:9636
- C:\Windows\System\BCUHxhS.exe
  C:\Windows\System\BCUHxhS.exe
  2⤵
  PID:9696
- C:\Windows\System\JXeIYss.exe
  C:\Windows\System\JXeIYss.exe
  2⤵
  PID:9728
- C:\Windows\System\DNOTnZO.exe
  C:\Windows\System\DNOTnZO.exe
  2⤵
  PID:9804
- C:\Windows\System\FpOdXgd.exe
  C:\Windows\System\FpOdXgd.exe
  2⤵
  PID:9864
- C:\Windows\System\IrcpZWh.exe
  C:\Windows\System\IrcpZWh.exe
  2⤵
  PID:9952
- C:\Windows\System\mehCfan.exe
  C:\Windows\System\mehCfan.exe
  2⤵
  PID:4212
- C:\Windows\System\PBEUJIL.exe
  C:\Windows\System\PBEUJIL.exe
  2⤵
  PID:10052
- C:\Windows\System\NldQJbb.exe
  C:\Windows\System\NldQJbb.exe
  2⤵
  PID:10092
- C:\Windows\System\vFtTOLI.exe
  C:\Windows\System\vFtTOLI.exe
  2⤵
  PID:10140
- C:\Windows\System\hijhSCk.exe
  C:\Windows\System\hijhSCk.exe
  2⤵
  PID:10176
- C:\Windows\System\aBlIuvD.exe
  C:\Windows\System\aBlIuvD.exe
  2⤵
  PID:10204
- C:\Windows\System\pnZAxzm.exe
  C:\Windows\System\pnZAxzm.exe
  2⤵
  PID:5696
- C:\Windows\System\ZIckODU.exe
  C:\Windows\System\ZIckODU.exe
  2⤵
  PID:6520
- C:\Windows\System\aGIoVLs.exe
  C:\Windows\System\aGIoVLs.exe
  2⤵
  PID:9640
- C:\Windows\System\iwhGdbZ.exe
  C:\Windows\System\iwhGdbZ.exe
  2⤵
  PID:9372
- C:\Windows\System\oqaPFzB.exe
  C:\Windows\System\oqaPFzB.exe
  2⤵
  PID:9400
- C:\Windows\System\elrTKPq.exe
  C:\Windows\System\elrTKPq.exe
  2⤵
  PID:2400
- C:\Windows\System\KjHgEYu.exe
  C:\Windows\System\KjHgEYu.exe
  2⤵
  PID:9752
- C:\Windows\System\uiXZjgQ.exe
  C:\Windows\System\uiXZjgQ.exe
  2⤵
  PID:9812
- C:\Windows\System\PjPfIOZ.exe
  C:\Windows\System\PjPfIOZ.exe
  2⤵
  PID:6704
- C:\Windows\System\SjwkZVs.exe
  C:\Windows\System\SjwkZVs.exe
  2⤵
  PID:9948
- C:\Windows\System\HptMmGd.exe
  C:\Windows\System\HptMmGd.exe
  2⤵
  PID:6236
- C:\Windows\System\dsQNFUF.exe
  C:\Windows\System\dsQNFUF.exe
  2⤵
  PID:9676
- C:\Windows\System\vAHevfy.exe
  C:\Windows\System\vAHevfy.exe
  2⤵
  PID:10084
- C:\Windows\System\nutRxUH.exe
  C:\Windows\System\nutRxUH.exe
  2⤵
  PID:6092
- C:\Windows\System\ZzqPfEa.exe
  C:\Windows\System\ZzqPfEa.exe
  2⤵
  PID:6348
- C:\Windows\System\QipTjiq.exe
  C:\Windows\System\QipTjiq.exe
  2⤵
  PID:6108
- C:\Windows\System\ZukKJjI.exe
  C:\Windows\System\ZukKJjI.exe
  2⤵
  PID:6448
- C:\Windows\System\ZTxOAAV.exe
  C:\Windows\System\ZTxOAAV.exe
  2⤵
  PID:6440
- C:\Windows\System\FIwkeRE.exe
  C:\Windows\System\FIwkeRE.exe
  2⤵
  PID:6496
- C:\Windows\System\znKNetc.exe
  C:\Windows\System\znKNetc.exe
  2⤵
  PID:1832
- C:\Windows\System\znGbOXR.exe
  C:\Windows\System\znGbOXR.exe
  2⤵
  PID:9404
- C:\Windows\System\CWuNImg.exe
  C:\Windows\System\CWuNImg.exe
  2⤵
  PID:2448
- C:\Windows\System\yRnjOYG.exe
  C:\Windows\System\yRnjOYG.exe
  2⤵
  PID:6308
- C:\Windows\System\RFLHWac.exe
  C:\Windows\System\RFLHWac.exe
  2⤵
  PID:6332
- C:\Windows\System\BGxIJRW.exe
  C:\Windows\System\BGxIJRW.exe
  2⤵
  PID:5136
- C:\Windows\System\MHaFIJl.exe
  C:\Windows\System\MHaFIJl.exe
  2⤵
  PID:6508
- C:\Windows\System\daNSTtF.exe
  C:\Windows\System\daNSTtF.exe
  2⤵
  PID:2960
- C:\Windows\System\dlbwJQs.exe
  C:\Windows\System\dlbwJQs.exe
  2⤵
  PID:5124
- C:\Windows\System\UnqGXNB.exe
  C:\Windows\System\UnqGXNB.exe
  2⤵
  PID:6760
- C:\Windows\System\SagjIPO.exe
  C:\Windows\System\SagjIPO.exe
  2⤵
  PID:6844
- C:\Windows\System\wKXzCTi.exe
  C:\Windows\System\wKXzCTi.exe
  2⤵
  PID:6268
- C:\Windows\System\xrkwWJM.exe
  C:\Windows\System\xrkwWJM.exe
  2⤵
  PID:10148
- C:\Windows\System\IGIZIzp.exe
  C:\Windows\System\IGIZIzp.exe
  2⤵
  PID:9128
- C:\Windows\System\nDDebDy.exe
  C:\Windows\System\nDDebDy.exe
  2⤵
  PID:4120
- C:\Windows\System\AMNkger.exe
  C:\Windows\System\AMNkger.exe
  2⤵
  PID:6316
- C:\Windows\System\dVXdsls.exe
  C:\Windows\System\dVXdsls.exe
  2⤵
  PID:3708
- C:\Windows\System\kQgcANW.exe
  C:\Windows\System\kQgcANW.exe
  2⤵
  PID:5916
- C:\Windows\System\gkPsIHs.exe
  C:\Windows\System\gkPsIHs.exe
  2⤵
  PID:6680
- C:\Windows\System\hFCMpQN.exe
  C:\Windows\System\hFCMpQN.exe
  2⤵
  PID:6768
- C:\Windows\System\dfxvzpp.exe
  C:\Windows\System\dfxvzpp.exe
  2⤵
  PID:6820
- C:\Windows\System\VEvFdTI.exe
  C:\Windows\System\VEvFdTI.exe
  2⤵
  PID:1692
- C:\Windows\System\drsVcuW.exe
  C:\Windows\System\drsVcuW.exe
  2⤵
  PID:1272
- C:\Windows\System\drBWVWZ.exe
  C:\Windows\System\drBWVWZ.exe
  2⤵
  PID:6416
- C:\Windows\System\PAvjDRB.exe
  C:\Windows\System\PAvjDRB.exe
  2⤵
  PID:6204
- C:\Windows\System\RRLJgER.exe
  C:\Windows\System\RRLJgER.exe
  2⤵
  PID:6400
- C:\Windows\System\sjMkNXj.exe
  C:\Windows\System\sjMkNXj.exe
  2⤵
  PID:5336
- C:\Windows\System\JQCXEuf.exe
  C:\Windows\System\JQCXEuf.exe
  2⤵
  PID:6612
- C:\Windows\System\xoOhixr.exe
  C:\Windows\System\xoOhixr.exe
  2⤵
  PID:7288
- C:\Windows\System\cQgSpiL.exe
  C:\Windows\System\cQgSpiL.exe
  2⤵
  PID:7232
- C:\Windows\System\CTqcNBU.exe
  C:\Windows\System\CTqcNBU.exe
  2⤵
  PID:5852
- C:\Windows\System\qXinmwW.exe
  C:\Windows\System\qXinmwW.exe
  2⤵
  PID:10260
- C:\Windows\System\dQAvzWp.exe
  C:\Windows\System\dQAvzWp.exe
  2⤵
  PID:10288
- C:\Windows\System\KlTKYBS.exe
  C:\Windows\System\KlTKYBS.exe
  2⤵
  PID:10316
- C:\Windows\System\tmCWseX.exe
  C:\Windows\System\tmCWseX.exe
  2⤵
  PID:10340
- C:\Windows\System\dKARaBK.exe
  C:\Windows\System\dKARaBK.exe
  2⤵
  PID:10376
- C:\Windows\System\QatXeLP.exe
  C:\Windows\System\QatXeLP.exe
  2⤵
  PID:10408
- C:\Windows\System\MPgQgkz.exe
  C:\Windows\System\MPgQgkz.exe
  2⤵
  PID:10436
- C:\Windows\System\bnyTTNA.exe
  C:\Windows\System\bnyTTNA.exe
  2⤵
  PID:10464
- C:\Windows\System\kXUvadh.exe
  C:\Windows\System\kXUvadh.exe
  2⤵
  PID:10492
- C:\Windows\System\EWqyqzy.exe
  C:\Windows\System\EWqyqzy.exe
  2⤵
  PID:10520
- C:\Windows\System\wFLhWHY.exe
  C:\Windows\System\wFLhWHY.exe
  2⤵
  PID:10548
- C:\Windows\System\mghuQfq.exe
  C:\Windows\System\mghuQfq.exe
  2⤵
  PID:10576
- C:\Windows\System\XtouNfb.exe
  C:\Windows\System\XtouNfb.exe
  2⤵
  PID:10608
- C:\Windows\System\seSWazs.exe
  C:\Windows\System\seSWazs.exe
  2⤵
  PID:10636
- C:\Windows\System\eDhykQv.exe
  C:\Windows\System\eDhykQv.exe
  2⤵
  PID:10664
- C:\Windows\System\VSprNuM.exe
  C:\Windows\System\VSprNuM.exe
  2⤵
  PID:10692
- C:\Windows\System\lFSUdiN.exe
  C:\Windows\System\lFSUdiN.exe
  2⤵
  PID:10720
- C:\Windows\System\phNILtn.exe
  C:\Windows\System\phNILtn.exe
  2⤵
  PID:10748
- C:\Windows\System\lCeoUKr.exe
  C:\Windows\System\lCeoUKr.exe
  2⤵
  PID:10772
- C:\Windows\System\hpmlXkl.exe
  C:\Windows\System\hpmlXkl.exe
  2⤵
  PID:10804
- C:\Windows\System\JsXyOKz.exe
  C:\Windows\System\JsXyOKz.exe
  2⤵
  PID:10832
- C:\Windows\System\HPJLjEt.exe
  C:\Windows\System\HPJLjEt.exe
  2⤵
  PID:10860
- C:\Windows\System\erJitzW.exe
  C:\Windows\System\erJitzW.exe
  2⤵
  PID:10892
- C:\Windows\System\pEVhUmD.exe
  C:\Windows\System\pEVhUmD.exe
  2⤵
  PID:10920
- C:\Windows\System\NtrWGRj.exe
  C:\Windows\System\NtrWGRj.exe
  2⤵
  PID:10948
- C:\Windows\System\PFGIibc.exe
  C:\Windows\System\PFGIibc.exe
  2⤵
  PID:10988
- C:\Windows\System\bUkypGn.exe
  C:\Windows\System\bUkypGn.exe
  2⤵
  PID:11016
- C:\Windows\System\NfIYjEA.exe
  C:\Windows\System\NfIYjEA.exe
  2⤵
  PID:11032
- C:\Windows\System\yCyWvUh.exe
  C:\Windows\System\yCyWvUh.exe
  2⤵
  PID:11060
- C:\Windows\System\EVoXrAu.exe
  C:\Windows\System\EVoXrAu.exe
  2⤵
  PID:11088
- C:\Windows\System\YfCzYzg.exe
  C:\Windows\System\YfCzYzg.exe
  2⤵
  PID:11116
- C:\Windows\System\RSxqhHJ.exe
  C:\Windows\System\RSxqhHJ.exe
  2⤵
  PID:11144
- C:\Windows\System\xSTdcOy.exe
  C:\Windows\System\xSTdcOy.exe
  2⤵
  PID:11172
- C:\Windows\System\JizYQPB.exe
  C:\Windows\System\JizYQPB.exe
  2⤵
  PID:11204
- C:\Windows\System\vaxyQsu.exe
  C:\Windows\System\vaxyQsu.exe
  2⤵
  PID:11232
- C:\Windows\System\JiVwyFr.exe
  C:\Windows\System\JiVwyFr.exe
  2⤵
  PID:11260
- C:\Windows\System\qMTpJPI.exe
  C:\Windows\System\qMTpJPI.exe
  2⤵
  PID:10304
- C:\Windows\System\couuUbH.exe
  C:\Windows\System\couuUbH.exe
  2⤵
  PID:10352
- C:\Windows\System\gurNkcw.exe
  C:\Windows\System\gurNkcw.exe
  2⤵
  PID:10420
- C:\Windows\System\RiUDpuq.exe
  C:\Windows\System\RiUDpuq.exe
  2⤵
  PID:10480
- C:\Windows\System\uWxzGgl.exe
  C:\Windows\System\uWxzGgl.exe
  2⤵
  PID:2832
- C:\Windows\System\tijaZPh.exe
  C:\Windows\System\tijaZPh.exe
  2⤵
  PID:7488
- C:\Windows\System\mdMrrNT.exe
  C:\Windows\System\mdMrrNT.exe
  2⤵
  PID:10632
- C:\Windows\System\xHgEnuV.exe
  C:\Windows\System\xHgEnuV.exe
  2⤵
  PID:10708
- C:\Windows\System\EMcmkkm.exe
  C:\Windows\System\EMcmkkm.exe
  2⤵
  PID:7624
- C:\Windows\System\OxrvTDV.exe
  C:\Windows\System\OxrvTDV.exe
  2⤵
  PID:10784
- C:\Windows\System\jqVjwtF.exe
  C:\Windows\System\jqVjwtF.exe
  2⤵
  PID:7720
- C:\Windows\System\qVBPrEe.exe
  C:\Windows\System\qVBPrEe.exe
  2⤵
  PID:10888
- C:\Windows\System\kEPJWnI.exe
  C:\Windows\System\kEPJWnI.exe
  2⤵
  PID:10936
- C:\Windows\System\VUitodX.exe
  C:\Windows\System\VUitodX.exe
  2⤵
  PID:7884
- C:\Windows\System\tlsjIWD.exe
  C:\Windows\System\tlsjIWD.exe
  2⤵
  PID:7988
- C:\Windows\System\NRYuRMa.exe
  C:\Windows\System\NRYuRMa.exe
  2⤵
  PID:8072
- C:\Windows\System\oIsLPgp.exe
  C:\Windows\System\oIsLPgp.exe
  2⤵
  PID:11052
- C:\Windows\System\DjUISFA.exe
  C:\Windows\System\DjUISFA.exe
  2⤵
  PID:11128
- C:\Windows\System\cCIWYuF.exe
  C:\Windows\System\cCIWYuF.exe
  2⤵
  PID:11160
- C:\Windows\System\yyydVyG.exe
  C:\Windows\System\yyydVyG.exe
  2⤵
  PID:7728
- C:\Windows\System\yfxMZbi.exe
  C:\Windows\System\yfxMZbi.exe
  2⤵
  PID:4288
- C:\Windows\System\jPXWxWm.exe
  C:\Windows\System\jPXWxWm.exe
  2⤵
  PID:10268
- C:\Windows\System\rngYBOr.exe
  C:\Windows\System\rngYBOr.exe
  2⤵
  PID:10392
- C:\Windows\System\HaXlVWh.exe
  C:\Windows\System\HaXlVWh.exe
  2⤵
  PID:10516
- C:\Windows\System\oVytLZj.exe
  C:\Windows\System\oVytLZj.exe
  2⤵
  PID:10600
- C:\Windows\System\VdrNGhH.exe
  C:\Windows\System\VdrNGhH.exe
  2⤵
  PID:10688
- C:\Windows\System\adgPQvN.exe
  C:\Windows\System\adgPQvN.exe
  2⤵
  PID:7428
- C:\Windows\System\CTVYrSA.exe
  C:\Windows\System\CTVYrSA.exe
  2⤵
  PID:7724
- C:\Windows\System\TqpGGsp.exe
  C:\Windows\System\TqpGGsp.exe
  2⤵
  PID:10932
- C:\Windows\System\spBssTS.exe
  C:\Windows\System\spBssTS.exe
  2⤵
  PID:7896
- C:\Windows\System\eFoSrQK.exe
  C:\Windows\System\eFoSrQK.exe
  2⤵
  PID:7952
- C:\Windows\System\idOImxl.exe
  C:\Windows\System\idOImxl.exe
  2⤵
  PID:11080
- C:\Windows\System\pBDFmZP.exe
  C:\Windows\System\pBDFmZP.exe
  2⤵
  PID:11256
- C:\Windows\System\hskUQPn.exe
  C:\Windows\System\hskUQPn.exe
  2⤵
  PID:10248
- C:\Windows\System\hgWztpp.exe
  C:\Windows\System\hgWztpp.exe
  2⤵
  PID:7688
- C:\Windows\System\uQcIuae.exe
  C:\Windows\System\uQcIuae.exe
  2⤵
  PID:5536
- C:\Windows\System\APkANcI.exe
  C:\Windows\System\APkANcI.exe
  2⤵
  PID:6220
- C:\Windows\System\LzzIKux.exe
  C:\Windows\System\LzzIKux.exe
  2⤵
  PID:10828
- C:\Windows\System\AyOdxGb.exe
  C:\Windows\System\AyOdxGb.exe
  2⤵
  PID:8356
- C:\Windows\System\XTgVBAF.exe
  C:\Windows\System\XTgVBAF.exe
  2⤵
  PID:8044
- C:\Windows\System\gVqpfHh.exe
  C:\Windows\System\gVqpfHh.exe
  2⤵
  PID:3016
- C:\Windows\System\ZEvTMmM.exe
  C:\Windows\System\ZEvTMmM.exe
  2⤵
  PID:8140
- C:\Windows\System\peYsnmF.exe
  C:\Windows\System\peYsnmF.exe
  2⤵
  PID:10820
- C:\Windows\System\sthdmFP.exe
  C:\Windows\System\sthdmFP.exe
  2⤵
  PID:7500
- C:\Windows\System\SqoPxmD.exe
  C:\Windows\System\SqoPxmD.exe
  2⤵
  PID:6160
- C:\Windows\System\VFXLxXG.exe
  C:\Windows\System\VFXLxXG.exe
  2⤵
  PID:8156
- C:\Windows\System\qYAnYNY.exe
  C:\Windows\System\qYAnYNY.exe
  2⤵
  PID:8932
- C:\Windows\System\xSEDkuR.exe
  C:\Windows\System\xSEDkuR.exe
  2⤵
  PID:11296
- C:\Windows\System\kfMXdAD.exe
  C:\Windows\System\kfMXdAD.exe
  2⤵
  PID:11312
- C:\Windows\System\TCEbMIR.exe
  C:\Windows\System\TCEbMIR.exe
  2⤵
  PID:11340
- C:\Windows\System\qCFtWsv.exe
  C:\Windows\System\qCFtWsv.exe
  2⤵
  PID:11384
- C:\Windows\System\rpPNoiN.exe
  C:\Windows\System\rpPNoiN.exe
  2⤵
  PID:11416
- C:\Windows\System\BETsFiO.exe
  C:\Windows\System\BETsFiO.exe
  2⤵
  PID:11440
- C:\Windows\System\uEOsXJT.exe
  C:\Windows\System\uEOsXJT.exe
  2⤵
  PID:11468
- C:\Windows\System\qOGAIge.exe
  C:\Windows\System\qOGAIge.exe
  2⤵
  PID:11496
- C:\Windows\System\hYtnYBi.exe
  C:\Windows\System\hYtnYBi.exe
  2⤵
  PID:11524
- C:\Windows\System\POjfsyi.exe
  C:\Windows\System\POjfsyi.exe
  2⤵
  PID:11552
- C:\Windows\System\AOjpUSl.exe
  C:\Windows\System\AOjpUSl.exe
  2⤵
  PID:11580
- C:\Windows\System\WrmBtJM.exe
  C:\Windows\System\WrmBtJM.exe
  2⤵
  PID:11608
- C:\Windows\System\BXeDDVB.exe
  C:\Windows\System\BXeDDVB.exe
  2⤵
  PID:11636
- C:\Windows\System\LXlyOJB.exe
  C:\Windows\System\LXlyOJB.exe
  2⤵
  PID:11656
- C:\Windows\System\ZUwjOii.exe
  C:\Windows\System\ZUwjOii.exe
  2⤵
  PID:11692
- C:\Windows\System\GTdyARd.exe
  C:\Windows\System\GTdyARd.exe
  2⤵
  PID:11720
- C:\Windows\System\lcLfXcE.exe
  C:\Windows\System\lcLfXcE.exe
  2⤵
  PID:11748
- C:\Windows\System\OkANtQE.exe
  C:\Windows\System\OkANtQE.exe
  2⤵
  PID:11776
- C:\Windows\System\WpaawwE.exe
  C:\Windows\System\WpaawwE.exe
  2⤵
  PID:11804
- C:\Windows\System\WxkCTEb.exe
  C:\Windows\System\WxkCTEb.exe
  2⤵
  PID:11832
- C:\Windows\System\pyfnjHR.exe
  C:\Windows\System\pyfnjHR.exe
  2⤵
  PID:11860
- C:\Windows\System\liDUgQD.exe
  C:\Windows\System\liDUgQD.exe
  2⤵
  PID:11888
- C:\Windows\System\qPFMhka.exe
  C:\Windows\System\qPFMhka.exe
  2⤵
  PID:11916
- C:\Windows\System\fljaAMU.exe
  C:\Windows\System\fljaAMU.exe
  2⤵
  PID:11948
- C:\Windows\System\ffKBSZc.exe
  C:\Windows\System\ffKBSZc.exe
  2⤵
  PID:11976
- C:\Windows\System\XGaQwnJ.exe
  C:\Windows\System\XGaQwnJ.exe
  2⤵
  PID:12004
- C:\Windows\System\fLfJxsQ.exe
  C:\Windows\System\fLfJxsQ.exe
  2⤵
  PID:12032
- C:\Windows\System\FlytKMJ.exe
  C:\Windows\System\FlytKMJ.exe
  2⤵
  PID:12060
- C:\Windows\System\JRxCRoA.exe
  C:\Windows\System\JRxCRoA.exe
  2⤵
  PID:12088
- C:\Windows\System\NrgOgNS.exe
  C:\Windows\System\NrgOgNS.exe
  2⤵
  PID:12116
- C:\Windows\System\NNTKPGx.exe
  C:\Windows\System\NNTKPGx.exe
  2⤵
  PID:12144
- C:\Windows\System\WbvjdHL.exe
  C:\Windows\System\WbvjdHL.exe
  2⤵
  PID:12172
- C:\Windows\System\sMfsWfM.exe
  C:\Windows\System\sMfsWfM.exe
  2⤵
  PID:12200
- C:\Windows\System\PbgljEI.exe
  C:\Windows\System\PbgljEI.exe
  2⤵
  PID:12228
- C:\Windows\System\mYDkGkA.exe
  C:\Windows\System\mYDkGkA.exe
  2⤵
  PID:12244
- C:\Windows\System\ZXvTLmT.exe
  C:\Windows\System\ZXvTLmT.exe
  2⤵
  PID:12264
- C:\Windows\System\aGsQUCV.exe
  C:\Windows\System\aGsQUCV.exe
  2⤵
  PID:6616
- C:\Windows\System\lFemEUY.exe
  C:\Windows\System\lFemEUY.exe
  2⤵
  PID:11304
- C:\Windows\System\huIVyrg.exe
  C:\Windows\System\huIVyrg.exe
  2⤵
  PID:4308
- C:\Windows\System\QTCtPMH.exe
  C:\Windows\System\QTCtPMH.exe
  2⤵
  PID:3576
- C:\Windows\System\sscyjKj.exe
  C:\Windows\System\sscyjKj.exe
  2⤵
  PID:11480
- C:\Windows\System\XgYhPLe.exe
  C:\Windows\System\XgYhPLe.exe
  2⤵
  PID:11508
- C:\Windows\System\xyxkMcB.exe
  C:\Windows\System\xyxkMcB.exe
  2⤵
  PID:3744
- C:\Windows\System\qZGgVRQ.exe
  C:\Windows\System\qZGgVRQ.exe
  2⤵
  PID:11624
- C:\Windows\System\acIDeuT.exe
  C:\Windows\System\acIDeuT.exe
  2⤵
  PID:11652
- C:\Windows\System\CRLqBJA.exe
  C:\Windows\System\CRLqBJA.exe
  2⤵
  PID:8704
- C:\Windows\System\ssFpXQU.exe
  C:\Windows\System\ssFpXQU.exe
  2⤵
  PID:11740
- C:\Windows\System\FPSwPDV.exe
  C:\Windows\System\FPSwPDV.exe
  2⤵
  PID:11816
- C:\Windows\System\agVzjRg.exe
  C:\Windows\System\agVzjRg.exe
  2⤵
  PID:11856
- C:\Windows\System\ZyPqzlW.exe
  C:\Windows\System\ZyPqzlW.exe
  2⤵
  PID:11908
- C:\Windows\System\BMQQOvC.exe
  C:\Windows\System\BMQQOvC.exe
  2⤵
  PID:11988
- C:\Windows\System\XBqyBrI.exe
  C:\Windows\System\XBqyBrI.exe
  2⤵
  PID:12052
- C:\Windows\System\svvTsbz.exe
  C:\Windows\System\svvTsbz.exe
  2⤵
  PID:12112
- C:\Windows\System\BDcZvhw.exe
  C:\Windows\System\BDcZvhw.exe
  2⤵
  PID:12164
- C:\Windows\System\nOPuuXd.exe
  C:\Windows\System\nOPuuXd.exe
  2⤵
  PID:12224
- C:\Windows\System\zARexpl.exe
  C:\Windows\System\zARexpl.exe
  2⤵
  PID:11284
- C:\Windows\System\tEewWCp.exe
