xmrig | bb36ae47c3affa9c354e29d0caf95d04602ce6554f76a37ef049e6b09784f55b

Analysis

max time kernel
151s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
27/05/2024, 17:34 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
Size

2.6MB
MD5

04485595732a1c9af08b695417b8fa50
SHA1

9f081b49ebafa00e00c1cb9151f5e1f9ee7602a3
SHA256

bb36ae47c3affa9c354e29d0caf95d04602ce6554f76a37ef049e6b09784f55b
SHA512

a413adfd9b0ee061f4d3e2837e980b2eaa9d15d9eecabc7fb914ba195218c6aa0e8939c8259c15bc57ba6b8903a3d5f9b714ad5d4cf631d85e007d38b323803e
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IlnASEx/R2X:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RF

Score

10^/10

xmrig execution miner upx

Malware Config

Signatures

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

XMRig Miner payload 64 IoCs

miner

resource	yara_rule
behavioral2/memory/3588-0-0x00007FF7068D0000-0x00007FF706CC6000-memory.dmp	xmrig
behavioral2/files/0x000900000002324b-6.dat	xmrig
behavioral2/memory/4512-9-0x00007FF772430000-0x00007FF772826000-memory.dmp	xmrig
behavioral2/files/0x0008000000023251-20.dat	xmrig
behavioral2/files/0x0007000000023254-21.dat	xmrig
behavioral2/files/0x000800000002324f-32.dat	xmrig
behavioral2/memory/2600-36-0x00007FF7C47A0000-0x00007FF7C4B96000-memory.dmp	xmrig
behavioral2/files/0x0008000000023252-40.dat	xmrig
behavioral2/files/0x0008000000023253-45.dat	xmrig
behavioral2/files/0x0007000000023255-50.dat	xmrig
behavioral2/files/0x0007000000023256-55.dat	xmrig
behavioral2/files/0x0007000000023257-60.dat	xmrig
behavioral2/files/0x0007000000023258-65.dat	xmrig
behavioral2/files/0x000700000002325a-75.dat	xmrig
behavioral2/files/0x000700000002325b-80.dat	xmrig
behavioral2/files/0x000700000002325d-89.dat	xmrig
behavioral2/files/0x000700000002325e-94.dat	xmrig
behavioral2/files/0x0007000000023260-108.dat	xmrig
behavioral2/files/0x0007000000023262-115.dat	xmrig
behavioral2/files/0x0007000000023263-120.dat	xmrig
behavioral2/files/0x0007000000023264-128.dat	xmrig
behavioral2/files/0x000700000002326a-155.dat	xmrig
behavioral2/files/0x000700000002326c-164.dat	xmrig
behavioral2/files/0x000700000002326d-170.dat	xmrig
behavioral2/files/0x000700000002326e-175.dat	xmrig
behavioral2/files/0x000700000002326b-160.dat	xmrig
behavioral2/files/0x0007000000023269-150.dat	xmrig
behavioral2/files/0x0007000000023268-147.dat	xmrig
behavioral2/files/0x0007000000023267-140.dat	xmrig
behavioral2/files/0x0007000000023266-135.dat	xmrig
behavioral2/files/0x0007000000023265-133.dat	xmrig
behavioral2/files/0x0007000000023261-110.dat	xmrig
behavioral2/files/0x000700000002325f-100.dat	xmrig
behavioral2/files/0x000700000002325c-85.dat	xmrig
behavioral2/files/0x0007000000023259-70.dat	xmrig
behavioral2/memory/4060-363-0x00007FF63E5E0000-0x00007FF63E9D6000-memory.dmp	xmrig
behavioral2/memory/2940-367-0x00007FF6D6B80000-0x00007FF6D6F76000-memory.dmp	xmrig
behavioral2/memory/2720-388-0x00007FF790FE0000-0x00007FF7913D6000-memory.dmp	xmrig
behavioral2/memory/3384-395-0x00007FF60F250000-0x00007FF60F646000-memory.dmp	xmrig
behavioral2/memory/4916-382-0x00007FF674610000-0x00007FF674A06000-memory.dmp	xmrig
behavioral2/memory/2108-399-0x00007FF6A8EF0000-0x00007FF6A92E6000-memory.dmp	xmrig
behavioral2/memory/4048-405-0x00007FF722C30000-0x00007FF723026000-memory.dmp	xmrig
behavioral2/memory/1844-428-0x00007FF7FEF80000-0x00007FF7FF376000-memory.dmp	xmrig
behavioral2/memory/2716-437-0x00007FF78C2D0000-0x00007FF78C6C6000-memory.dmp	xmrig
behavioral2/memory/4836-446-0x00007FF752210000-0x00007FF752606000-memory.dmp	xmrig
behavioral2/memory/2980-448-0x00007FF673A70000-0x00007FF