  C:\Windows\System\tEewWCp.exe
  2⤵
  PID:11368
- C:\Windows\System\FmkNtGh.exe
  C:\Windows\System\FmkNtGh.exe
  2⤵
  PID:11492
- C:\Windows\System\pyZxbtf.exe
  C:\Windows\System\pyZxbtf.exe
  2⤵
  PID:11572
- C:\Windows\System\FNKnCKw.exe
  C:\Windows\System\FNKnCKw.exe
  2⤵
  PID:7020
- C:\Windows\System\flvZsiI.exe
  C:\Windows\System\flvZsiI.exe
  2⤵
  PID:6224
- C:\Windows\System\BSoaUrW.exe
  C:\Windows\System\BSoaUrW.exe
  2⤵
  PID:6648
- C:\Windows\System\eMfiLjt.exe
  C:\Windows\System\eMfiLjt.exe
  2⤵
  PID:11828
- C:\Windows\System\eaGtKvr.exe
  C:\Windows\System\eaGtKvr.exe
  2⤵
  PID:11360
- C:\Windows\System\PxpVMFq.exe
  C:\Windows\System\PxpVMFq.exe
  2⤵
  PID:12084
- C:\Windows\System\mXWeeOs.exe
  C:\Windows\System\mXWeeOs.exe
  2⤵
  PID:12212
- C:\Windows\System\PajOIrP.exe
  C:\Windows\System\PajOIrP.exe
  2⤵
  PID:6716
- C:\Windows\System\LYwMWyR.exe
  C:\Windows\System\LYwMWyR.exe
  2⤵
  PID:2312
- C:\Windows\System\holeBKW.exe
  C:\Windows\System\holeBKW.exe
  2⤵
  PID:6996
- C:\Windows\System\rmyedEu.exe
  C:\Windows\System\rmyedEu.exe
  2⤵
  PID:11736
- C:\Windows\System\jKlfwHv.exe
  C:\Windows\System\jKlfwHv.exe
  2⤵
  PID:6524
- C:\Windows\System\VYJERiA.exe
  C:\Windows\System\VYJERiA.exe
  2⤵
  PID:12236
- C:\Windows\System\HbSSwIh.exe
  C:\Windows\System\HbSSwIh.exe
  2⤵
  PID:7024
- C:\Windows\System\kzkrwke.exe
  C:\Windows\System\kzkrwke.exe
  2⤵
  PID:11592
- C:\Windows\System\YVcBXOG.exe
  C:\Windows\System\YVcBXOG.exe
  2⤵
  PID:7192
- C:\Windows\System\UmCOnER.exe
  C:\Windows\System\UmCOnER.exe
  2⤵
  PID:7252
- C:\Windows\System\FskLvXn.exe
  C:\Windows\System\FskLvXn.exe
  2⤵
  PID:7244
- C:\Windows\System\LoCEnQZ.exe
  C:\Windows\System\LoCEnQZ.exe
  2⤵
  PID:7376
- C:\Windows\System\CJPajSx.exe
  C:\Windows\System\CJPajSx.exe
  2⤵
  PID:1956
- C:\Windows\System\qhFJVpf.exe
  C:\Windows\System\qhFJVpf.exe
  2⤵
  PID:4588
- C:\Windows\System\ouYGNBd.exe
  C:\Windows\System\ouYGNBd.exe
  2⤵
  PID:7440
- C:\Windows\System\xCmIQFb.exe
  C:\Windows\System\xCmIQFb.exe
  2⤵
  PID:7268
- C:\Windows\System\pHLdOPI.exe
  C:\Windows\System\pHLdOPI.exe
  2⤵
  PID:12320
- C:\Windows\System\hzQnBcm.exe
  C:\Windows\System\hzQnBcm.exe
  2⤵
  PID:12348
- C:\Windows\System\NjSlLMv.exe
  C:\Windows\System\NjSlLMv.exe
  2⤵
  PID:12376
- C:\Windows\System\BlcdSig.exe
  C:\Windows\System\BlcdSig.exe
  2⤵
  PID:12404
- C:\Windows\System\NGhCNtx.exe
  C:\Windows\System\NGhCNtx.exe
  2⤵
  PID:12432
- C:\Windows\System\cNzqjKD.exe
  C:\Windows\System\cNzqjKD.exe
  2⤵
  PID:12460
- C:\Windows\System\CyPbEOs.exe
  C:\Windows\System\CyPbEOs.exe
  2⤵
  PID:12488
- C:\Windows\System\JWccGCH.exe
  C:\Windows\System\JWccGCH.exe
  2⤵
  PID:12516
- C:\Windows\System\nOzMyBS.exe
  C:\Windows\System\nOzMyBS.exe
  2⤵
  PID:12544
- C:\Windows\System\MPlcJgG.exe
  C:\Windows\System\MPlcJgG.exe
  2⤵
  PID:12572
- C:\Windows\System\ESUrsEo.exe
  C:\Windows\System\ESUrsEo.exe
  2⤵
  PID:12600
- C:\Windows\System\UFbvxxd.exe
  C:\Windows\System\UFbvxxd.exe
  2⤵
  PID:12628
- C:\Windows\System\waDjDNx.exe
  C:\Windows\System\waDjDNx.exe
  2⤵
  PID:12656
- C:\Windows\System\imABXbe.exe
  C:\Windows\System\imABXbe.exe
  2⤵
  PID:12684
- C:\Windows\System\JXCSqDH.exe
  C:\Windows\System\JXCSqDH.exe
  2⤵
  PID:12712
- C:\Windows\System\iMvxZOB.exe
  C:\Windows\System\iMvxZOB.exe
  2⤵
  PID:12740
- C:\Windows\System\QqqxEPA.exe
  C:\Windows\System\QqqxEPA.exe
  2⤵
  PID:12804
- C:\Windows\System\kuOoxLt.exe
  C:\Windows\System\kuOoxLt.exe
  2⤵
  PID:12888
- C:\Windows\System\JfuBQFX.exe
  C:\Windows\System\JfuBQFX.exe
  2⤵
  PID:12904
- C:\Windows\System\SrHYneK.exe
  C:\Windows\System\SrHYneK.exe
  2⤵
  PID:12932
- C:\Windows\System\MEZcOeK.exe
  C:\Windows\System\MEZcOeK.exe
  2⤵
  PID:12960
- C:\Windows\System\VgZNaRz.exe
  C:\Windows\System\VgZNaRz.exe
  2⤵
  PID:12988
- C:\Windows\System\rdowCLC.exe
  C:\Windows\System\rdowCLC.exe
  2⤵
  PID:13016
- C:\Windows\System\iQBMxVr.exe
  C:\Windows\System\iQBMxVr.exe
  2⤵
  PID:13044
- C:\Windows\System\EJAxACp.exe
  C:\Windows\System\EJAxACp.exe
  2⤵
  PID:13072
- C:\Windows\System\IoLWLFX.exe
  C:\Windows\System\IoLWLFX.exe
  2⤵
  PID:13100
- C:\Windows\System\ePwLiZM.exe
  C:\Windows\System\ePwLiZM.exe
  2⤵
  PID:13128
- C:\Windows\System\HzDJoqQ.exe
  C:\Windows\System\HzDJoqQ.exe
  2⤵
  PID:13156
- C:\Windows\System\WHfGLzT.exe
  C:\Windows\System\WHfGLzT.exe
  2⤵
  PID:13184
- C:\Windows\System\UdtjhwG.exe
  C:\Windows\System\UdtjhwG.exe
  2⤵
  PID:13200
- C:\Windows\System\ftPzcOb.exe
  C:\Windows\System\ftPzcOb.exe
  2⤵
  PID:13232
- C:\Windows\System\EYHGqfA.exe
  C:\Windows\System\EYHGqfA.exe
  2⤵
  PID:13248
- C:\Windows\System\tshSXjf.exe
  C:\Windows\System\tshSXjf.exe
  2⤵
  PID:7452
- C:\Windows\System\HgZZVDQ.exe
  C:\Windows\System\HgZZVDQ.exe
  2⤵
  PID:12308
- C:\Windows\System\BWTBvmy.exe
  C:\Windows\System\BWTBvmy.exe
  2⤵
  PID:7412
- C:\Windows\System\kBaKlnU.exe
  C:\Windows\System\kBaKlnU.exe
  2⤵
  PID:12400
- C:\Windows\System\lhdNKdB.exe
  C:\Windows\System\lhdNKdB.exe
  2⤵
  PID:12448
- C:\Windows\System\awpKDqS.exe
  C:\Windows\System\awpKDqS.exe
  2⤵
  PID:7716
- C:\Windows\System\JtaYSWN.exe
  C:\Windows\System\JtaYSWN.exe
  2⤵
  PID:12564
- C:\Windows\System\FhXguIc.exe
  C:\Windows\System\FhXguIc.exe
  2⤵
  PID:12624
- C:\Windows\System\hCIWELw.exe
  C:\Windows\System\hCIWELw.exe
  2⤵
  PID:12672
- C:\Windows\System\jvOlEzT.exe
  C:\Windows\System\jvOlEzT.exe
  2⤵
  PID:12728
- C:\Windows\System\pXJIIXo.exe
  C:\Windows\System\pXJIIXo.exe
  2⤵
  PID:7932
- C:\Windows\System\gCuKPtJ.exe
  C:\Windows\System\gCuKPtJ.exe
  2⤵
  PID:3768
- C:\Windows\System\SDOloAd.exe
  C:\Windows\System\SDOloAd.exe
  2⤵
  PID:7420
- C:\Windows\System\emVoRVl.exe
  C:\Windows\System\emVoRVl.exe
  2⤵
  PID:7472
- C:\Windows\System\OjdXkhk.exe
  C:\Windows\System\OjdXkhk.exe
  2⤵
  PID:7964
- C:\Windows\System\RckfUOt.exe
  C:\Windows\System\RckfUOt.exe
  2⤵
  PID:8532
- C:\Windows\System\nKzSJMQ.exe
  C:\Windows\System\nKzSJMQ.exe
  2⤵
  PID:7772
- C:\Windows\System\jBtXiCI.exe
  C:\Windows\System\jBtXiCI.exe
  2⤵
  PID:8572
- C:\Windows\System\vUgSxAR.exe
  C:\Windows\System\vUgSxAR.exe
  2⤵
  PID:12784
- C:\Windows\System\inQgLPC.exe
  C:\Windows\System\inQgLPC.exe
  2⤵
  PID:8040
- C:\Windows\System\pcrSwqg.exe
  C:\Windows\System\pcrSwqg.exe
  2⤵
  PID:5524
- C:\Windows\System\gLULjWA.exe
  C:\Windows\System\gLULjWA.exe
  2⤵
  PID:5932
- C:\Windows\System\GFtCdAA.exe
  C:\Windows\System\GFtCdAA.exe
  2⤵
  PID:12792
- C:\Windows\System\MyeIAJJ.exe
  C:\Windows\System\MyeIAJJ.exe
  2⤵
  PID:8724
- C:\Windows\System\TMFjnum.exe
  C:\Windows\System\TMFjnum.exe
  2⤵
  PID:5820
- C:\Windows\System\FVkXEYf.exe
  C:\Windows\System\FVkXEYf.exe
  2⤵
  PID:6100
- C:\Windows\System\QrmBkAL.exe
  C:\Windows\System\QrmBkAL.exe
  2⤵
  PID:9084
- C:\Windows\System\ojdJYMt.exe
  C:\Windows\System\ojdJYMt.exe
  2⤵
  PID:5792
- C:\Windows\System\xRVNFjQ.exe
  C:\Windows\System\xRVNFjQ.exe
  2⤵
  PID:8660
- C:\Windows\System\BvamcYf.exe
  C:\Windows\System\BvamcYf.exe
  2⤵
  PID:5592
- C:\Windows\System\zMbRiie.exe
  C:\Windows\System\zMbRiie.exe
  2⤵
  PID:3512
- C:\Windows\System\QsMovFg.exe
  C:\Windows\System\QsMovFg.exe
  2⤵
  PID:8716
- C:\Windows\System\SywzZGK.exe
  C:\Windows\System\SywzZGK.exe
  2⤵
  PID:8756
- C:\Windows\System\Ggyozei.exe
  C:\Windows\System\Ggyozei.exe
  2⤵
  PID:12872
- C:\Windows\System\kZielnE.exe
  C:\Windows\System\kZielnE.exe
  2⤵
  PID:12952
- C:\Windows\System\vrrrMUr.exe
  C:\Windows\System\vrrrMUr.exe
  2⤵
  PID:13028
- C:\Windows\System\KEdRQQD.exe
  C:\Windows\System\KEdRQQD.exe
  2⤵
  PID:13096
- C:\Windows\System\ljnlkrC.exe
  C:\Windows\System\ljnlkrC.exe
  2⤵
  PID:13168
- C:\Windows\System\HwzMOsc.exe
  C:\Windows\System\HwzMOsc.exe
  2⤵
  PID:13228
- C:\Windows\System\IzQKBYj.exe
  C:\Windows\System\IzQKBYj.exe
  2⤵
  PID:13260
- C:\Windows\System\HDwKnwW.exe
  C:\Windows\System\HDwKnwW.exe
  2⤵
  PID:12388
- C:\Windows\System\FojCXac.exe
  C:\Windows\System\FojCXac.exe
  2⤵
  PID:12476
- C:\Windows\System\WAZfQOM.exe
  C:\Windows\System\WAZfQOM.exe
  2⤵
  PID:12556
- C:\Windows\System\teJpyaY.exe
  C:\Windows\System\teJpyaY.exe
  2⤵
  PID:12668
- C:\Windows\System\oqJMugd.exe
  C:\Windows\System\oqJMugd.exe
  2⤵
  PID:12756
- C:\Windows\System\uKNhoFf.exe
  C:\Windows\System\uKNhoFf.exe
  2⤵
  PID:7392
- C:\Windows\System\XlWQSwD.exe
  C:\Windows\System\XlWQSwD.exe
  2⤵
  PID:9544
- C:\Windows\System\LVcHUQl.exe
  C:\Windows\System\LVcHUQl.exe
  2⤵
  PID:8752
- C:\Windows\System\OSXxsYu.exe
  C:\Windows\System\OSXxsYu.exe
  2⤵
  PID:224
- C:\Windows\System\EhCRulw.exe
  C:\Windows\System\EhCRulw.exe
  2⤵
  PID:9672
- C:\Windows\System\VGFrurH.exe
  C:\Windows\System\VGFrurH.exe
  2⤵
  PID:8456
- C:\Windows\System\YomWiaQ.exe
  C:\Windows\System\YomWiaQ.exe
  2⤵
  PID:9924
- C:\Windows\System\hVQgqOd.exe
  C:\Windows\System\hVQgqOd.exe
  2⤵
  PID:8720
- C:\Windows\System\qGcCbxY.exe
  C:\Windows\System\qGcCbxY.exe
  2⤵
  PID:8936
- C:\Windows\System\jxuBEWi.exe
  C:\Windows\System\jxuBEWi.exe
  2⤵
  PID:9092
- C:\Windows\System\EhbZhhn.exe
  C:\Windows\System\EhbZhhn.exe
  2⤵
  PID:8344
- C:\Windows\System\vxHEVnk.exe
  C:\Windows\System\vxHEVnk.exe
  2⤵
  PID:8964
- C:\Windows\System\LCKPMdP.exe
  C:\Windows\System\LCKPMdP.exe
  2⤵
  PID:9244
- C:\Windows\System\FahWYbk.exe
  C:\Windows\System\FahWYbk.exe
  2⤵
  PID:5904
- C:\Windows\System\VkRZnFE.exe
  C:\Windows\System\VkRZnFE.exe
  2⤵
  PID:12984
- C:\Windows\System\KxozVnW.exe
  C:\Windows\System\KxozVnW.exe
  2⤵
  PID:12864
- C:\Windows\System\PcEdtFS.exe
  C:\Windows\System\PcEdtFS.exe
  2⤵
  PID:4032
- C:\Windows\System\ZWrelxr.exe
  C:\Windows\System\ZWrelxr.exe
  2⤵
  PID:2384
- C:\Windows\System\DfrPLNR.exe
  C:\Windows\System\DfrPLNR.exe
  2⤵
  PID:9492
- C:\Windows\System\tqnSJZa.exe
  C:\Windows\System\tqnSJZa.exe
  2⤵
  PID:12420
- C:\Windows\System\FTKwZDA.exe
  C:\Windows\System\FTKwZDA.exe
  2⤵
  PID:12692
- C:\Windows\System\rzIAPJM.exe
  C:\Windows\System\rzIAPJM.exe
  2⤵
  PID:7208
- C:\Windows\System\FTDnXaB.exe
  C:\Windows\System\FTDnXaB.exe
  2⤵
  PID:7264
- C:\Windows\System\sXtDZce.exe
  C:\Windows\System\sXtDZce.exe
  2⤵
  PID:412
- C:\Windows\System\AERgfvK.exe
  C:\Windows\System\AERgfvK.exe
  2⤵
  PID:5560
- C:\Windows\System\zBpreyt.exe
  C:\Windows\System\zBpreyt.exe
  2⤵
  PID:10124
- C:\Windows\System\tIiekZa.exe
  C:\Windows\System\tIiekZa.exe
  2⤵
  PID:5396
- C:\Windows\System\ljrknUI.exe
  C:\Windows\System\ljrknUI.exe
  2⤵
  PID:9268
- C:\Windows\System\qIFMOlb.exe
  C:\Windows\System\qIFMOlb.exe
  2⤵
  PID:12956
- C:\Windows\System\jtkAVjT.exe
  C:\Windows\System\jtkAVjT.exe
  2⤵
  PID:4604
- C:\Windows\System\aFwNSkA.exe
  C:\Windows\System\aFwNSkA.exe
  2⤵
  PID:8896
- C:\Windows\System\PUktxmB.exe
  C:\Windows\System\PUktxmB.exe
  2⤵
  PID:13208
- C:\Windows\System\dGINShZ.exe
  C:\Windows\System\dGINShZ.exe
  2⤵
  PID:9488
- C:\Windows\System\XBLJIPu.exe
  C:\Windows\System\XBLJIPu.exe
  2⤵
  PID:7936
- C:\Windows\System\OjbyIRs.exe
  C:\Windows\System\OjbyIRs.exe
  2⤵
  PID:8452
- C:\Windows\System\zccdXtj.exe
  C:\Windows\System\zccdXtj.exe
  2⤵
  PID:1052
- C:\Windows\System\IOJCCbj.exe
  C:\Windows\System\IOJCCbj.exe
  2⤵
  PID:212
- C:\Windows\System\cNDQaqm.exe
  C:\Windows\System\cNDQaqm.exe
  2⤵
  PID:9188
- C:\Windows\System\wEkqqvH.exe
  C:\Windows\System\wEkqqvH.exe
  2⤵
  PID:9180
- C:\Windows\System\dVTSwyJ.exe
  C:\Windows\System\dVTSwyJ.exe
  2⤵
  PID:9708
- C:\Windows\System\iMPPPRD.exe
  C:\Windows\System\iMPPPRD.exe
  2⤵
  PID:4256
- C:\Windows\System\zzLxkJE.exe
  C:\Windows\System\zzLxkJE.exe
  2⤵
  PID:9104
- C:\Windows\System\AWpwHJy.exe
  C:\Windows\System\AWpwHJy.exe
  2⤵
  PID:3600
- C:\Windows\System\FUurVcc.exe
  C:\Windows\System\FUurVcc.exe
  2⤵
  PID:5564
- C:\Windows\System\jjtdFtF.exe
  C:\Windows\System\jjtdFtF.exe
  2⤵
  PID:6060
- C:\Windows\System\PXZkzjD.exe
  C:\Windows\System\PXZkzjD.exe
  2⤵
  PID:7072
- C:\Windows\System\vNbDdCy.exe
  C:\Windows\System\vNbDdCy.exe
  2⤵
  PID:8876
- C:\Windows\System\ZBtQdhv.exe
  C:\Windows\System\ZBtQdhv.exe
  2⤵
  PID:3856
- C:\Windows\System\LTbVVyW.exe
  C:\Windows\System\LTbVVyW.exe
  2⤵
  PID:1224
- C:\Windows\System\FsBxCxs.exe
  C:\Windows\System\FsBxCxs.exe
  2⤵
  PID:5408
- C:\Windows\System\jUPzZRk.exe
  C:\Windows\System\jUPzZRk.exe
  2⤵
  PID:9224
- C:\Windows\System\QDqCaYz.exe
  C:\Windows\System\QDqCaYz.exe
  2⤵
  PID:9784
- C:\Windows\System\sUTJABu.exe
  C:\Windows\System\sUTJABu.exe
  2⤵
  PID:9324
- C:\Windows\System\bkbUYdD.exe
  C:\Windows\System\bkbUYdD.exe
  2⤵
  PID:5708
- C:\Windows\System\CoNoFrC.exe
  C:\Windows\System\CoNoFrC.exe
  2⤵
  PID:6096
- C:\Windows\System\IKbnXzv.exe
  C:\Windows\System\IKbnXzv.exe
  2⤵
  PID:8996
- C:\Windows\System\xGgCaHK.exe
  C:\Windows\System\xGgCaHK.exe
  2⤵
  PID:8944
- C:\Windows\System\NONKcDt.exe
  C:\Windows\System\NONKcDt.exe
  2⤵
  PID:12928
- C:\Windows\System\ZxjueUi.exe
  C:\Windows\System\ZxjueUi.exe
  2⤵
  PID:8712
- C:\Windows\System\fEeRrGh.exe
  C:\Windows\System\fEeRrGh.exe
  2⤵
  PID:10456
- C:\Windows\System\fZDdZUO.exe
  C:\Windows\System\fZDdZUO.exe
  2⤵
  PID:12780
- C:\Windows\System\UHeQbPi.exe
  C:\Windows\System\UHeQbPi.exe
  2⤵
  PID:5060
- C:\Windows\System\LyefzUo.exe
  C:\Windows\System\LyefzUo.exe
  2⤵
  PID:10536
- C:\Windows\System\qdCGwlS.exe
  C:\Windows\System\qdCGwlS.exe
  2⤵
  PID:4424
- C:\Windows\System\ZnWcRLX.exe
  C:\Windows\System\ZnWcRLX.exe
  2⤵
  PID:8464
- C:\Windows\System\DeCKJCz.exe
  C:\Windows\System\DeCKJCz.exe
  2⤵
  PID:10680
- C:\Windows\System\RkZAFBn.exe
  C:\Windows\System\RkZAFBn.exe
  2⤵
  PID:3240
- C:\Windows\System\vqXeldb.exe
  C:\Windows\System\vqXeldb.exe
  2⤵
  PID:6728
- C:\Windows\System\uryfQwc.exe
  C:\Windows\System\uryfQwc.exe
  2⤵
  PID:8436
- C:\Windows\System\wppsewe.exe
  C:\Windows\System\wppsewe.exe
  2⤵
  PID:6124
- C:\Windows\System\wQMxsnQ.exe
  C:\Windows\System\wQMxsnQ.exe
  2⤵
  PID:5440
- C:\Windows\System\oGVzmTp.exe
  C:\Windows\System\oGVzmTp.exe
  2⤵
  PID:10956
- C:\Windows\System\eJAqSIN.exe
  C:\Windows\System\eJAqSIN.exe
  2⤵
  PID:10980
- C:\Windows\System\RUfXapi.exe
  C:\Windows\System\RUfXapi.exe
  2⤵
  PID:9412
- C:\Windows\System\tvCfilW.exe
  C:\Windows\System\tvCfilW.exe
  2⤵
  PID:9408
- C:\Windows\System\aCWCHPu.exe
  C:\Windows\System\aCWCHPu.exe
  2⤵
  PID:5876
- C:\Windows\System\IbwJgnc.exe
  C:\Windows\System\IbwJgnc.exe
  2⤵
  PID:4668
- C:\Windows\System\jOKnwcf.exe
  C:\Windows\System\jOKnwcf.exe
  2⤵
  PID:5476
- C:\Windows\System\dcTAGmO.exe
  C:\Windows\System\dcTAGmO.exe
  2⤵
  PID:12884
- C:\Windows\System\TyIUIEm.exe
  C:\Windows\System\TyIUIEm.exe
  2⤵
  PID:12360
- C:\Windows\System\JNMtSUs.exe
  C:\Windows\System\JNMtSUs.exe
  2⤵
  PID:11240
- C:\Windows\System\aOrlxcj.exe
  C:\Windows\System\aOrlxcj.exe
  2⤵
  PID:10556
- C:\Windows\System\dfcnNhY.exe
  C:\Windows\System\dfcnNhY.exe
  2⤵
  PID:10652
- C:\Windows\System\MdFNxmN.exe
  C:\Windows\System\MdFNxmN.exe
  2⤵
  PID:10488
- C:\Windows\System\UVeMAFN.exe
  C:\Windows\System\UVeMAFN.exe
  2⤵
  PID:10592
- C:\Windows\System\fRhJpHJ.exe
  C:\Windows\System\fRhJpHJ.exe
  2⤵
  PID:7008
- C:\Windows\System\bzaFIuq.exe
  C:\Windows\System\bzaFIuq.exe
  2⤵
  PID:7672
- C:\Windows\System\ugxCfxI.exe
  C:\Windows\System\ugxCfxI.exe
  2⤵
  PID:13068
- C:\Windows\System\mtaIwvI.exe
  C:\Windows\System\mtaIwvI.exe
  2⤵
  PID:10904
- C:\Windows\System\KYDXBMz.exe
  C:\Windows\System\KYDXBMz.exe
  2⤵
  PID:10960
- C:\Windows\System\tkCJEpC.exe
  C:\Windows\System\tkCJEpC.exe
  2⤵
  PID:11096
- C:\Windows\System\dOXhbkO.exe
  C:\Windows\System\dOXhbkO.exe
  2⤵
  PID:9736
- C:\Windows\System\XrLCvMI.exe
  C:\Windows\System\XrLCvMI.exe
  2⤵
  PID:9764
- C:\Windows\System\JNHypCg.exe
  C:\Windows\System\JNHypCg.exe
  2⤵
  PID:11136
- C:\Windows\System\lvwhYAQ.exe
  C:\Windows\System\lvwhYAQ.exe
  2⤵
  PID:11192
- C:\Windows\System\VtEEZFG.exe
  C:\Windows\System\VtEEZFG.exe
  2⤵
  PID:5436
- C:\Windows\System\lUQdFEA.exe
  C:\Windows\System\lUQdFEA.exe
  2⤵
  PID:10700
- C:\Windows\System\KBLkrBs.exe
  C:\Windows\System\KBLkrBs.exe
  2⤵
  PID:10840
- C:\Windows\System\YWGcawq.exe
  C:\Windows\System\YWGcawq.exe
  2⤵
  PID:10040
- C:\Windows\System\ajJenix.exe
  C:\Windows\System\ajJenix.exe
  2⤵
  PID:10844
- C:\Windows\System\GqkeFNP.exe
  C:\Windows\System\GqkeFNP.exe
  2⤵
  PID:7904
- C:\Windows\System\BXXsMGT.exe
  C:\Windows\System\BXXsMGT.exe
  2⤵
  PID:11084
- C:\Windows\System\WrrxwVF.exe
  C:\Windows\System\WrrxwVF.exe
  2⤵
  PID:10324
- C:\Windows\System\ShGxAQv.exe
  C:\Windows\System\ShGxAQv.exe
  2⤵
  PID:8124
- C:\Windows\System\omwaRYh.exe
  C:\Windows\System\omwaRYh.exe
  2⤵
  PID:11252
- C:\Windows\System\usPFwDA.exe
  C:\Windows\System\usPFwDA.exe
  2⤵
  PID:6148
- C:\Windows\System\YusGvgu.exe
  C:\Windows\System\YusGvgu.exe
  2⤵
  PID:10984
- C:\Windows\System\YGcpsOC.exe
  C:\Windows\System\YGcpsOC.exe
  2⤵
  PID:10080
- C:\Windows\System\Wnozdnf.exe
  C:\Windows\System\Wnozdnf.exe
  2⤵
  PID:11108
- C:\Windows\System\mYQKvqk.exe
  C:\Windows\System\mYQKvqk.exe
  2⤵
  PID:9584
- C:\Windows\System\IrkxRBH.exe
  C:\Windows\System\IrkxRBH.exe
  2⤵
  PID:8348
- C:\Windows\System\PPcEShn.exe
  C:\Windows\System\PPcEShn.exe
  2⤵
  PID:7628
- C:\Windows\System\VJBeDDw.exe
  C:\Windows\System\VJBeDDw.exe
  2⤵
  PID:9760
- C:\Windows\System\UHVQydf.exe
  C:\Windows\System\UHVQydf.exe
  2⤵
  PID:10584
- C:\Windows\System\JsfIIre.exe
  C:\Windows\System\JsfIIre.exe
  2⤵
  PID:10684
- C:\Windows\System\FYQfFJv.exe
  C:\Windows\System\FYQfFJv.exe
  2⤵
  PID:10972
- C:\Windows\System\ogOnRxz.exe
  C:\Windows\System\ogOnRxz.exe
  2⤵
  PID:11024
- C:\Windows\System\alkodrt.exe
  C:\Windows\System\alkodrt.exe
  2⤵
  PID:6356
- C:\Windows\System\TEWZCkS.exe
  C:\Windows\System\TEWZCkS.exe
  2⤵
  PID:9900
- C:\Windows\System\QGfiKIf.exe
  C:\Windows\System\QGfiKIf.exe
  2⤵
  PID:11228
- C:\Windows\System\pKpWPai.exe
  C:\Windows\System\pKpWPai.exe
  2⤵
  PID:11396
- C:\Windows\System\lSavOkb.exe
  C:\Windows\System\lSavOkb.exe
  2⤵
  PID:11048
- C:\Windows\System\nEsJlkA.exe
  C:\Windows\System\nEsJlkA.exe
  2⤵
  PID:11484
- C:\Windows\System\SvcjwQX.exe
  C:\Windows\System\SvcjwQX.exe
  2⤵
  PID:11504
- C:\Windows\System\TYyIyPt.exe
  C:\Windows\System\TYyIyPt.exe
  2⤵
  PID:11532
- C:\Windows\System\RzcfHIG.exe
  C:\Windows\System\RzcfHIG.exe
  2⤵
  PID:9548
- C:\Windows\System\velgbvt.exe
  C:\Windows\System\velgbvt.exe
  2⤵
  PID:11668
- C:\Windows\System\NMirXzj.exe
  C:\Windows\System\NMirXzj.exe
  2⤵
  PID:11708
- C:\Windows\System\EyZZlEZ.exe
  C:\Windows\System\EyZZlEZ.exe
  2⤵
  PID:11756
- C:\Windows\System\siQhwVc.exe
  C:\Windows\System\siQhwVc.exe
  2⤵
  PID:11852
- C:\Windows\System\KQjSjFR.exe
  C:\Windows\System\KQjSjFR.exe
  2⤵
  PID:12012
- C:\Windows\System\cYZaIwi.exe
  C:\Windows\System\cYZaIwi.exe
  2⤵
  PID:12184
- C:\Windows\System\xVgEtMg.exe
  C:\Windows\System\xVgEtMg.exe
  2⤵
  PID:6756
- C:\Windows\System\eSeDspQ.exe
  C:\Windows\System\eSeDspQ.exe
  2⤵
  PID:3272
- C:\Windows\System\uLIfiJr.exe
  C:\Windows\System\uLIfiJr.exe
  2⤵
  PID:3260
- C:\Windows\System\gRubadp.exe
  C:\Windows\System\gRubadp.exe
  2⤵
  PID:8092
- C:\Windows\System\hOFrvKE.exe
  C:\Windows\System\hOFrvKE.exe
  2⤵
  PID:11540
- C:\Windows\System\AKOIjGX.exe
  C:\Windows\System\AKOIjGX.exe
  2⤵
  PID:12160
- C:\Windows\System\fnOERIz.exe
  C:\Windows\System\fnOERIz.exe
  2⤵
  PID:11488
- C:\Windows\System\gADpEWP.exe
  C:\Windows\System\gADpEWP.exe
  2⤵
  PID:5188
- C:\Windows\System\mjgTceV.exe
  C:\Windows\System\mjgTceV.exe
  2⤵
  PID:11688
- C:\Windows\System\GcsCJFo.exe
  C:\Windows\System\GcsCJFo.exe
  2⤵
  PID:6444
- C:\Windows\System\aLjwwXv.exe
  C:\Windows\System\aLjwwXv.exe
  2⤵
  PID:12152
- C:\Windows\System\eGiOWGX.exe
  C:\Windows\System\eGiOWGX.exe
  2⤵
  PID:11520
- C:\Windows\System\TzAsBLu.exe
  C:\Windows\System\TzAsBLu.exe
  2⤵
  PID:7240
- C:\Windows\System\vtoVdEE.exe
  C:\Windows\System\vtoVdEE.exe
  2⤵
  PID:11768
- C:\Windows\System\fASVRRW.exe
  C:\Windows\System\fASVRRW.exe
  2⤵
  PID:11452
- C:\Windows\System\LpvZqzW.exe
  C:\Windows\System\LpvZqzW.exe
  2⤵
  PID:11744
- C:\Windows\System\lSBPbPm.exe
  C:\Windows\System\lSBPbPm.exe
  2⤵
  PID:11664
- C:\Windows\System\UUaJVYM.exe
  C:\Windows\System\UUaJVYM.exe
  2⤵
  PID:11728
- C:\Windows\System\LbAWRzE.exe
  C:\Windows\System\LbAWRzE.exe
  2⤵
  PID:1984
- C:\Windows\System\cQjoqyb.exe
  C:\Windows\System\cQjoqyb.exe
  2⤵
  PID:11840
- C:\Windows\System\wcEurKw.exe
  C:\Windows\System\wcEurKw.exe
  2⤵
  PID:1124
- C:\Windows\System\TanPFDd.exe
  C:\Windows\System\TanPFDd.exe
  2⤵
  PID:3756
- C:\Windows\System\IyDmhxJ.exe
  C:\Windows\System\IyDmhxJ.exe
  2⤵
  PID:12304
- C:\Windows\System\UpQoxjn.exe
  C:\Windows\System\UpQoxjn.exe
  2⤵
  PID:6352
- C:\Windows\System\iXnpYYF.exe
  C:\Windows\System\iXnpYYF.exe
  2⤵
  PID:6152
- C:\Windows\System\eGTjhpk.exe
  C:\Windows\System\eGTjhpk.exe
  2⤵
  PID:7396
- C:\Windows\System\yoqtaWp.exe
  C:\Windows\System\yoqtaWp.exe
  2⤵
  PID:12588
- C:\Windows\System\CFjXxJw.exe
  C:\Windows\System\CFjXxJw.exe
  2⤵
  PID:3136
- C:\Windows\System\LDxzpje.exe
  C:\Windows\System\LDxzpje.exe
  2⤵
  PID:10372
- C:\Windows\System\iNDqehA.exe
  C:\Windows\System\iNDqehA.exe
  2⤵
  PID:12776
- C:\Windows\System\NDyjtOT.exe
  C:\Windows\System\NDyjtOT.exe
  2⤵
  PID:12328
- C:\Windows\System\NwjpxpG.exe
  C:\Windows\System\NwjpxpG.exe
  2⤵
  PID:11700
- C:\Windows\System\TQxVkMo.exe
  C:\Windows\System\TQxVkMo.exe
  2⤵
  PID:12608
- C:\Windows\System\JWoOwae.exe
  C:\Windows\System\JWoOwae.exe
  2⤵
  PID:6156
- C:\Windows\System\yGdfGXH.exe
  C:\Windows\System\yGdfGXH.exe
  2⤵
  PID:12440
- C:\Windows\System\iIARfTi.exe
  C:\Windows\System\iIARfTi.exe
  2⤵
  PID:10796
- C:\Windows\System\yxdWgmp.exe
  C:\Windows\System\yxdWgmp.exe
  2⤵
  PID:6024
- C:\Windows\System\WgGhvyl.exe
  C:\Windows\System\WgGhvyl.exe
  2⤵
  PID:10252
- C:\Windows\System\jMoORLB.exe
  C:\Windows\System\jMoORLB.exe
  2⤵
  PID:10332
- C:\Windows\System\KwXeCDd.exe
  C:\Windows\System\KwXeCDd.exe
  2⤵
  PID:13340
- C:\Windows\System\HDaURjj.exe
  C:\Windows\System\HDaURjj.exe
  2⤵
  PID:13368
- C:\Windows\System\UqYmhkd.exe
  C:\Windows\System\UqYmhkd.exe
  2⤵
  PID:13404
- C:\Windows\System\SMzTJkR.exe
  C:\Windows\System\SMzTJkR.exe
  2⤵
  PID:13428
- C:\Windows\System\TxmbCNA.exe
  C:\Windows\System\TxmbCNA.exe
  2⤵
  PID:13468
- C:\Windows\System\HfUuqUF.exe
  C:\Windows\System\HfUuqUF.exe
  2⤵
  PID:13484
- C:\Windows\System\RGEryGH.exe
  C:\Windows\System\RGEryGH.exe
  2⤵
  PID:13512
- C:\Windows\System\rWffNsf.exe
  C:\Windows\System\rWffNsf.exe
  2⤵
  PID:13540
- C:\Windows\System\lmPmJpd.exe
  C:\Windows\System\lmPmJpd.exe
  2⤵
  PID:13568
- C:\Windows\System\aSQkKfJ.exe
  C:\Windows\System\aSQkKfJ.exe
  2⤵
  PID:13596
- C:\Windows\System\ZaOToTy.exe
  C:\Windows\System\ZaOToTy.exe
  2⤵
  PID:13624
- C:\Windows\System\GQRbXmq.exe
  C:\Windows\System\GQRbXmq.exe
  2⤵
  PID:13660
- C:\Windows\System\WqLZAmj.exe
  C:\Windows\System\WqLZAmj.exe
  2⤵
  PID:13688
- C:\Windows\System\cDbLcRU.exe
  C:\Windows\System\cDbLcRU.exe
  2⤵
  PID:13716
- C:\Windows\System\HaiprpZ.exe
  C:\Windows\System\HaiprpZ.exe
  2⤵
  PID:13744
- C:\Windows\System\oYtVlTM.exe
  C:\Windows\System\oYtVlTM.exe
  2⤵
  PID:13772
- C:\Windows\System\prTzixv.exe
  C:\Windows\System\prTzixv.exe
  2⤵
  PID:13800
- C:\Windows\System\FnbqXQF.exe
  C:\Windows\System\FnbqXQF.exe
  2⤵
  PID:13828
- C:\Windows\System\SxSJUQl.exe
  C:\Windows\System\SxSJUQl.exe
  2⤵
  PID:13856
- C:\Windows\System\JkPafnO.exe
  C:\Windows\System\JkPafnO.exe
  2⤵
  PID:13884
- C:\Windows\System\GxINtpN.exe
  C:\Windows\System\GxINtpN.exe
  2⤵
  PID:13912
- C:\Windows\System\zZwXqkq.exe
  C:\Windows\System\zZwXqkq.exe
  2⤵
  PID:13940
- C:\Windows\System\rRMvbdS.exe
  C:\Windows\System\rRMvbdS.exe
  2⤵
  PID:13968
- C:\Windows\System\TppyTBo.exe
  C:\Windows\System\TppyTBo.exe
  2⤵
  PID:13996
- C:\Windows\System\YjvsJzA.exe
  C:\Windows\System\YjvsJzA.exe
  2⤵
  PID:14028
- C:\Windows\System\GhYCeKp.exe
  C:\Windows\System\GhYCeKp.exe
  2⤵
  PID:14056
- C:\Windows\System\FYjUvgQ.exe
  C:\Windows\System\FYjUvgQ.exe
  2⤵
  PID:14084
- C:\Windows\System\tZbSjQU.exe
  C:\Windows\System\tZbSjQU.exe
  2⤵
  PID:14112
- C:\Windows\System\qEtTpwK.exe
  C:\Windows\System\qEtTpwK.exe
  2⤵
  PID:14140
- C:\Windows\System\lLaTRjR.exe
  C:\Windows\System\lLaTRjR.exe
  2⤵
  PID:14172
- C:\Windows\System\NYdSwDE.exe
  C:\Windows\System\NYdSwDE.exe
  2⤵
  PID:14204
- C:\Windows\System\EbyDqiL.exe
  C:\Windows\System\EbyDqiL.exe
  2⤵
  PID:14228
- C:\Windows\System\CbgDWlm.exe
  C:\Windows\System\CbgDWlm.exe
  2⤵
  PID:14256
- C:\Windows\System\eXgQouK.exe
  C:\Windows\System\eXgQouK.exe
  2⤵
  PID:14284
- C:\Windows\System\EvWDoEU.exe
  C:\Windows\System\EvWDoEU.exe
  2⤵
  PID:14312
- C:\Windows\System\ZNVsmBy.exe
  C:\Windows\System\ZNVsmBy.exe
  2⤵
  PID:13324
- C:\Windows\System\udLbIFU.exe
  C:\Windows\System\udLbIFU.exe
  2⤵
  PID:13380
- C:\Windows\System\JldQmVh.exe
  C:\Windows\System\JldQmVh.exe
  2⤵
  PID:13424
- C:\Windows\System\bvwUpiG.exe
  C:\Windows\System\bvwUpiG.exe
  2⤵
  PID:13508
- C:\Windows\System\ZyFVrEG.exe
  C:\Windows\System\ZyFVrEG.exe
  2⤵
  PID:13552
- C:\Windows\System\BmToVSt.exe
  C:\Windows\System\BmToVSt.exe
  2⤵
  PID:13608
- C:\Windows\System\TmmvWvE.exe
  C:\Windows\System\TmmvWvE.exe
  2⤵
  PID:13644
- C:\Windows\System\QYFTaAu.exe
  C:\Windows\System\QYFTaAu.exe
  2⤵
  PID:13708
- C:\Windows\System\BGBYttj.exe
  C:\Windows\System\BGBYttj.exe
  2⤵
  PID:10884
- C:\Windows\System\FMXnwxe.exe
  C:\Windows\System\FMXnwxe.exe
  2⤵
  PID:13788
- C:\Windows\System\dIbbfIM.exe
  C:\Windows\System\dIbbfIM.exe
  2⤵
  PID:7444
- C:\Windows\System\BfGXPbj.exe
  C:\Windows\System\BfGXPbj.exe
  2⤵
  PID:13880
- C:\Windows\System\DVNOIEW.exe
  C:\Windows\System\DVNOIEW.exe
  2⤵
  PID:13956
- C:\Windows\System\WdRtcdX.exe
  C:\Windows\System\WdRtcdX.exe
  2⤵
  PID:13988
- C:\Windows\System\zJmodhD.exe
  C:\Windows\System\zJmodhD.exe
  2⤵
  PID:14052
- C:\Windows\System\XckuMGu.exe
  C:\Windows\System\XckuMGu.exe
  2⤵
  PID:14108
- C:\Windows\System\JULZEVj.exe
  C:\Windows\System\JULZEVj.exe
  2⤵
  PID:14168
- C:\Windows\System\rgNvFHG.exe
  C:\Windows\System\rgNvFHG.exe
  2⤵
  PID:14220
- C:\Windows\System\Crunfla.exe
  C:\Windows\System\Crunfla.exe
  2⤵
  PID:14276
- C:\Windows\System\QwFhUyc.exe
  C:\Windows\System\QwFhUyc.exe
  2⤵
  PID:13388
- C:\Windows\System\BUHkGuC.exe
  C:\Windows\System\BUHkGuC.exe
  2⤵
  PID:13456
- C:\Windows\System\XBJiYrd.exe
  C:\Windows\System\XBJiYrd.exe
  2⤵
  PID:13592
- C:\Windows\System\NyBxOIV.exe
  C:\Windows\System\NyBxOIV.exe
  2⤵
  PID:11428
- C:\Windows\System\xHSyCJb.exe
  C:\Windows\System\xHSyCJb.exe
  2⤵
  PID:3980
- C:\Windows\System\UINCjzS.exe
  C:\Windows\System\UINCjzS.exe
  2⤵
  PID:13904
- C:\Windows\System\aeQZiup.exe
  C:\Windows\System\aeQZiup.exe
  2⤵
  PID:13964
- C:\Windows\System\DFOhxDE.exe
  C:\Windows\System\DFOhxDE.exe
  2⤵
  PID:14080
- C:\Windows\System\MbndOyz.exe
  C:\Windows\System\MbndOyz.exe
  2⤵
  PID:14224
- C:\Windows\System\yvokcgy.exe
  C:\Windows\System\yvokcgy.exe
  2⤵
  PID:11932
- C:\Windows\System\LsuMUTY.exe
  C:\Windows\System\LsuMUTY.exe
  2⤵
  PID:12080
- C:\Windows\System\uKCuFvj.exe
  C:\Windows\System\uKCuFvj.exe
  2⤵
  PID:12256
- C:\Windows\System\uNFZNZA.exe
  C:\Windows\System\uNFZNZA.exe
  2⤵
  PID:12912
- C:\Windows\System\WcBBVJI.exe
  C:\Windows\System\WcBBVJI.exe
  2⤵
  PID:12996
- C:\Windows\System\QyOjtjK.exe
  C:\Windows\System\QyOjtjK.exe
  2⤵
  PID:8708
- C:\Windows\System\kSLrsTk.exe
  C:\Windows\System\kSLrsTk.exe
  2⤵
  PID:13420
- C:\Windows\System\HzqvSsf.exe
  C:\Windows\System\HzqvSsf.exe
  2⤵
  PID:13580
- C:\Windows\System\ZFkYDpH.exe
  C:\Windows\System\ZFkYDpH.exe
  2⤵
  PID:13704
- C:\Windows\System\aeDoKgC.exe
  C:\Windows\System\aeDoKgC.exe
  2⤵
  PID:13868
- C:\Windows\System\dwASWlD.exe
  C:\Windows\System\dwASWlD.exe
  2⤵
  PID:13284
- C:\Windows\System\OZRgEDx.exe
  C:\Windows\System\OZRgEDx.exe
  2⤵
  PID:11616
- C:\Windows\System\DuzlDdL.exe
  C:\Windows\System\DuzlDdL.exe
  2⤵
  PID:11460
- C:\Windows\System\hdEIOtB.exe
  C:\Windows\System\hdEIOtB.exe
  2⤵
  PID:12216
- C:\Windows\System\LdymTzM.exe
  C:\Windows\System\LdymTzM.exe
  2⤵
  PID:12920
- C:\Windows\System\ONsTDIU.exe
  C:\Windows\System\ONsTDIU.exe
  2⤵
  PID:13052
- C:\Windows\System\xReoauz.exe
  C:\Windows\System\xReoauz.exe
  2⤵
  PID:13136
- C:\Windows\System\AQaJioC.exe
  C:\Windows\System\AQaJioC.exe
  2⤵
  PID:7612
- C:\Windows\System\QxHRnWh.exe
  C:\Windows\System\QxHRnWh.exe
  2⤵
  PID:14160
- C:\Windows\System\fDhJDvz.exe
  C:\Windows\System\fDhJDvz.exe
  2⤵
  PID:13824
- C:\Windows\System\QuAQGcE.exe
  C:\Windows\System\QuAQGcE.exe
  2⤵
  PID:12188
- C:\Windows\System\ZGNqyxI.exe
  C:\Windows\System\ZGNqyxI.exe
  2⤵
  PID:8008
- C:\Windows\System\lWfohAO.exe
  C:\Windows\System\lWfohAO.exe
  2⤵
  PID:12076
- C:\Windows\System\wowSCTE.exe
  C:\Windows\System\wowSCTE.exe
  2⤵
  PID:7496
- C:\Windows\System\bjQRdDH.exe
  C:\Windows\System\bjQRdDH.exe
  2⤵
  PID:13292
- C:\Windows\System\lfmkndB.exe
  C:\Windows\System\lfmkndB.exe
  2⤵
  PID:8460
- C:\Windows\System\lsEbmlv.exe
  C:\Windows\System\lsEbmlv.exe
  2⤵
  PID:11884
- C:\Windows\System\LbZMzzn.exe
  C:\Windows\System\LbZMzzn.exe
  2⤵
  PID:14076
- C:\Windows\System\tqklggZ.exe
  C:\Windows\System\tqklggZ.exe
  2⤵
  PID:8080
- C:\Windows\System\CVOzUxn.exe
  C:\Windows\System\CVOzUxn.exe
  2⤵
  PID:8508
- C:\Windows\System\IKwVYkW.exe
  C:\Windows\System\IKwVYkW.exe
  2⤵
  PID:14340
- C:\Windows\System\MAlkkOm.exe
  C:\Windows\System\MAlkkOm.exe
  2⤵
  PID:14372
- C:\Windows\System\lZjowDy.exe
  C:\Windows\System\lZjowDy.exe
  2⤵
  PID:14400
- C:\Windows\System\TXxWuiz.exe
  C:\Windows\System\TXxWuiz.exe
  2⤵
  PID:14428
- C:\Windows\System\UFBacXN.exe
  C:\Windows\System\UFBacXN.exe
  2⤵
  PID:14460
- C:\Windows\System\ROxbxvS.exe
  C:\Windows\System\ROxbxvS.exe
  2⤵
  PID:14488
- C:\Windows\System\yfqIftB.exe
  C:\Windows\System\yfqIftB.exe
  2⤵
  PID:14508
- C:\Windows\System\YHndtxG.exe
  C:\Windows\System\YHndtxG.exe
  2⤵
  PID:14544
- C:\Windows\System\yRvCQCI.exe
  C:\Windows\System\yRvCQCI.exe
  2⤵
  PID:14564
- C:\Windows\System\ksLcsxd.exe
  C:\Windows\System\ksLcsxd.exe
  2⤵
  PID:14600
- C:\Windows\System\uqkfqbO.exe
  C:\Windows\System\uqkfqbO.exe
  2⤵
  PID:14628
- C:\Windows\System\XsLQJJk.exe
  C:\Windows\System\XsLQJJk.exe
  2⤵
  PID:14656
- C:\Windows\System\sRKjAgn.exe
  C:\Windows\System\sRKjAgn.exe
  2⤵
  PID:14708
- C:\Windows\System\YZrSmYn.exe
  C:\Windows\System\YZrSmYn.exe
  2⤵
  PID:14744
- C:\Windows\System\AAMCxMW.exe
  C:\Windows\System\AAMCxMW.exe
  2⤵
  PID:14760
- C:\Windows\System\zeCCVcx.exe
  C:\Windows\System\zeCCVcx.exe
  2⤵
  PID:14788
- C:\Windows\System\agmFpBS.exe
  C:\Windows\System\agmFpBS.exe
  2⤵
  PID:14816
- C:\Windows\System\RfMXqQH.exe
  C:\Windows\System\RfMXqQH.exe
  2⤵
  PID:14856
- C:\Windows\System\JZmrwxT.exe
  C:\Windows\System\JZmrwxT.exe
  2⤵
  PID:14872
- C:\Windows\System\pLrMdDZ.exe
  C:\Windows\System\pLrMdDZ.exe
  2⤵
  PID:14888
- C:\Windows\System\VScHWTi.exe
  C:\Windows\System\VScHWTi.exe
  2⤵
  PID:14904
- C:\Windows\System\jntXkGH.exe
  C:\Windows\System\jntXkGH.exe
  2⤵
  PID:14920
- C:\Windows\System\trnxVYJ.exe
  C:\Windows\System\trnxVYJ.exe
  2⤵
  PID:14940
- C:\Windows\System\rSlzYZx.exe
  C:\Windows\System\rSlzYZx.exe
  2⤵
  PID:15020
- C:\Windows\System\gpAtbid.exe
  C:\Windows\System\gpAtbid.exe
  2⤵
  PID:15052
- C:\Windows\System\neNUvQw.exe
  C:\Windows\System\neNUvQw.exe
  2⤵
  PID:15084
- C:\Windows\System\aHgwdiY.exe
  C:\Windows\System\aHgwdiY.exe
  2⤵
  PID:15112
- C:\Windows\System\JvBZJFr.exe
  C:\Windows\System\JvBZJFr.exe
  2⤵
  PID:15140
- C:\Windows\System\IHEFItf.exe
  C:\Windows\System\IHEFItf.exe
  2⤵
  PID:15176
- C:\Windows\System\FsYxyLr.exe
  C:\Windows\System\FsYxyLr.exe
  2⤵
  PID:15200
- C:\Windows\System\YhYxkXJ.exe
  C:\Windows\System\YhYxkXJ.exe
  2⤵
  PID:15224
- C:\Windows\System\xnbRJDI.exe
  C:\Windows\System\xnbRJDI.exe
  2⤵
  PID:15252
- C:\Windows\System\sqACvDK.exe
  C:\Windows\System\sqACvDK.exe
  2⤵
  PID:15280
- C:\Windows\System\kJPdYDh.exe
  C:\Windows\System\kJPdYDh.exe
  2⤵
  PID:15320

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4008 --field-trial-handle=2280,i,716736634476467098,11449718822158202904,262144 --variations-seed-version /prefetch:8
1⤵
PID:3856

Network

DNS

raw.githubusercontent.com

powershell.exe

Remote address:

8.8.8.8:53

Request

raw.githubusercontent.com

IN A

Response

raw.githubusercontent.com

IN A

185.199.109.133

raw.githubusercontent.com

IN A

185.199.110.133

raw.githubusercontent.com

IN A

185.199.111.133

raw.githubusercontent.com

IN A

185.199.108.133
GET

https://raw.githubusercontent.com/

powershell.exe

Remote address:

185.199.109.133:443

Request

GET / HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1237
Host: raw.githubusercontent.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Connection: keep-alive
Content-Length: 0
Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
Location: https://github.com/
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-XSS-Protection: 1; mode=block
X-GitHub-Request-Id: 1B2C:36DCE6:7941:9836:663E0A18
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:06:28 GMT
Via: 1.1 varnish
X-Served-By: cache-lcy-eglc8600082-LCY
X-Cache: HIT
X-Cache-Hits: 2
X-Timer: S1715342789.972507,VS0,VE0
Vary: Authorization,Accept-Encoding,Origin
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-Fastly-Request-ID: 391bd0303bc0e83ace1fd19478307825ee49dc05
Expires: Fri, 10 May 2024 12:11:28 GMT
Source-Age: 939
DNS

github.com

powershell.exe

Remote address:

8.8.8.8:53

Request

github.com

IN A

Response

github.com

IN A

20.26.156.215
GET

https://github.com/

powershell.exe

Remote address:

20.26.156.215:443

Request

GET / HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1237
Host: github.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Server: GitHub.com
Date: Fri, 10 May 2024 12:06:28 GMT
Content-Type: text/html; charset=utf-8
Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Language, Accept-Encoding, Accept, X-Requested-With
content-language: en-US
ETag: W/"562f39fd62b9432be8d0f8fcd14e6378"
Cache-Control: max-age=0, private, must-revalidate
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/copilot-codex/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com github.githubassets.com edge.fullstory.com rs.fullstory.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com github.githubassets.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
Set-Cookie: _gh_sess=FotifBvPO1HQnnl8b0auXqEWKN4Uk6fLQRe6qspa5SVT1SWXV81GWfL88ekgUlUEHbwJrHQnacSZi0kHW8pYZagcdpWfbJhEkw6TvtmVOpS19X58XSL15tn%2Fmwfw0d9F1yz7l0j8R6DG0QZu%2BSozr%2FM1Z7a%2FPO94wr%2BNvgsfHIb3rESHtUnzMBmm29gn1yaJ0CpdntAbbxzFPsT9edKHwdJua3m%2Bk3zSsAJzGlmYIqe%2F8VA5Z%2B8JmhoAjwFPBb9Ta7sEQj0l3s2fDDVS6CioeA%3D%3D--7JO3cyTdpIgvGdwN--Nz2Gu6RavrxhP9HRDoBNFg%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax
Set-Cookie: _octo=GH1.1.1570214516.1715342790; Path=/; Domain=github.com; Expires=Sat, 10 May 2025 12:06:30 GMT; Secure; SameSite=Lax
Set-Cookie: logged_in=no; Path=/; Domain=github.com; Expires=Sat, 10 May 2025 12:06:30 GMT; HttpOnly; Secure; SameSite=Lax
Accept-Ranges: bytes
Transfer-Encoding: chunked
X-GitHub-Request-Id: C326:16420F:3694131:3B01E29:663E0DC5
DNS

232.168.11.51.in-addr.arpa

Remote address:

8.8.8.8:53

Request

232.168.11.51.in-addr.arpa

IN PTR

Response
DNS

172.210.232.199.in-addr.arpa

Remote address:

8.8.8.8:53

Request

172.210.232.199.in-addr.arpa

IN PTR

Response
DNS

133.109.199.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

133.109.199.185.in-addr.arpa

IN PTR

Response

133.109.199.185.in-addr.arpa

IN PTR

cdn-185-199-109-133githubcom
DNS

215.156.26.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

215.156.26.20.in-addr.arpa

IN PTR

Response
DNS

50.23.12.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

50.23.12.20.in-addr.arpa

IN PTR

Response
DNS

171.39.242.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

171.39.242.20.in-addr.arpa

IN PTR

Response
DNS

github.githubassets.com

powershell.exe

Remote address:

8.8.8.8:53

Request

github.githubassets.com

IN A

Response

github.githubassets.com

IN A

185.199.110.154

github.githubassets.com

IN A

185.199.108.154

github.githubassets.com

IN A

185.199.109.154

github.githubassets.com

IN A

185.199.111.154
GET

https://github.githubassets.com/assets/light-0f9c7cd68e73.css

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/light-0f9c7cd68e73.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 6845
Cache-Control: public, max-age=31536000, immutable
Content-Type: text/css
Last-Modified: Wed, 08 May 2024 17:02:52 GMT
ETag: 0x8DC6F80B2A1FC6D
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:05 GMT
Age: 143885
X-Served-By: cache-iad-kcgs7200096-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 64, 54
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 342724fb904eb42a88fd6c9e90f2d5c1e2863727
GET

https://github.githubassets.com/assets/primer-48c59db9c012.css

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/primer-48c59db9c012.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 44077
Cache-Control: public, max-age=31536000, immutable
Content-Type: text/css
Last-Modified: Wed, 08 May 2024 15:50:24 GMT
ETag: 0x8DC6F7693181484
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:05 GMT
Age: 147162
X-Served-By: cache-iad-kiad7000166-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 53, 75
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 3fb90ad398a955f049826fa2a5916c1925b51290
GET

https://github.githubassets.com/assets/global-60706d026742.css

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/global-60706d026742.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 41573
Cache-Control: public, max-age=31536000, immutable
Content-Type: text/css
Last-Modified: Wed, 08 May 2024 21:12:06 GMT
ETag: 0x8DC6FA38427489B
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:05 GMT
Age: 56504
X-Served-By: cache-iad-kcgs7200053-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 57, 24
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 4fb404429d44fc79533a311b320998625aae5ed8
GET

https://github.githubassets.com/assets/dashboard-b9f2fe9b207a.css

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/dashboard-b9f2fe9b207a.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 2444
Cache-Control: public, max-age=31536000, immutable
Content-Type: text/css
Last-Modified: Tue, 07 May 2024 22:24:09 GMT
ETag: 0x8DC6EE46A88FF21
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 56463
X-Served-By: cache-iad-kiad7000064-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 37, 7
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 58431a3ceffe86e3d28b064b60ff0f05a8e0adc0
GET

https://github.githubassets.com/assets/home-ecb9d4ba195a.css

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/home-ecb9d4ba195a.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 1434
Cache-Control: public, max-age=31536000, immutable
Content-Type: text/css
Last-Modified: Wed, 08 May 2024 15:50:23 GMT
ETag: 0x8DC6F7692552A9A
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 146809
X-Served-By: cache-iad-kiad7000148-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 22, 7
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 1f78b536563557402567732ad26a593d8e86438b
GET

https://github.githubassets.com/assets/vendors-node_modules_dompurify_dist_purify_js-13ee51630182.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_dompurify_dist_purify_js-13ee51630182.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 8321
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Fri, 26 Apr 2024 21:56:33 GMT
ETag: 0x8DC663BBCCAB63E
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 1166131
X-Served-By: cache-iad-kjyo7100070-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 70, 141
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: a142ac1ae3d35fca744d351cac35abfa91b3237f
GET

https://github.githubassets.com/assets/vendors-node_modules_smoothscroll-polyfill_dist_smoothscroll_js-node_modules_stacktrace-parse-a448e4-bb5415637fe0.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_smoothscroll-polyfill_dist_smoothscroll_js-node_modules_stacktrace-parse-a448e4-bb5415637fe0.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4880
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 27 Mar 2024 21:48:26 GMT
ETag: 0x8DC4EA7A20B56D2
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 2966789
X-Served-By: cache-iad-kiad7000056-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 52, 92
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: f735aacf8b62d0e19edc8e334de55da4c0a175e1
GET

https://github.githubassets.com/assets/vendors-node_modules_github_selector-observer_dist_index_esm_js-9f960d9b217c.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_github_selector-observer_dist_index_esm_js-9f960d9b217c.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3460
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Tue, 24 Oct 2023 17:57:35 GMT
ETag: 0x8DBD4BAB420D672
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 2780965
X-Served-By: cache-iad-kiad7000063-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 18783, 641
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: e8054f8a26453c8c008305d4afb21429c3ff761b
GET

https://github.githubassets.com/assets/vendors-node_modules_github_relative-time-element_dist_index_js-c76945c5961a.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_github_relative-time-element_dist_index_js-c76945c5961a.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4795
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Fri, 26 Jan 2024 14:37:34 GMT
ETag: 0x8DC1E7C55AB5C06
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 1975482
X-Served-By: cache-iad-kjyo7100082-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 23989, 710
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 4722961edae5fa049947485c93381401b52e0d50
GET

https://github.githubassets.com/assets/vendors-node_modules_github_auto-complete-element_dist_index_js-node_modules_github_details-d-ed9a97-3fb8ce186301.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_github_auto-complete-element_dist_index_js-node_modules_github_details-d-ed9a97-3fb8ce186301.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5245
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 17 Apr 2024 15:39:48 GMT
ETag: 0x8DC5EF49DA2EC4D
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 315219
X-Served-By: cache-iad-kjyo7100126-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 61, 166
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 90feb39da62cd3dfc24581b09c080f8691f5af53
GET

https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_stacktrace-parser_dist_stack-443cd5-1ba4dbac454f.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_stacktrace-parser_dist_stack-443cd5-1ba4dbac454f.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 7205
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 10 Apr 2024 22:31:19 GMT
ETag: 0x8DC59ADF159B0D5
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 1489094
X-Served-By: cache-iad-kjyo7100171-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 7, 143
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: bb1048c30257711b40e98eeb89f55877254b7a00
GET

https://github.githubassets.com/assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-3959a9-28f0ee9fece0.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-3959a9-28f0ee9fece0.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 22900
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 17 Apr 2024 15:39:48 GMT
ETag: 0x8DC5EF49DA72D47
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 315217
X-Served-By: cache-iad-kjyo7100068-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 63, 101
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 9df776c170654c72a0b79cd50492c8df2857bcef
GET

https://github.githubassets.com/assets/github-elements-f7fe73c93e30.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/github-elements-f7fe73c93e30.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 9902
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Mon, 06 May 2024 19:32:07 GMT
ETag: 0x8DC6E03376BB766
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 315220
X-Served-By: cache-iad-kcgs7200117-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 61, 152
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 9691ee6a8a74973deb23b4839aa07352c344f98f
GET

https://github.githubassets.com/assets/element-registry-ac6c66b4ac61.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/element-registry-ac6c66b4ac61.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 7892
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 01:43:50 GMT
ETag: 0x8DC6F004F6EE04C
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 66234
X-Served-By: cache-iad-kcgs7200121-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 60, 17
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: f9093d2a258c16cbf3fa77e01ce9324e6f204a3e
GET

https://github.githubassets.com/assets/vendors-node_modules_lit-html_lit-html_js-5b376145beff.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_lit-html_lit-html_js-5b376145beff.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4105
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Tue, 24 Oct 2023 17:57:35 GMT
ETag: 0x8DBD4BAB41AC2C2
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 1973152
X-Served-By: cache-iad-kiad7000150-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 13, 16
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 5c555c41a7e9c7d1a76386b97f840b670812f0c2
GET

https://github.githubassets.com/assets/vendors-node_modules_morphdom_dist_morphdom-esm_js-node_modules_github_memoize_dist_esm_index_js-05801f7ca718.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_morphdom_dist_morphdom-esm_js-node_modules_github_memoize_dist_esm_index_js-05801f7ca718.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 2324
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 21 Feb 2024 14:59:32 GMT
ETag: 0x8DC32EDB672E4D1
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:07 GMT
Age: 2856608
X-Served-By: cache-iad-kiad7000141-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 12910, 152
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 2271dc46684d2ab9e4a3de5c07b2dab3710b8f0f
GET

https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-a8ec7ed862cf.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-a8ec7ed862cf.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4006
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 10 Apr 2024 22:31:19 GMT
ETag: 0x8DC59ADF18C47C9
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:07 GMT
Age: 2398577
X-Served-By: cache-iad-kcgs7200100-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 6, 210
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 95648d4759efa2875fb05020af1d9005df57cc52
GET

https://github.githubassets.com/assets/vendors-node_modules_github_session-resume_dist_index_js-node_modules_primer_behaviors_dist_e-da6ec6-3f39339c9d98.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_github_session-resume_dist_index_js-node_modules_primer_behaviors_dist_e-da6ec6-3f39339c9d98.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3199
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Thu, 29 Feb 2024 04:42:44 GMT
ETag: 0x8DC38E0DEE6316F
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:07 GMT
Age: 1973683
X-Served-By: cache-iad-kjyo7100025-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 81, 160
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: d89a4f6aed1b7d473dd8c35739203077e648f5c9
GET

https://github.githubassets.com/assets/vendors-node_modules_github_quote-selection_dist_index_js-node_modules_github_textarea-autosi-9e0349-b0f4de5b992f.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_github_quote-selection_dist_index_js-node_modules_github_textarea-autosi-9e0349-b0f4de5b992f.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 10083
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 17 Apr 2024 15:39:48 GMT
ETag: 0x8DC5EF49DA643EC
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:07 GMT
Age: 315225
X-Served-By: cache-iad-kjyo7100029-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 61, 153
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 30ce410a67ef645e979aa52964198b3e76ad7ee7
GET

https://github.githubassets.com/assets/app_assets_modules_github_updatable-content_ts-ui_packages_hydro-analytics_hydro-analytics_ts-82813f-05346aa543fe.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/app_assets_modules_github_updatable-content_ts-ui_packages_hydro-analytics_hydro-analytics_ts-82813f-05346aa543fe.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5882
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 16:15:51 GMT
ETag: 0x8DC608BFBA4C04D
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:08 GMT
Age: 1783954
X-Served-By: cache-iad-kiad7000130-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 40, 84
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: e6561a40123b2b65be6f87b1a2d982da74bf4e03
GET

https://github.githubassets.com/assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_onfocus_ts-app_ass-421cec-355eb4940fad.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_onfocus_ts-app_ass-421cec-355eb4940fad.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4391
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Thu, 11 Apr 2024 10:30:17 GMT
ETag: 0x8DC5A1261D7BD8F
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:08 GMT
Age: 1783954
X-Served-By: cache-iad-kcgs7200025-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 32, 156
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: e8ff982334296f845a25090e20274cb7d14da4ed
GET

https://github.githubassets.com/assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_modules_github_behaviors_include-2e2258-057ee3dfb92c.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_modules_github_behaviors_include-2e2258-057ee3dfb92c.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5779
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Tue, 07 May 2024 21:25:26 GMT
ETag: 0x8DC6EDC36AA3721
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:08 GMT
Age: 53398
X-Served-By: cache-iad-kjyo7100082-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 24, 27
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 9789f403ce77c21067460a89affeda37fa856968
GET

https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-2ea61fcc9a71.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-2ea61fcc9a71.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4305
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Tue, 06 Feb 2024 08:35:48 GMT
ETag: 0x8DC26EE9E556F64
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:08 GMT
Age: 1973146
X-Served-By: cache-iad-kiad7000150-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 3352, 713
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 0377d1d60a7236d733c0ee3520ea90a2f7e5dc2b
GET

https://github.githubassets.com/assets/behaviors-6de464341e2e.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/behaviors-6de464341e2e.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 65022
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 00:13:32 GMT
ETag: 0x8DC6EF3B253CDB9
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:08 GMT
Age: 157168
X-Served-By: cache-iad-kiad7000056-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 46, 75
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: b0e76d40e48c25eba21409da9b7204481a18d5e7
GET

https://github.githubassets.com/assets/marketing-77324aa67515.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/marketing-77324aa67515.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 8602
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Tue, 07 May 2024 14:15:12 GMT
ETag: 0x8DC6EA01C602D78
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:09 GMT
Age: 160592
X-Served-By: cache-iad-kiad7000168-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 27, 7
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 1d493e2a594971197e84d1c0be5bd61e8fc7e338
GET

https://github.githubassets.com/assets/vendors-node_modules_github_webgl-globe_dist_js_main_js-cf5f119d1214.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_github_webgl-globe_dist_js_main_js-cf5f119d1214.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 150655
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Tue, 24 Oct 2023 17:57:35 GMT
ETag: 0x8DBD4BAB430555C
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 253929
Date: Fri, 10 May 2024 12:07:09 GMT
X-Served-By: cache-iad-kjyo7100097-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 33, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 59c6c313e47815fdab2450b4fda85c836e17ef81
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_octicons-react_dist_index_esm_js-node_modules_primer_react_lib-es-541a38-ade861844008.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_primer_octicons-react_dist_index_esm_js-node_modules_primer_react_lib-es-541a38-ade861844008.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 149160
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Fri, 12 Apr 2024 00:37:29 GMT
ETag: 0x8DC5A88BBA9516C
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:09 GMT
Age: 1595062
X-Served-By: cache-iad-kiad7000029-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 22351, 565
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 974baff29ac6e91e1054358709bfb8252493a6f3
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-95a7748e3c39.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-95a7748e3c39.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3435
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Mon, 01 Apr 2024 17:53:37 GMT
ETag: 0x8DC5274A8A45E14
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:13 GMT
Age: 3036443
X-Served-By: cache-iad-kjyo7100070-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 5, 605
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 1973bb0e5e03cc3a2bc3a8ee3bd55c09b56511a9
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-5c105bd4b6bc.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-5c105bd4b6bc.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 6470
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Thu, 18 Apr 2024 03:20:17 GMT
ETag: 0x8DC5F56788D4239
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:14 GMT
Age: 853874
X-Served-By: cache-iad-kcgs7200056-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 73, 95
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 0a94919bf0ab9c9326c5c59c77f7fd1cfec716a7
GET

https://github.githubassets.com/assets/ui_packages_react-core_create-browser-history_ts-ui_packages_safe-storage_safe-storage_ts-ui_-682c2c-e45e451173ec.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/ui_packages_react-core_create-browser-history_ts-ui_packages_safe-storage_safe-storage_ts-ui_-682c2c-e45e451173ec.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4362
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 17 Apr 2024 14:26:18 GMT
ETag: 0x8DC5EEA58953135
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:14 GMT
Age: 1914999
X-Served-By: cache-iad-kjyo7100111-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 13, 153
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 52ad6aca1908f14802885c8dab39475bc4a0ab2f
GET

https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-94fd67-674f4853d4fe.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-94fd67-674f4853d4fe.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5453
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 17 Apr 2024 15:39:49 GMT
ETag: 0x8DC5EF49DBDD01D
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:14 GMT
Age: 315232
X-Served-By: cache-iad-kcgs7200048-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 54, 51
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: f866b53dbb1d4fc25fe1501f718588db02fdce24
GET

https://github.githubassets.com/assets/sessions-ff11af600d3e.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/sessions-ff11af600d3e.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4377
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 17 Apr 2024 14:26:16 GMT
ETag: 0x8DC5EEA57B7637B
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:14 GMT
Age: 1915000
X-Served-By: cache-iad-kjyo7100137-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 24, 117
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: f012c27be99b50e52b8baf40149c3a746c516d4c
GET

https://github.githubassets.com/assets/hero-mobile-7163f4f5de41.webp

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/hero-mobile-7163f4f5de41.webp HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 25912
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/webp
Last-Modified: Fri, 03 Nov 2023 16:44:34 GMT
ETag: 0x8DBDC8C28E47862
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:14 GMT
Age: 4932488
X-Served-By: cache-iad-kcgs7200155-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 43, 4101
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 81c81ae1b7af0f89447de62f9db2b0e7a542083a
GET

https://github.githubassets.com/assets/3m-0151c2fda0ce.svg

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/3m-0151c2fda0ce.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 1043
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Wed, 25 Oct 2023 15:44:25 GMT
ETag: 0x8DBD57144584E52
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:15 GMT
Age: 2986646
X-Served-By: cache-iad-kcgs7200056-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 45, 4052
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: f8ef1488c84beb668588caa2fe4b4c575073ac2a
GET

https://github.githubassets.com/assets/mercedes-fcf97d2d6ec4.svg

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/mercedes-fcf97d2d6ec4.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 7133
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 19 Oct 2023 22:56:27 GMT
ETag: 0x8DBD0F6A095C86B
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:16 GMT
Age: 3134081
X-Served-By: cache-iad-kjyo7100021-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 1743, 4054
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 3ba68cf3868fc0d694bd630dac562e1626081002
GET

https://github.githubassets.com/assets/pg-f1f19955c4e4.svg

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/pg-f1f19955c4e4.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 2848
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 19 Oct 2023 22:56:29 GMT
ETag: 0x8DBD0F6A1A7D89E
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:16 GMT
Age: 2876806
X-Served-By: cache-iad-kiad7000129-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 6, 4067
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 06d6adfa5af54a2f3d32116f1b0d659ac7f3dfa8
GET

https://github.githubassets.com/assets/shape-0-df97fa6b0c27.svg

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/shape-0-df97fa6b0c27.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 480
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 02 Nov 2023 15:40:07 GMT
ETag: 0x8DBDBB9FDDDA076
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:16 GMT
Age: 5698443
X-Served-By: cache-iad-kiad7000097-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 20, 3736
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: e92d9897c78b2e52972a8dbb16ed1604beceb2a4
GET

https://github.githubassets.com/assets/shape-1-c219318e479a.svg

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/shape-1-c219318e479a.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 978
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 02 Nov 2023 15:40:07 GMT
ETag: 0x8DBDBB9FDDE62ED
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:16 GMT
Age: 3284777
X-Served-By: cache-iad-kjyo7100069-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 17, 1514
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: ba94067c79aedf5e4f610076395f4363c061a61f
GET

https://github.githubassets.com/assets/illu-copilot-sidebar-3d2efb504577.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/illu-copilot-sidebar-3d2efb504577.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 53004
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Wed, 25 Oct 2023 16:17:38 GMT
ETag: 0x8DBD575E827EDAC
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:16 GMT
Age: 2960880
X-Served-By: cache-iad-kjyo7100096-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 40, 3760
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: b00a1870940339851c71c713533cf213b6cafb63
GET

https://github.githubassets.com/assets/illu-actions-2-c5178134f381.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/illu-actions-2-c5178134f381.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 88773
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Tue, 31 Oct 2023 15:56:17 GMT
ETag: 0x8DBDA29EAE3C96B
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:16 GMT
Age: 2759296
X-Served-By: cache-iad-kjyo7100087-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 21977, 116
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 067d92a14578f7c78cee056ebda085a3041795b3
GET

https://github.githubassets.com/assets/illu-mobile-chat-dc2418cc6775.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/illu-mobile-chat-dc2418cc6775.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 157575
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Mon, 06 May 2024 16:37:35 GMT
ETag: 0x8DC6DEAD5D071B0
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 242021
Date: Fri, 10 May 2024 12:07:16 GMT
X-Served-By: cache-iad-kjyo7100042-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 18, 0
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 1571b0583d13c06598ad25bd98fbe6ce1e1be34e
GET

https://github.githubassets.com/assets/illu-ghas-list-84af1f1ce2b8.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/illu-ghas-list-84af1f1ce2b8.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 30587
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Thu, 26 Oct 2023 15:51:00 GMT
ETag: 0x8DBD63B59C0AD5E
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:16 GMT
Age: 3039135
X-Served-By: cache-iad-kjyo7100038-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 1, 478
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 3d93b2a0ade0a7db28511d75c856ab43e6bb38f2
GET

https://github.githubassets.com/assets/illu-code-scanning-fc9dfb212aa3.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/illu-code-scanning-fc9dfb212aa3.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 70105
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Thu, 19 Oct 2023 22:56:25 GMT
ETag: 0x8DBD0F69F297AB9
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 425956
Date: Fri, 10 May 2024 12:07:16 GMT
X-Served-By: cache-iad-kiad7000123-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 20448, 0
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: c328d4fb5053601f4614bcd7332dee8a4b6bcca4
GET

https://github.githubassets.com/assets/illu-secret-scanning-2-88fb429376d6.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/illu-secret-scanning-2-88fb429376d6.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 37410
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Thu, 26 Oct 2023 15:51:00 GMT
ETag: 0x8DBD63B59C20B5B
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 2764876
Date: Fri, 10 May 2024 12:07:16 GMT
X-Served-By: cache-iad-kiad7000071-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 24, 0
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: b287dbc93775a8ad8d4caeb13872a39873e98cd0
GET

https://github.githubassets.com/assets/issues-plan-2-46d1ce1d4519.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/issues-plan-2-46d1ce1d4519.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 127003
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Mon, 30 Oct 2023 13:22:10 GMT
ETag: 0x8DBD94B3926D7AF
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:16 GMT
Age: 2951203
X-Served-By: cache-iad-kcgs7200128-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 4001, 3
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: ad3c61a450a852c6a7818c2f787436820250e2b9
GET

https://github.githubassets.com/assets/illu-discussions-2-b915a6dd867e.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/illu-discussions-2-b915a6dd867e.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 81599
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Mon, 30 Oct 2023 13:22:10 GMT
ETag: 0x8DBD94B38DAE1CF
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:17 GMT
Age: 1900522
X-Served-By: cache-iad-kiad7000110-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 9, 6
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 27175eb752d5050e39a773ce53f1526dbda9dab4
GET

https://github.githubassets.com/assets/commandpost-18d45fffda67.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/commandpost-18d45fffda67.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 35498
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Thu, 19 Oct 2023 22:56:20 GMT
ETag: 0x8DBD0F69C3CF88B
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:17 GMT
Age: 5168716
X-Served-By: cache-iad-kiad7000179-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 38288, 273
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 7042e2830ff390b52bac216a7d098d06a4ace67d
GET

https://github.githubassets.com/assets/curl-24ff778d1afc.jpeg

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/curl-24ff778d1afc.jpeg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5316
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/jpeg
Last-Modified: Thu, 19 Oct 2023 22:56:20 GMT
ETag: 0x8DBD0F69C5C1D48
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:17 GMT
Age: 1224489
X-Served-By: cache-iad-kiad7000127-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 10, 6
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 0b06d7eab80fdaa107b025bf89e56e02a0f48ec8
GET

https://github.githubassets.com/assets/imolorhe-9d771b1d4332.jpeg

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/imolorhe-9d771b1d4332.jpeg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3785
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/jpeg
Last-Modified: Thu, 19 Oct 2023 22:56:25 GMT
ETag: 0x8DBD0F69F1D7A4A
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:17 GMT
Age: 939977
X-Served-By: cache-iad-kjyo7100048-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 8, 9
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 505cab583dfe68ce28dafec627ee345ca35c750e
GET

https://github.githubassets.com/assets/homebrew-c7e38eeacb52.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/homebrew-c7e38eeacb52.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 6942
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Thu, 19 Oct 2023 22:56:24 GMT
ETag: 0x8DBD0F69EC2536E
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:17 GMT
Age: 1747815
X-Served-By: cache-iad-kcgs7200042-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 1, 10
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: cd4181e33b13da29b5e587f2c8db6fd2eab0cbad
GET

https://github.githubassets.com/assets/dayhaysoos-c50659cac73b.jpeg

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/dayhaysoos-c50659cac73b.jpeg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 6361
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/jpeg
Last-Modified: Thu, 19 Oct 2023 22:56:21 GMT
ETag: 0x8DBD0F69CCD993D
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:17 GMT
Age: 2786536
X-Served-By: cache-iad-kiad7000051-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 32533, 282
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: e51554c957c49e138ff851a442d1f5e9a950b82c
GET

https://github.githubassets.com/assets/globe-d6f3f4ee645a.jpg

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/globe-d6f3f4ee645a.jpg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 121231
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/jpeg
Last-Modified: Thu, 19 Oct 2023 22:56:24 GMT
ETag: 0x8DBD0F69E5A42C7
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:17 GMT
Age: 2757856
X-Served-By: cache-iad-kiad7000095-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 37, 8
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 57177135fe811f0ca4d79303934829f8bef71806
GET

https://github.githubassets.com/assets/footer-mona-d1c861cd8018.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/footer-mona-d1c861cd8018.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 24094
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Fri, 03 Nov 2023 14:46:32 GMT
ETag: 0x8DBDC7BABCFF60E
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:17 GMT
Age: 1877334
X-Served-By: cache-iad-kjyo7100020-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 1, 122
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: d51f3175d758f479d65d426dbc4b7423753319be
GET

https://github.githubassets.com/assets/footer-star-36e5b5724973.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/footer-star-36e5b5724973.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 2681
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Fri, 03 Nov 2023 14:46:32 GMT
ETag: 0x8DBDC7BABCFA842
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:17 GMT
Age: 2770524
X-Served-By: cache-iad-kjyo7100039-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 1, 2
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: ea8fe946f77b28c1bae828e11eb487b8e255c00d
GET

https://github.githubassets.com/assets/footer-orb-a0438104a7a2.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/footer-orb-a0438104a7a2.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 9318
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Fri, 03 Nov 2023 14:46:32 GMT
ETag: 0x8DBDC7BABCF81C2
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:17 GMT
Age: 2095336
X-Served-By: cache-iad-kiad7000074-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 1, 10
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 9ba9bdb1c817f3fc1af8bed6af47d6a9946a4004
GET

https://github.githubassets.com/assets/dark-13e7ced9cfd1.css

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/dark-13e7ced9cfd1.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 6854
Cache-Control: public, max-age=31536000, immutable
Content-Type: text/css
Last-Modified: Wed, 08 May 2024 17:02:49 GMT
ETag: 0x8DC6F80B0B1B3B4
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:05 GMT
Age: 143885
X-Served-By: cache-iad-kcgs7200035-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 65, 69
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 039d2567b701a095e9867d38ea460ac0781c40cb
GET

https://github.githubassets.com/assets/primer-primitives-03314b57bb48.css

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/primer-primitives-03314b57bb48.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 1634
Cache-Control: public, max-age=31536000, immutable
Content-Type: text/css
Last-Modified: Wed, 08 May 2024 17:02:53 GMT
ETag: 0x8DC6F80B30E9BFA
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:05 GMT
Age: 143886
X-Served-By: cache-iad-kiad7000053-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 63, 60
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 4f0f437e80407722d5a8f4cd3cd5fb1ef0b1c5d5
GET

https://github.githubassets.com/assets/github-da273831c5c7.css

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/github-da273831c5c7.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 22589
Cache-Control: public, max-age=31536000, immutable
Content-Type: text/css
Last-Modified: Fri, 19 Apr 2024 14:34:46 GMT
ETag: 0x8DC607DDC321205
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:05 GMT
Age: 315221
X-Served-By: cache-iad-kcgs7200163-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 65, 158
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: b44ba189058f87ee1abf769527e34c4e923e48d6
GET

https://github.githubassets.com/assets/discussions-4a9715cdd9f3.css

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/discussions-4a9715cdd9f3.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 1379
Cache-Control: public, max-age=31536000, immutable
Content-Type: text/css
Last-Modified: Tue, 06 Feb 2024 14:39:35 GMT
ETag: 0x8DC272170CBB925
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 2917933
X-Served-By: cache-iad-kjyo7100069-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 25148, 205
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: df40c842aafc132efd2832885d3fe740eb0966db
GET

https://github.githubassets.com/assets/site-7b660c024ef0.css

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/site-7b660c024ef0.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 10125
Cache-Control: public, max-age=31536000, immutable
Content-Type: text/css
Last-Modified: Wed, 08 May 2024 15:50:25 GMT
ETag: 0x8DC6F76937865D0
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 147148
X-Served-By: cache-iad-kcgs7200110-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 31, 16
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 926cfd81d4e75807b84f68ca093710af7fa95855
GET

https://github.githubassets.com/assets/wp-runtime-7ad2c0dcadf9.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/wp-runtime-7ad2c0dcadf9.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 12656
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Fri, 10 May 2024 07:53:53 GMT
ETag: 0x8DC70C65696B4BC
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 5281
X-Served-By: cache-iad-kcgs7200131-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 9, 8
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 0fe5f18346c84c9c70ecc7d31b93d5c4cd249619
GET

https://github.githubassets.com/assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-7bd350d761f4.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-7bd350d761f4.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3245
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Tue, 12 Mar 2024 18:24:27 GMT
ETag: 0x8DC42C1A6EBE6E7
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 2847134
X-Served-By: cache-iad-kiad7000125-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 47125, 132
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: bd22b0399b7f91eca7be3e24273ce316d564a8a5
GET

https://github.githubassets.com/assets/environment-5555c6700ada.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/environment-5555c6700ada.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5513
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Thu, 25 Apr 2024 16:40:24 GMT
ETag: 0x8DC654667F0AC59
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 937186
X-Served-By: cache-iad-kiad7000107-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 47, 165
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 206931103320ac9b41980f607d1d6443454a796d
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-086f7a27bac0.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-086f7a27bac0.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3369
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 13 Dec 2023 20:04:22 GMT
ETag: 0x8DBFC16B2EB2DBF
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 2986703
X-Served-By: cache-iad-kcgs7200056-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 50594, 743
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: a5e83fd9573d70e76a00715d2ab67e776df7197f
GET

https://github.githubassets.com/assets/vendors-node_modules_github_combobox-nav_dist_index_js-node_modules_github_markdown-toolbar-e-820fc0-bc8f02b96749.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_github_combobox-nav_dist_index_js-node_modules_github_markdown-toolbar-e-820fc0-bc8f02b96749.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5054
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Mon, 26 Feb 2024 19:17:29 GMT
ETag: 0x8DC36FF9311C578
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 1840743
X-Served-By: cache-iad-kcgs7200020-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 31, 150
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 527e3524f0b8797ca4084cac7e47e8f39475fc55
GET

https://github.githubassets.com/assets/vendors-node_modules_github_text-expander-element_dist_index_js-8a621df59e80.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_github_text-expander-element_dist_index_js-8a621df59e80.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3814
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Fri, 23 Feb 2024 10:52:50 GMT
ETag: 0x8DC345D9433CD2B
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 3026366
X-Served-By: cache-iad-kcgs7200178-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 29, 150
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 995f4f69826e3f50a0d91e881ca3041aef4e5e50
GET

https://github.githubassets.com/assets/vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-b7d8f4-7dc906febe69.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-b7d8f4-7dc906febe69.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5703
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Mon, 08 Apr 2024 21:06:44 GMT
ETag: 0x8DC580FCBA459C2
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 2722683
X-Served-By: cache-iad-kiad7000084-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 17, 160
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: e649a881ad38016c49392064654c990c9d684a45
GET

https://github.githubassets.com/assets/app_assets_modules_github_onfocus_ts-ui_packages_trusted-types-policies_policy_ts-ui_packages-6fe316-d6d20db61005.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/app_assets_modules_github_onfocus_ts-ui_packages_trusted-types-policies_policy_ts-ui_packages-6fe316-d6d20db61005.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5401
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Thu, 25 Apr 2024 16:40:22 GMT
ETag: 0x8DC654666CFB88F
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 937187
X-Served-By: cache-iad-kjyo7100123-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 56, 163
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 504f5a42f08cd57fe35be915905a4c302c9f7a08
GET

https://github.githubassets.com/assets/vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_hydro-analytics-client_-4da1df-9de8d527f925.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_hydro-analytics-client_-4da1df-9de8d527f925.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3593
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 21 Feb 2024 14:59:32 GMT
ETag: 0x8DC32EDB64771CB
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 1667112
X-Served-By: cache-iad-kcgs7200030-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 39, 162
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: cb862977c87cce51abe7e1167788e6924ec8c988
GET

https://github.githubassets.com/assets/vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_githu-fd5530-6f4d94175afe.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_githu-fd5530-6f4d94175afe.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 7453
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Thu, 25 Apr 2024 10:51:15 GMT
ETag: 0x8DC6515A15B19A3
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:06 GMT
Age: 279432
X-Served-By: cache-iad-kcgs7200077-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 4, 12
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 7638f4df5b7bfd9b9d1b616799f5769443e19492
GET

https://github.githubassets.com/assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-c91f4ad18b62.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-c91f4ad18b62.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 19571
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 13 Dec 2023 17:40:24 GMT
ETag: 0x8DBFC029676217D
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:07 GMT
Age: 2858466
X-Served-By: cache-iad-kiad7000173-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 91549, 16
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: cfc85716e78b4a5d121ab9ea75d933e3b4dc9d72
GET

https://github.githubassets.com/assets/vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_github_hotkey-1a1d91-d831c241f313.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_github_hotkey-1a1d91-d831c241f313.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4810
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Mon, 06 May 2024 21:23:02 GMT
ETag: 0x8DC6E12B67E3E17
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:07 GMT
Age: 232139
X-Served-By: cache-iad-kiad7000173-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 45, 102
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 0ea6b25196aa04ac2e91d73253b2f44a6f5f8287
GET

https://github.githubassets.com/assets/vendors-node_modules_color-convert_index_js-72c9fbde5ad4.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_color-convert_index_js-72c9fbde5ad4.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5045
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Tue, 24 Oct 2023 17:57:34 GMT
ETag: 0x8DBD4BAB3AB8E38
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:07 GMT
Age: 2528467
X-Served-By: cache-iad-kjyo7100077-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 58073, 733
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 245ca0749a8949267a3a331bf69e2d1b2ed12ad8
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_dimensions_js-node_modules_github_jtml_lib_index_js-95b84ee6bc34.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_primer_behaviors_dist_esm_dimensions_js-node_modules_github_jtml_lib_index_js-95b84ee6bc34.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3179
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Tue, 05 Dec 2023 19:17:13 GMT
ETag: 0x8DBF5C6C9ABE518
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:07 GMT
Age: 2155597
X-Served-By: cache-iad-kjyo7100150-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 16146, 749
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 3826d140b49d38835216780bdf0e35c66f5e84f8
GET

https://github.githubassets.com/assets/ui_packages_sudo_sudo_ts-74c0d1051bc3.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/ui_packages_sudo_sudo_ts-74c0d1051bc3.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4624
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Thu, 25 Apr 2024 16:40:30 GMT
ETag: 0x8DC65466B33D8A4
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:08 GMT
Age: 937189
X-Served-By: cache-iad-kcgs7200095-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 45, 115
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 44bcdc25c8dd07de55f171fc8db1f5f850c24050
GET

https://github.githubassets.com/assets/app_assets_modules_github_sticky-scroll-into-view_ts-1390d8d5a0dc.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/app_assets_modules_github_sticky-scroll-into-view_ts-1390d8d5a0dc.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3502
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Mon, 22 Apr 2024 21:43:23 GMT
ETag: 0x8DC63153BE4D358
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:08 GMT
Age: 1462970
X-Served-By: cache-iad-kcgs7200052-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 36, 153
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: ad599c049f4db7e90f53a2d4abd8a35fe17e5ca6
GET

https://github.githubassets.com/assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-9285faa0e011.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-9285faa0e011.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3316
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Thu, 22 Feb 2024 16:53:07 GMT
ETag: 0x8DC33C6BE7816FA
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:08 GMT
Age: 2968754
X-Served-By: cache-iad-kiad7000028-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 68493, 716
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 22c9ffa0ede19c35b3936a79e978a89941eea43a
GET

https://github.githubassets.com/assets/notifications-global-6d6db5144cc3.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/notifications-global-6d6db5144cc3.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3489
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 27 Mar 2024 21:48:22 GMT
ETag: 0x8DC4EA79FCC04B4
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:08 GMT
Age: 2076394
X-Served-By: cache-iad-kjyo7100026-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 9222, 717
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 90fbfe22f2b1b0fe7a26ce7d79f5c12d5bf1b6f7
GET

https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_stacktrace-parser_dist_stack-8189f0-59690e27a70d.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_stacktrace-parser_dist_stack-8189f0-59690e27a70d.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 7710
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 10 Apr 2024 22:31:19 GMT
ETag: 0x8DC59ADF1571BAD
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:09 GMT
Age: 2398511
X-Served-By: cache-iad-kiad7000083-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 7, 5904
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: b6a2285e5dcf2ca8a21ee064eef8ab7ed6689c07
GET

https://github.githubassets.com/assets/home-5523b374aaa9.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/home-5523b374aaa9.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 375
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Tue, 26 Mar 2024 12:01:52 GMT
ETag: 0x8DC4D8C8690D958
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:09 GMT
Age: 1542848
X-Served-By: cache-iad-kcgs7200051-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 9127, 77
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: cfd9b41bf4f1547a376202f0cb7ed6a2895a81a4
GET

https://github.githubassets.com/assets/webgl-globe-d3e3295f0ac2.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/webgl-globe-d3e3295f0ac2.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 191
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Thu, 22 Feb 2024 16:53:17 GMT
ETag: 0x8DC33C6C4DF4E45
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:09 GMT
Age: 1488067
X-Served-By: cache-iad-kcgs7200055-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 51, 8
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 37879818eb490b99caa645ec681fe6c48efb53da
GET

https://github.githubassets.com/assets/react-lib-1fbfc5be2c18.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/react-lib-1fbfc5be2c18.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 66987
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Tue, 24 Oct 2023 17:57:32 GMT
ETag: 0x8DBD4BAB2A79ED8
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:09 GMT
Age: 1485723
X-Served-By: cache-iad-kcgs7200091-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 15, 165
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 64c6023d38fd64949e162879c263be06c7491d3e
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Box_Box_js-8f8c5e2a2cbf.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_primer_react_lib-esm_Box_Box_js-8f8c5e2a2cbf.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4739
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Thu, 08 Feb 2024 11:06:17 GMT
ETag: 0x8DC2895F91375BB
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:13 GMT
Age: 5693161
X-Served-By: cache-iad-kjyo7100097-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 50, 480
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: b29555066b04dea2dd47c81de8efbc02292f7487
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_react_node_modules_primer_octicons-react_dist_index_esm_mjs-cb996b1b8e38.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_primer_react_node_modules_primer_octicons-react_dist_index_esm_mjs-cb996b1b8e38.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 6663
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Mon, 08 Apr 2024 04:48:31 GMT
ETag: 0x8DC578724271FD8
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:13 GMT
Age: 2017038
X-Served-By: cache-iad-kjyo7100035-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 11, 2929
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 206edfa82651c0d7d4ef0f5a4eb54c5ce567802a
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js-f41028bf9254.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js-f41028bf9254.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 6492
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Thu, 18 Apr 2024 03:20:16 GMT
ETag: 0x8DC5F56781E340E
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:14 GMT
Age: 1595067
X-Served-By: cache-iad-kjyo7100052-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 73, 143
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 400d54376a23d17605f6fa07ad02b74e3f354287
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_IconButton_js-node_modules_primer_react_lib--b964b4-66488e8c9d07.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/vendors-node_modules_primer_react_lib-esm_Button_IconButton_js-node_modules_primer_react_lib--b964b4-66488e8c9d07.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 12474
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Tue, 07 May 2024 03:23:23 GMT
ETag: 0x8DC6E450D34BF13
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:14 GMT
Age: 232145
X-Served-By: cache-iad-kiad7000064-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 46, 108
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 789e988717d5309a3f14e81ebd22dcb7f7adabab
GET

https://github.githubassets.com/assets/keyboard-shortcuts-dialog-7f241165b252.js

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/keyboard-shortcuts-dialog-7f241165b252.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 9878
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 21:12:09 GMT
ETag: 0x8DC6FA385A749CB
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:14 GMT
Age: 56512
X-Served-By: cache-iad-kcgs7200038-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 54, 11
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 0780332e2fcc4a3917bbfb0b9a7384e982ad4d95
GET

https://github.githubassets.com/assets/hero-desktop-a38b0fd77b6c.webp

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/hero-desktop-a38b0fd77b6c.webp HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 105072
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/webp
Last-Modified: Fri, 03 Nov 2023 16:44:34 GMT
ETag: 0x8DBDC8C28E47862
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:14 GMT
Age: 3035169
X-Served-By: cache-iad-kiad7000070-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 40, 4100
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 044fdedcdb4527f68608dbf1af81fe8b166a0fca
GET

https://github.githubassets.com/assets/kpmg-c249f20c5173.svg

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/kpmg-c249f20c5173.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 2777
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 19 Oct 2023 22:56:26 GMT
ETag: 0x8DBD0F69FDA2986
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:16 GMT
Age: 2962148
X-Served-By: cache-iad-kcgs7200032-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 44, 4063
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 9d49cc34ae8e6b74d6efc883d46ed1d89cf3099a
GET

https://github.githubassets.com/assets/sap-96248a56d312.svg

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/sap-96248a56d312.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 2583
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Wed, 25 Oct 2023 15:44:31 GMT
ETag: 0x8DBD57147E34473
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:16 GMT
Age: 5191875
X-Served-By: cache-iad-kiad7000145-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 27, 4055
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 708a54b3641e4da3445281e2aff0d0d28263241a
GET

https://github.githubassets.com/assets/telus-df0c2109df99.svg

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/telus-df0c2109df99.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3398
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 19 Oct 2023 22:56:32 GMT
ETag: 0x8DBD0F6A3AEA6EB
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:16 GMT
Age: 5083836
X-Served-By: cache-iad-kjyo7100131-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 31, 4077
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: f84d5b84189ac22cc36c17bf8e4ab2d9fc4ab6c9
GET

https://github.githubassets.com/assets/illu-copilot-editor-6474457a5b19.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/illu-copilot-editor-6474457a5b19.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 241485
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Thu, 02 Nov 2023 13:18:10 GMT
ETag: 0x8DBDBA6293AFF42
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:16 GMT
Age: 2763746
X-Served-By: cache-iad-kiad7000059-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 214824, 3974
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: c6fb841fd59c1b003de607cd5254a339302821b6
GET

https://github.githubassets.com/assets/git-branch-productivity-c304b83d09c7.svg

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/git-branch-productivity-c304b83d09c7.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3106
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 19 Oct 2023 22:56:23 GMT
ETag: 0x8DBD0F69E1D306E
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:16 GMT
Age: 3043321
X-Served-By: cache-iad-kcgs7200026-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 28, 1879
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: c3d4d8c445838a21e93acd19db2cbbd5ae4f758e
GET

https://github.githubassets.com/assets/bg-glow-purple-6e9a6a96cb04.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/bg-glow-purple-6e9a6a96cb04.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 617
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Fri, 03 Nov 2023 16:32:00 GMT
ETag: 0x8DBDC8A6790B80A
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:16 GMT
Age: 3027495
X-Served-By: cache-iad-kcgs7200038-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 38, 3623
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: ae23037a6a8f29141a00fef037da9d8f8a1560a3
GET

https://github.githubassets.com/assets/illu-codespaces-1d2d17e8b2b7.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/illu-codespaces-1d2d17e8b2b7.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 86803
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Fri, 27 Oct 2023 14:48:11 GMT
ETag: 0x8DBD6FBBE1E78F4
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:16 GMT
Age: 265456
X-Served-By: cache-iad-kiad7000125-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 25, 6
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 0fc7f471a10512e8e1f855c491b523ed1448e0fc
GET

https://github.githubassets.com/assets/shape-2-f30dcc9bd35c.svg

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/shape-2-f30dcc9bd35c.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 1107
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 02 Nov 2023 15:40:07 GMT
ETag: 0x8DBDBB9FDDE62ED
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 2854307
Date: Fri, 10 May 2024 12:07:16 GMT
X-Served-By: cache-iad-kjyo7100133-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 29170, 0
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: afb0bb593d47520d6522e6fae6f3fa02a5c4c4bc
GET

https://github.githubassets.com/assets/git-branch-security-2-f6a799957581.svg

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/git-branch-security-2-f6a799957581.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3404
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 02 Nov 2023 20:14:54 GMT
ETag: 0x8DBDBE060A4DF71
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 2871196
Date: Fri, 10 May 2024 12:07:16 GMT
X-Served-By: cache-iad-kjyo7100149-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 55929, 0
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 69a2f7aa5dbdb98d87d904cb70f2387386e673d6
GET

https://github.githubassets.com/assets/bg-glow-blue-036b8dc2d1ce.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/bg-glow-blue-036b8dc2d1ce.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 1025
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Fri, 03 Nov 2023 16:32:00 GMT
ETag: 0x8DBDC8A6790DEF5
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:16 GMT
Age: 2876723
X-Served-By: cache-iad-kcgs7200097-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 81987, 5
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 893a97d92c457df4fb5f56a7758fffcf63c4067d
GET

https://github.githubassets.com/assets/illu-dependabot-d98c73cc6724.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/illu-dependabot-d98c73cc6724.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 60260
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Thu, 19 Oct 2023 22:56:25 GMT
ETag: 0x8DBD0F69F216D77
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:16 GMT
Age: 1134620
X-Served-By: cache-iad-kiad7000143-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 7, 6
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 2fc9b0ad65585b7930809db80c405a0a8fb82ab3
GET

https://github.githubassets.com/assets/shape-3-9e542b5c31b8.svg

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/shape-3-9e542b5c31b8.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 1594
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 02 Nov 2023 15:40:07 GMT
ETag: 0x8DBDBB9FDDEB0B1
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:16 GMT
Age: 333948
X-Served-By: cache-iad-kcgs7200101-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 7962, 12
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 37a77da109ae6a5c5d2eaa7ce72cf1e62b4cd1bf
GET

https://github.githubassets.com/assets/git-branch-collaboration-2-e46b1fb1d363.svg

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/git-branch-collaboration-2-e46b1fb1d363.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3388
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 02 Nov 2023 20:14:54 GMT
ETag: 0x8DBDBE060A6FFE4
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:16 GMT
Age: 2757855
X-Served-By: cache-iad-kiad7000095-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 43056, 388
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 97cc79f2e79af4e055b9ae24941bd252e55cde3e
GET

https://github.githubassets.com/assets/illu-projects-2-26077f1dd188.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/illu-projects-2-26077f1dd188.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 39261
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Thu, 26 Oct 2023 15:51:00 GMT
ETag: 0x8DBD63B59BFC3FE
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:17 GMT
Age: 2847017
X-Served-By: cache-iad-kjyo7100129-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 31652, 9
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 879a9afac35974e65d1ee9db2ceef056af598e16
GET

https://github.githubassets.com/assets/illu-pull-requests-2-280cc958fc05.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/illu-pull-requests-2-280cc958fc05.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 35090
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Fri, 27 Oct 2023 13:57:40 GMT
ETag: 0x8DBD6F4AF740331
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:17 GMT
Age: 255196
X-Served-By: cache-iad-kcgs7200121-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 5, 9
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 09ab783e37ff5233eeaa61a5424b64c53a06adc6
GET

https://github.githubassets.com/assets/prophen-da9b089d8a25.jpeg

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/prophen-da9b089d8a25.jpeg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 6448
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/jpeg
Last-Modified: Thu, 19 Oct 2023 22:56:30 GMT
ETag: 0x8DBD0F6A21E0A25
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:17 GMT
Age: 2869516
X-Served-By: cache-iad-kcgs7200133-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 67324, 2
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 6c3a5132624da8847b54a7cbefee98003389ad9d
GET

https://github.githubassets.com/assets/yyx990803-e11c7b140b17.jpeg

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/yyx990803-e11c7b140b17.jpeg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 7993
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/jpeg
Last-Modified: Thu, 19 Oct 2023 22:56:36 GMT
ETag: 0x8DBD0F6A5AE9F1B
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 2845216
Date: Fri, 10 May 2024 12:07:17 GMT
X-Served-By: cache-iad-kjyo7100173-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 4836, 0
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: bffe46c152823bc0df22950e2e1ec546780ce69c
GET

https://github.githubassets.com/assets/kazupon-d7aeb7b8df20.jpeg

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/kazupon-d7aeb7b8df20.jpeg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3898
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/jpeg
Last-Modified: Thu, 19 Oct 2023 22:56:26 GMT
ETag: 0x8DBD0F69FDE1CA7
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:17 GMT
Age: 1992557
X-Served-By: cache-iad-kiad7000066-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 1, 10
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: cb378903f0efac03edc0b018f8e2216d00aeb66a
GET

https://github.githubassets.com/assets/eslint-33bd6140c37f.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/eslint-33bd6140c37f.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3413
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Thu, 19 Oct 2023 22:56:22 GMT
ETag: 0x8DBD0F69D76D64B
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:17 GMT
Age: 2868923
X-Served-By: cache-iad-kjyo7100041-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 32070, 20
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 3b83b377bd3aaed89e443fbc0107beb646864a49
GET

https://github.githubassets.com/assets/footer-copilot-54114bfd1d20.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/footer-copilot-54114bfd1d20.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 14889
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Fri, 03 Nov 2023 14:46:32 GMT
ETag: 0x8DBDC7BABCF81C2
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 2858477
Date: Fri, 10 May 2024 12:07:17 GMT
X-Served-By: cache-iad-kiad7000173-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 53967, 0
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 66fa92b4c0ae392f0eff6d9dde9534d8becfedaa
GET

https://github.githubassets.com/assets/footer-diamond-ed642fc95144.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/footer-diamond-ed642fc95144.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3987
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Fri, 03 Nov 2023 14:46:32 GMT
ETag: 0x8DBDC7BABCDAEAC
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:17 GMT
Age: 1992256
X-Served-By: cache-iad-kiad7000066-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 1054, 1
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 4420481e8b3c6750756be944ee64eb401f0940f7
GET

https://github.githubassets.com/assets/footer-blur-8bc8e1f23df6.png

powershell.exe

Remote address:

185.199.110.154:443

Request

GET /assets/footer-blur-8bc8e1f23df6.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 6601
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Fri, 03 Nov 2023 14:46:32 GMT
ETag: 0x8DBDC7BABCF5A85
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 10 May 2024 12:07:17 GMT
Age: 2383576
X-Served-By: cache-iad-kiad7000097-IAD, cache-lcy-eglc8600038-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 14928, 47
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 298166694d847d65207897272fc68fb1ea67c88b
DNS

154.110.199.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

154.110.199.185.in-addr.arpa

IN PTR

Response

154.110.199.185.in-addr.arpa

IN PTR

cdn-185-199-110-154githubcom
DNS

95.221.229.192.in-addr.arpa

Remote address:

8.8.8.8:53

Request

95.221.229.192.in-addr.arpa

IN PTR

Response
DNS

77.190.18.2.in-addr.arpa

Remote address:

8.8.8.8:53

Request

77.190.18.2.in-addr.arpa

IN PTR

Response

77.190.18.2.in-addr.arpa

IN PTR

a2-18-190-77deploystaticakamaitechnologiescom
DNS

19.229.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

19.229.111.52.in-addr.arpa

IN PTR

Response
DNS

134.32.126.40.in-addr.arpa

Remote address:

8.8.8.8:53

Request

134.32.126.40.in-addr.arpa

IN PTR

Response
DNS

4.173.189.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

4.173.189.20.in-addr.arpa

IN PTR

Response
DNS

217.106.137.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

217.106.137.52.in-addr.arpa

IN PTR

Response
DNS

69.31.126.40.in-addr.arpa

Remote address:

8.8.8.8:53

Request

69.31.126.40.in-addr.arpa

IN PTR

Response

3.120.98.217:8080

daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe

260 B
5
185.199.109.133:443

https://raw.githubusercontent.com/

tls, http

powershell.exe

1.1kB
6.0kB
13
14

HTTP Request

GET https://raw.githubusercontent.com/

HTTP Response

301
20.26.156.215:443

https://github.com/

tls, http

powershell.exe

5.0kB
250.9kB
100
186

HTTP Request

GET https://github.com/

HTTP Response

200
3.120.98.217:8080

daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe

260 B
5
185.199.110.154:443

https://github.githubassets.com/assets/footer-orb-a0438104a7a2.png

tls, http

powershell.exe

81.8kB
1.6MB
1257
1255

HTTP Request

GET https://github.githubassets.com/assets/light-0f9c7cd68e73.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/primer-48c59db9c012.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/global-60706d026742.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/dashboard-b9f2fe9b207a.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/home-ecb9d4ba195a.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_dompurify_dist_purify_js-13ee51630182.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_smoothscroll-polyfill_dist_smoothscroll_js-node_modules_stacktrace-parse-a448e4-bb5415637fe0.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_selector-observer_dist_index_esm_js-9f960d9b217c.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_relative-time-element_dist_index_js-c76945c5961a.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_auto-complete-element_dist_index_js-node_modules_github_details-d-ed9a97-3fb8ce186301.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_stacktrace-parser_dist_stack-443cd5-1ba4dbac454f.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-3959a9-28f0ee9fece0.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/github-elements-f7fe73c93e30.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/element-registry-ac6c66b4ac61.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_lit-html_lit-html_js-5b376145beff.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_morphdom_dist_morphdom-esm_js-node_modules_github_memoize_dist_esm_index_js-05801f7ca718.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-a8ec7ed862cf.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_session-resume_dist_index_js-node_modules_primer_behaviors_dist_e-da6ec6-3f39339c9d98.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_quote-selection_dist_index_js-node_modules_github_textarea-autosi-9e0349-b0f4de5b992f.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_updatable-content_ts-ui_packages_hydro-analytics_hydro-analytics_ts-82813f-05346aa543fe.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_onfocus_ts-app_ass-421cec-355eb4940fad.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_modules_github_behaviors_include-2e2258-057ee3dfb92c.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-2ea61fcc9a71.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/behaviors-6de464341e2e.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/marketing-77324aa67515.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_webgl-globe_dist_js_main_js-cf5f119d1214.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_octicons-react_dist_index_esm_js-node_modules_primer_react_lib-es-541a38-ade861844008.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-95a7748e3c39.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-5c105bd4b6bc.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/ui_packages_react-core_create-browser-history_ts-ui_packages_safe-storage_safe-storage_ts-ui_-682c2c-e45e451173ec.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-94fd67-674f4853d4fe.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/sessions-ff11af600d3e.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/hero-mobile-7163f4f5de41.webp

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/3m-0151c2fda0ce.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/mercedes-fcf97d2d6ec4.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/pg-f1f19955c4e4.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/shape-0-df97fa6b0c27.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/shape-1-c219318e479a.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-copilot-sidebar-3d2efb504577.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-actions-2-c5178134f381.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-mobile-chat-dc2418cc6775.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-ghas-list-84af1f1ce2b8.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-code-scanning-fc9dfb212aa3.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-secret-scanning-2-88fb429376d6.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/issues-plan-2-46d1ce1d4519.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-discussions-2-b915a6dd867e.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/commandpost-18d45fffda67.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/curl-24ff778d1afc.jpeg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/imolorhe-9d771b1d4332.jpeg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/homebrew-c7e38eeacb52.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/dayhaysoos-c50659cac73b.jpeg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/globe-d6f3f4ee645a.jpg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/footer-mona-d1c861cd8018.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/footer-star-36e5b5724973.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/footer-orb-a0438104a7a2.png

HTTP Response

200
185.199.110.154:443

https://github.githubassets.com/assets/footer-blur-8bc8e1f23df6.png

tls, http

powershell.exe

60.2kB
979.7kB
805
802

HTTP Request

GET https://github.githubassets.com/assets/dark-13e7ced9cfd1.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/primer-primitives-03314b57bb48.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/github-da273831c5c7.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/discussions-4a9715cdd9f3.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/site-7b660c024ef0.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/wp-runtime-7ad2c0dcadf9.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-7bd350d761f4.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/environment-5555c6700ada.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-086f7a27bac0.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_combobox-nav_dist_index_js-node_modules_github_markdown-toolbar-e-820fc0-bc8f02b96749.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_text-expander-element_dist_index_js-8a621df59e80.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-b7d8f4-7dc906febe69.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_onfocus_ts-ui_packages_trusted-types-policies_policy_ts-ui_packages-6fe316-d6d20db61005.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_hydro-analytics-client_-4da1df-9de8d527f925.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_githu-fd5530-6f4d94175afe.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-c91f4ad18b62.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_github_hotkey-1a1d91-d831c241f313.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_color-convert_index_js-72c9fbde5ad4.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_dimensions_js-node_modules_github_jtml_lib_index_js-95b84ee6bc34.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/ui_packages_sudo_sudo_ts-74c0d1051bc3.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_sticky-scroll-into-view_ts-1390d8d5a0dc.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-9285faa0e011.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/notifications-global-6d6db5144cc3.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_stacktrace-parser_dist_stack-8189f0-59690e27a70d.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/home-5523b374aaa9.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/webgl-globe-d3e3295f0ac2.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/react-lib-1fbfc5be2c18.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Box_Box_js-8f8c5e2a2cbf.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_node_modules_primer_octicons-react_dist_index_esm_mjs-cb996b1b8e38.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js-f41028bf9254.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_IconButton_js-node_modules_primer_react_lib--b964b4-66488e8c9d07.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/keyboard-shortcuts-dialog-7f241165b252.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/hero-desktop-a38b0fd77b6c.webp

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/kpmg-c249f20c5173.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/sap-96248a56d312.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/telus-df0c2109df99.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-copilot-editor-6474457a5b19.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/git-branch-productivity-c304b83d09c7.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/bg-glow-purple-6e9a6a96cb04.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-codespaces-1d2d17e8b2b7.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/shape-2-f30dcc9bd35c.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/git-branch-security-2-f6a799957581.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/bg-glow-blue-036b8dc2d1ce.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-dependabot-d98c73cc6724.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/shape-3-9e542b5c31b8.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/git-branch-collaboration-2-e46b1fb1d363.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-projects-2-26077f1dd188.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-pull-requests-2-280cc958fc05.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/prophen-da9b089d8a25.jpeg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/yyx990803-e11c7b140b17.jpeg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/kazupon-d7aeb7b8df20.jpeg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/eslint-33bd6140c37f.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/footer-copilot-54114bfd1d20.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/footer-diamond-ed642fc95144.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/footer-blur-8bc8e1f23df6.png

HTTP Response

200
3.120.98.217:8080

daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe

260 B
5
3.120.98.217:8080

daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe

260 B
5
3.120.98.217:8080

daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe

260 B
5
3.120.98.217:8080

daeb2e0e8daa69b0f36c808995a93080_NeikiAnalytics.exe

208 B
4

8.8.8.8:53

raw.githubusercontent.com

dns

powershell.exe

71 B
135 B
1
1

DNS Request

raw.githubusercontent.com

DNS Response

185.199.109.133

185.199.110.133

185.199.111.133

185.199.108.133
8.8.8.8:53

github.com

dns

powershell.exe

56 B
72 B
1
1

DNS Request

github.com

DNS Response

20.26.156.215
8.8.8.8:53

232.168.11.51.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

232.168.11.51.in-addr.arpa
8.8.8.8:53

172.210.232.199.in-addr.arpa

dns

74 B
128 B
1
1

DNS Request

172.210.232.199.in-addr.arpa
8.8.8.8:53

133.109.199.185.in-addr.arpa

dns

74 B
118 B
1
1

DNS Request

133.109.199.185.in-addr.arpa
8.8.8.8:53

215.156.26.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

215.156.26.20.in-addr.arpa
8.8.8.8:53

50.23.12.20.in-addr.arpa

dns

70 B
156 B
1
1

DNS Request

50.23.12.20.in-addr.arpa
8.8.8.8:53

171.39.242.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

171.39.242.20.in-addr.arpa
8.8.8.8:53

github.githubassets.com

dns

powershell.exe

69 B
133 B
1
1

DNS Request

github.githubassets.com

DNS Response

185.199.110.154

185.199.108.154

185.199.109.154

185.199.111.154
8.8.8.8:53

154.110.199.185.in-addr.arpa

dns

74 B
118 B
1
1

DNS Request

154.110.199.185.in-addr.arpa
8.8.8.8:53

95.221.229.192.in-addr.arpa

dns

73 B
144 B
1
1

DNS Request

95.221.229.192.in-addr.arpa
8.8.8.8:53

77.190.18.2.in-addr.arpa

dns

70 B
133 B
1
1

DNS Request

77.190.18.2.in-addr.arpa
8.8.8.8:53

19.229.111.52.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

19.229.111.52.in-addr.arpa
8.8.8.8:53

134.32.126.40.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

134.32.126.40.in-addr.arpa
8.8.8.8:53

4.173.189.20.in-addr.arpa

dns

71 B
157 B
1
1

DNS Request

4.173.189.20.in-addr.arpa
8.8.8.8:53

217.106.137.52.in-addr.arpa

dns

73 B
147 B
1
1

DNS Request

217.106.137.52.in-addr.arpa
8.8.8.8:53

69.31.126.40.in-addr.arpa

dns

71 B
157 B
1
1

DNS Request

69.31.126.40.in-addr.arpa

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ft2gvch1.qix.ps1

Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
C:\Windows\System\CBkvfIm.exe

Filesize
3.3MB

MD5
a33463d68bc8d5ed81e5fe03f750ead4

SHA1
4d6a0cba04e639895fedee11336cd981f48a35a9

SHA256
ad1185f6a3f3019133dc468f4d2da2ff9b595cfdc5b57e8014c293feb4673ee4

SHA512
f4b6608985456b82a31252de7283cd70d693963b58942f91edea2153dee71cf45e7e75691bc40dd19b28aa235bb377e89b98c839bbc1807c95fbd5caafc3abbf

Download Submit
C:\Windows\System\DtYKYgA.exe

Filesize
3.3MB

MD5
be66c332ea5d138c2e4afb0293471173

SHA1
4838ae299a929276c33a1621e3bf6b00412413aa

SHA256
c765c93ddcd20aa16acafff70a35e36e9f04e046a32f27fd90173946a5592aad

SHA512
82e1130844797bfd960ec204913e05989ed65243c144b4b2b62d784230e60de91e9b56adc4ce647269efa70380a08ca30e892b23637dc90b51d7ed0111b6436e

Download Submit
C:\Windows\System\EabroYG.exe

Filesize
3.3MB

MD5
3946369c57615f878098e513e8558804

SHA1
d5a81257e2c038c7106222e36b4ec66b68027078

SHA256
b323e631f9ad034fd9958c6b327e07b620913c75b519775285de483a9a7f1c5b

SHA512
ae1424e0dad28df63f19ebb312208aa1497464a83df3a2754a11b29a56d2913057d39e0b3c991b48ffa9da1dab5192756ee695cd6ea1e7c40cdc312ff48cce10

Download Submit
C:\Windows\System\IJWzEeR.exe

Filesize
3.3MB

MD5
ffcae59e67ccc4bea33d567b3309e923

SHA1
a083172995aa7598c9157b68896818a669f8131c

SHA256
3168c15ab0b787687ff2de5a7f7d11ad495c94c19e2018df1d0c2ac597af2371

SHA512
f92c6e904bfccfe40041867cdfc88a6765c604e716e2298ae79e73de09f0045a7f82d4d8f5f7e00e6069c2cf25103caed6bc659e21beb5df4e2f35654f15584f

Download Submit
C:\Windows\System\IKClWHS.exe

Filesize
3.3MB

MD5
b14e7a38125335b8caf7a60e564a0354

SHA1
0795d51c902325805d927bb33bdb19808ee032f1

SHA256
c2946c0040e083590696b75e5f709f3345898077d2c9ca62b5534e3fc3520ef6

SHA512
c1e8601d10850ae881d9f004e595149794c777baae033a4f706b04236ca049c604e0ef0220425e0d92ed29daac4bc6e1fd5781534f5d4e7d60b51f9187640dcf

Download Submit
C:\Windows\System\OiuYrck.exe

Filesize
3.3MB

MD5
5f8acfa96223114147fe793752b552bf

SHA1
738e34b4e5bf5751fcb93c780793b606507c6c65

SHA256
616250456a2b92cea7ec327bbf65e12a5cad153710fef41c15b3583bdee1167a

SHA512
6d7360ab10e49d016f2e006a7ff2e85971f1eb9a6ecb38713eea7be5eb98c1f77bd17f457172f8e08023bac0a59a0bd58bd297cf98e3d18c1242ad9bb6c04f95

Download Submit
C:\Windows\System\PPgJeDN.exe

Filesize
3.3MB

MD5
b10950f25a97d0989b08736462a5a56b

SHA1
86ad1056b4736b922ecc1863b47524e407e72817

SHA256
3aa175ef31fba717f1833fdac53cc8afa4a49c1a35fc2c552e26393912d17560

SHA512
c31bbbe18ebb460ebcd26ac8939ddfb71ed7574b9a7d7509bf0b818a6c352463b569c93621eae11c6186188a025a598e9f152603cc43e9a91e3ffdfbca826e11

Download Submit
C:\Windows\System\PmpYBFW.exe

Filesize
3.3MB

MD5
9194e7b53dfe46da60fbdb56103c00f0

SHA1
a05b35e33bc642528b8bfed0be40083a680545c5

SHA256
77c50de7187fa1797359d46d19bf7ce8b8d821ca52a58ea391c43c17bfb9a11c

SHA512
6452a33ee19b668415800fd2b7f72df3d16fe009496ad5fa40b0a9c3f45b8116b10a76147081bdec0852c15101c616b76586d0caced20b84a9b662edfd754e39

Download Submit
C:\Windows\System\XxDfSSq.exe

Filesize
3.3MB

MD5
7d01e8ae51998969cde1e926d952f013

SHA1
b7c6b1a880e5f4129333e9f4196aecbc17d9ec72

SHA256
c2ee1c70fd3375aefe9fd9f622450c6e60695969244fb6ad8dec7d398a71dc33

SHA512
fb431b918510e6d0f74745bdd2d0298079f3a555d0eaf5043ae96ba2294d69ef8bc6654027988644b29af6810f21167e348aa492803c20e5ad4eda4d88dbb475

Download Submit
C:\Windows\System\bGMSKzL.exe

Filesize
3.3MB

MD5
2986d1b286e5dc67aac260021aa96b37

SHA1
ed95099d52faf2f2425a7476d427bc4a45a72735

SHA256
837eb840f438f20c63cc5bc61405ad820976e39e2662993d23705bb55b52feeb

SHA512
be6c6abf7cc3013f5b29a509166451e673b0d45e4c92a6f97c9c36df4a85612fcb639633a0e54ba4c96f7adc8f18933d4bce276d5d2dfec22794a5ca59e7b29e

Download Submit
C:\Windows\System\bLNzeIA.exe

Filesize
3.3MB

MD5
9b1937c641f0e790c34473cfe4a85dec

SHA1
6f054d0de25d73a12213c7c973227885ddda84c6

SHA256
d5baaec937576fcd3e96597ba72272d959566c291a455d2f92f4e44e6d792f50

SHA512
59dafacb4f5543191df6318f7def9d0593cc577b7623691729c52379e9bc86d425ae8906994bc4a2a5dbbdb1a2b6b058fdb080996fbecf9f150f938feea2520a

Download Submit
C:\Windows\System\bbDOdPF.exe

Filesize
3.3MB

MD5
4f1f6481ce123f146c8beac37ebcd8d7

SHA1
3ad11096f0ba779f6d0c4ce58168ade8501a51b5

SHA256
31159cbc9764e321a3bbc468f47bee56ebfc70bcca11e741ed73bb367975d674

SHA512
0addf5324565e64fe6ef8650cd25647591833f08eb86d1f2460f6bcd7767b1ff256eb8f05b060c8b5ccb8218a81b878e0c606125337ba70d2c11716d0867baea

Download Submit
C:\Windows\System\gbuRowW.exe

Filesize
3.3MB

MD5
65d33b5295f4876eec51f16ef64f9630

SHA1
c4bada380af4783928345bd4b1ce74948afe893f

SHA256
7bdbf4db5250da64fff2b768677c7587bf56d0cbd7cb426b1751aad0c41b618d

SHA512
c3f4db6e7f23a906cc935d28a7949a6d027c6037b0aab8613881700ed28d1c242d4e4c16d739e1c2c0c7d12dea50d895ff91e21acc183a8dbd953c1f51f0d0cb

Download Submit
C:\Windows\System\iemyJAL.exe

Filesize
3.3MB

MD5
f89ece25db46a67b736e2cb9c5c208c5

SHA1
582e4ce5bbf11cfd2748ef4270e544425edf1b1b

SHA256
fd92f15db4c03c20609dcb10b89353d0781af2ac5294848dbf8e7f1bdb465ffe

SHA512
710224ee36db11a8fd3db9b8b20fc930b120002574fc8c027f8151865fb18d692e10566b468438ad1c33497cfbe0abd9651fd753c8fbc0449e888b044d025c4c

Download Submit
C:\Windows\System\imbeZiL.exe

Filesize
3.3MB

MD5
26e454f9d68c252f8335ef880c44e328

SHA1
548effdead90c8dd5b56ef87dd73f6a2024bfa3d

SHA256
43d060edb306d3471f161e807ec9a5011cac5202018202635e6b03ca6f2f178b

SHA512
7d8e5d3b564fd4ca41b39608cc4b5d46f6189d2fcd4198e3ae5a61fc66e9d76d26c614ef783f9a3a2197ab7a87a5bc1a742fa9de02adf101ceec0878b2f1e3af

Download Submit
C:\Windows\System\inOBYVL.exe

Filesize
3.3MB

MD5
1b941b2afd9b444b33a2fe7d5952ee32

SHA1
661b77a28d12fb6f7610299b0ba633eaa6792564

SHA256
2b6c9f92c2b4f0d86f25fefa0db00af75db9777abf3cef1a80ef04750a5a365a

SHA512
04dff9480d6ea559999eab6adff6277fd1395dad6103151ede27d14d090bf7ba2976f6d767e86fdef50890f665f31333abe79c2339fde42a4df6221eb800918b

Download Submit
C:\Windows\System\ixDFvyj.exe

Filesize
3.3MB

MD5
0149f94e7992d5debee69c56dc38269d

SHA1
3c8a3389500547e4a5add94d4b5494d7c3797a8a

SHA256
0756d469559cd701d6031bce1bac11156ac7bf0391bb16c1c7144a9d6534e5eb

SHA512
06cd8bb0d559b978ac554d2f9779d9c7af458d807ad58e29c1fe386c6f3d982fd5bb36b525f9b05b7c9a128d883fb7e5dd49f539c85df4f559f32e2f6112c381

Download Submit
C:\Windows\System\jlqfOzG.exe

Filesize
3.3MB

MD5
fe0c81c6597e8c5edd12854339275205

SHA1
043b841bfa3c5d100bb6670df3535efd0eb5a2ae

SHA256
03c6ba6a2cacb37cd98d6794055671ed4ac26812d0eb46f3e866267e7d2c3ee9

SHA512
1cd8d1d33cc4691a96b75158a844847619b3055e2f68d8584eca85aa7a2646edd3532cc78d0585e720d275c3709e2b51d129116c11bc922eabda75c5d4c6c628

Download Submit
C:\Windows\System\kDbSHsl.exe

Filesize
3.3MB

MD5
f91df3564cc97f398b7a3348cf7d184a

SHA1
d8d1d533f99cc290fd0e3d5d8ab6c4a270750d37

SHA256
77bf48dd27cec10c55a5ce377db4f2dfb53da5c9e76f102ae161d3f17cf33618

SHA512
75aec955188ddaaba1298d0b0fe397dbe2eae9acf5b6de3ed352b599b0a35dabde2690575a0eb20ecb50d20f6207a4b83d05ab331bba41871b43629090f0b2f7

Download Submit
C:\Windows\System\lTIYgoB.exe

Filesize
3.3MB

MD5
d50df6538bff187ed56bddcb93b33d24

SHA1
b353b156f068fe418d12df90362450caaf3b4ad1

SHA256
fde9aa249f612aec98324b09a308097941dd96bac0e3989416d9008110419b44

SHA512
d2b61cd6f9e54a43cb84be0e017a04c93b49875abcffd36533d4a94798aa658b013d1244e9f3773696de3af5be733a9ab5deadb4e4e87f21157dc99f5c0f6149

Download Submit
C:\Windows\System\mATPSbY.exe

Filesize
3.3MB

MD5
f91aa5531bcb794acb31e3d7609596bd

SHA1
c20ce42fd357e5a9e057ce65fb6178ec315c0629

SHA256
0d44633f2da69fe20b4ebb9d35a3d6903c4540d1a61782fc96daa92f14f0315a

SHA512
b66b364a934ca6a02d1fe3cccdea23c8051b24352bce9ddd5ce31018db873fcff2c60fa5ff7eecb04827bdfc1eabd86c1350b43a7f4e6724a483728218ed8fd7

Download Submit
C:\Windows\System\ovXDCwy.exe

Filesize
3.3MB

MD5
de657b0d46816953e9d88ff6505736ab

SHA1
f10919d78129cef6278bf0f674ab7dbdc05466ec

SHA256
88ce12a44d8be99b5b235eab177ae7e1a019749962b25909de9f8b72ed8dc48a

SHA512
cdaa035dacd3bb00c046a5e20a9951569876c27290c585bd29b10521c8a51fb5c745e5b9d5d621cbc9c75d99fcecb203426a74d53a58e93b33853616688a19a6

Download Submit
C:\Windows\System\qXUMLnx.exe

Filesize
3.3MB

MD5
a6882368a31e592dfc14bc1c6c468ba7

SHA1
e916c8c12945abe60bc71ba684f2e7451db8df01

SHA256
15dc0e0aa5af379a3406d146b8c80a0a524bf527a69d52775b6d3ebe1957d01c

SHA512
ecf408974cfd2fe6c1a82fbc86c74aa3ccaf661b165ec0f75c5fa9dab189f7493437c23a0ea25cc208291c53945ea6dd22823b4efc14b85836fb4916832c4ca5

Download Submit
C:\Windows\System\ssucgkW.exe

Filesize
3.3MB

MD5
72b17e8329e4f8c38d6f90007108d173

SHA1
602726d5edf5847fb161f2c891a5d4ba9c66f3ce

SHA256
b34f873d7b03c594f8afefaef003fe24c9e8650cb6c3a3b8081fee79274f5c9d

SHA512
189a448b910ddbc1ad7d0d016a609f105af37a8b3ce39655e8e6b2832849bfe95e8cb13dc6c60a16faae9b7c6a87ba4df5008e7d14234e7b469324d63a07ae88

Download Submit
C:\Windows\System\uMgoduh.exe

Filesize
3.3MB

MD5
3501102f59c157b509c95e70ea6abed6

SHA1
2d98e2d920256bcd869382ace47b8c4f1664ff4b

SHA256
37d9b2bf5503d3edd8ba354413d96b69796f0068d288e8e881229c908b843734

SHA512
70033763e734d0033cc6b6b308e213fad18be94262ce24ac390ec0cf3c8f49681a8d2ab9cc9eef08632c293fe3983cad89f0f7bf61cf3b5bbd1b815803012700

Download Submit
C:\Windows\System\vnpJjGz.exe

Filesize
3.3MB

MD5
dbc052e4970a555d6797935a6c99a0e9

SHA1
d05a0dd713dd6c6414084235d51c5918e73f57e3

SHA256
a110b7cc5b72c250c918ec66186ce8d2b9dd953d314680e597448d8fb7ba8330

SHA512
8553f687986a10bbd724265a942ef997d9773c3f0dacea0f28625d5d87a3c7545ce15aa1989364b79b1ed3adce869727dc2fabb443f0d6adadffe1968341986e

Download Submit
C:\Windows\System\wwWznUk.exe

Filesize
3.3MB

MD5
2c99208e97f38785b2e6c8de6ff71a80

SHA1
3f40eb5ed90a0909131d42dcf55b4c73938fdc3d

SHA256
b7fb462d7a29be8772c3fd7c567ce6ea038122b33fd26d6c22bb1d3c95575808

SHA512
c898387f3f667e244dc3dfe3007e5ac3b98d64a1406f18f1342b0183a71caa1dff36317d84f83e38244f531eb1c1c5141ab70c46af13d38607f02dc68cec256d

Download Submit
C:\Windows\System\xpZNGAq.exe

Filesize
3.3MB

MD5
216981254b793b518973f263390348ca

SHA1
900b7a6bb93b0d596c7f61cd0bc88ca9af1b1b68

SHA256
e2e829af19c274f6c48aff37580c4817e4d32f09bdbc3963d7c114682ab54c43

SHA512
d722cefaece371fe486271bc375a6614e8abe41a2adf4c5d156d7131b284c6269d245cdd1ca2ff74c3fda02967660bbcdea30dd3b452d416679585eca98a34c0

Download Submit
C:\Windows\System\yOQSLpE.exe

Filesize
3.3MB

MD5
2e7a4568e1e58bbbfd89deeef73100b4

SHA1
b76272935cc14ca2c569d50892f07d0d1148222d

SHA256
fc1c1f0fcdf2a8b08d0faecc417ca330f14e51eadc890825b50ddf2a92e2d3e2

SHA512
1476b5ff72a235798ce0ac6f8aaa07de65bc12b368b45d0974b5c07f8d1efde5e7bcf703bc1f38abc7b9c38df5d3c2b0e042c75488d081969257f1ef0d97cce4

Download Submit
C:\Windows\System\yUFXvda.exe

Filesize
3.3MB

MD5
0213a78de71ce218e500253232b2a780

SHA1
945ed60c4ae3f6fbb1efc0241160411f484c253d

SHA256
64f907b08998d2e73c2c77193de4d46f63886f41e4d4ddf7a9a3a9b38a5fd1bb

SHA512
3f3cbc51eb6f43facf87a27daca523a520a40263800990778a7c76d0e57d4d044e0ed61feeb146043abd634dc8a248358dd09b3618be0bcab4286040d7f6355e

Download Submit
C:\Windows\System\yofgDIo.exe

Filesize
3.3MB

MD5
15e138999923804be2272be50255b5b7

SHA1
c45a70a8335a699a74ba1291659c03d2c6e9ee0c

SHA256
3057d30b76463b02cf2f1f03744d59b9a33198654a17732d82ad1ae3c92d7535

SHA512
359227bc92df2462c21e23503a351b67036285ebf2f8dcfb5e682853bfff8475b3111129a515a9fdaf3878e594db481df14eb6c3f2ce4990d6fda304202e455e

Download Submit
C:\Windows\System\zacZrFn.exe

Filesize
3.3MB

MD5
c2b909fca585a1b5e182c6d44b9f5be2

SHA1
8b166989c2fb2297b13f011c6755a4b5a3efdbba

SHA256
2ea38df9c81fb749548e3b8f66a8269127754b7efdc4be4e82e772cec6693f1c

SHA512
4a81e210bf217b83d8642ecbcc12a9170731ab19e37ffdbf1be55165a5f67155b2f38f1fe346a51ac38c06a7e0402ce79996971e7d9bfe826f755eccb48ee362

Download Submit
memory/324-708-0x00007FF7DAF10000-0x00007FF7DB306000-memory.dmp

Filesize
4.0MB

Download
memory/324-64-0x00007FF7DAF10000-0x00007FF7DB306000-memory.dmp

Filesize
4.0MB

Download
memory/680-66-0x00007FF6EBF50000-0x00007FF6EC346000-memory.dmp

Filesize
4.0MB

Download
memory/680-763-0x00007FF6EBF50000-0x00007FF6EC346000-memory.dmp

Filesize
4.0MB

Download
memory/784-0-0x00007FF64FA10000-0x00007FF64FE06000-memory.dmp

Filesize
4.0MB

Download
memory/784-606-0x00007FF64FA10000-0x00007FF64FE06000-memory.dmp

Filesize
4.0MB

Download
memory/784-1-0x0000017D29A00000-0x0000017D29A10000-memory.dmp

Filesize
64KB

Download
memory/1056-751-0x00007FF652420000-0x00007FF652816000-memory.dmp

Filesize
4.0MB

Download
memory/1056-65-0x00007FF652420000-0x00007FF652816000-memory.dmp

Filesize
4.0MB

Download
memory/1388-1041-0x00007FF689460000-0x00007FF689856000-memory.dmp

Filesize
4.0MB

Download
memory/1388-104-0x00007FF689460000-0x00007FF689856000-memory.dmp

Filesize
4.0MB

Download
memory/1472-620-0x00007FF64E580000-0x00007FF64E976000-memory.dmp

Filesize
4.0MB

Download
memory/1472-60-0x00007FF64E580000-0x00007FF64E976000-memory.dmp

Filesize
4.0MB

Download
memory/1596-223-0x00007FF6849B0000-0x00007FF684DA6000-memory.dmp

Filesize
4.0MB

Download
memory/1596-1145-0x00007FF6849B0000-0x00007FF684DA6000-memory.dmp

Filesize
4.0MB

Download
memory/1836-964-0x00007FF676270000-0x00007FF676666000-memory.dmp

Filesize
4.0MB

Download
memory/1836-101-0x00007FF676270000-0x00007FF676666000-memory.dmp

Filesize
4.0MB

Download
memory/2180-943-0x00007FF756B60000-0x00007FF756F56000-memory.dmp

Filesize
4.0MB

Download
memory/2180-98-0x00007FF756B60000-0x00007FF756F56000-memory.dmp

Filesize
4.0MB

Download
memory/2228-61-0x00007FF64F7C0000-0x00007FF64FBB6000-memory.dmp

Filesize
4.0MB

Download
memory/2228-621-0x00007FF64F7C0000-0x00007FF64FBB6000-memory.dmp

Filesize
4.0MB

Download
memory/2644-1208-0x00007FF6DC520000-0x00007FF6DC916000-memory.dmp

Filesize
4.0MB

Download
memory/2644-241-0x00007FF6DC520000-0x00007FF6DC916000-memory.dmp

Filesize
4.0MB

Download
memory/2820-688-0x00007FF76D260000-0x00007FF76D656000-memory.dmp

Filesize
4.0MB

Download
memory/2820-63-0x00007FF76D260000-0x00007FF76D656000-memory.dmp

Filesize
4.0MB

Download
memory/3012-666-0x00007FF65AAB0000-0x00007FF65AEA6000-memory.dmp

Filesize
4.0MB

Download
memory/3012-62-0x00007FF65AAB0000-0x00007FF65AEA6000-memory.dmp

Filesize
4.0MB

Download
memory/3096-67-0x00007FF69FFE0000-0x00007FF6A03D6000-memory.dmp

Filesize
4.0MB

Download
memory/3096-765-0x00007FF69FFE0000-0x00007FF6A03D6000-memory.dmp

Filesize
4.0MB

Download
memory/3276-1009-0x00007FF7AF260000-0x00007FF7AF656000-memory.dmp

Filesize
4.0MB

Download
memory/3276-103-0x00007FF7AF260000-0x00007FF7AF656000-memory.dmp

Filesize
4.0MB

Download
memory/3376-227-0x00007FF605C40000-0x00007FF606036000-memory.dmp

Filesize
4.0MB

Download
memory/3376-1205-0x00007FF605C40000-0x00007FF606036000-memory.dmp

Filesize
4.0MB

Download
memory/3524-233-0x00007FF75ED00000-0x00007FF75F0F6000-memory.dmp

Filesize
4.0MB

Download
memory/3524-1206-0x00007FF75ED00000-0x00007FF75F0F6000-memory.dmp

Filesize
4.0MB

Download
memory/3568-1196-0x00007FF6DB6C0000-0x00007FF6DBAB6000-memory.dmp

Filesize
4.0MB

Download
memory/3568-224-0x00007FF6DB6C0000-0x00007FF6DBAB6000-memory.dmp

Filesize
4.0MB

Download
memory/3644-102-0x00007FF6CB3C0000-0x00007FF6CB7B6000-memory.dmp

Filesize
4.0MB

Download
memory/3644-988-0x00007FF6CB3C0000-0x00007FF6CB7B6000-memory.dmp

Filesize
4.0MB

Download
memory/3688-220-0x00007FF6D2020000-0x00007FF6D2416000-memory.dmp

Filesize
4.0MB

Download
memory/3688-1129-0x00007FF6D2020000-0x00007FF6D2416000-memory.dmp

Filesize
4.0MB

Download
memory/3804-70-0x00007FF6A73F0000-0x00007FF6A77E6000-memory.dmp

Filesize
4.0MB

Download
memory/3804-877-0x00007FF6A73F0000-0x00007FF6A77E6000-memory.dmp

Filesize
4.0MB

Download
memory/3888-957-0x00007FF6F7A20000-0x00007FF6F7E16000-memory.dmp

Filesize
4.0MB

Download
memory/3888-105-0x00007FF6F7A20000-0x00007FF6F7E16000-memory.dmp

Filesize
4.0MB

Download
memory/4580-198-0x0000021C72C30000-0x0000021C742A7000-memory.dmp

Filesize
22.5MB

Download
memory/4580-736-0x00007FFEAC100000-0x00007FFEACBC1000-memory.dmp

Filesize
10.8MB

Download
memory/4580-1210-0x00007FFEAC100000-0x00007FFEACBC1000-memory.dmp

Filesize
10.8MB

Download
memory/4580-727-0x00007FFEAC103000-0x00007FFEAC105000-memory.dmp

Filesize
8KB

Download
memory/4580-59-0x00007FFEAC100000-0x00007FFEACBC1000-memory.dmp

Filesize
10.8MB

Download
memory/4580-1099-0x00007FFEAC100000-0x00007FFEACBC1000-memory.dmp

Filesize
10.8MB

Download
memory/4580-72-0x00007FFEAC100000-0x00007FFEACBC1000-memory.dmp

Filesize
10.8MB

Download
memory/4580-186-0x0000021C72480000-0x0000021C72C26000-memory.dmp

Filesize
7.6MB

Download
memory/4580-13-0x0000021C588D0000-0x0000021C588F2000-memory.dmp

Filesize
136KB

Download
memory/4580-3-0x00007FFEAC103000-0x00007FFEAC105000-memory.dmp

Filesize
8KB

Download
memory/4756-1141-0x00007FF7E7DF0000-0x00007FF7E81E6000-memory.dmp

Filesize
4.0MB

Download
memory/4756-222-0x00007FF7E7DF0000-0x00007FF7E81E6000-memory.dmp

Filesize
4.0MB

Download
memory/4800-243-0x00007FF6C5630000-0x00007FF6C5A26000-memory.dmp

Filesize
4.0MB

Download
memory/4800-1209-0x00007FF6C5630000-0x00007FF6C5A26000-memory.dmp

Filesize
4.0MB

Download
memory/4944-240-0x00007FF7E7AA0000-0x00007FF7E7E96000-memory.dmp

Filesize
4.0MB

Download
memory/4944-1207-0x00007FF7E7AA0000-0x00007FF7E7E96000-memory.dmp

Filesize
4.0MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request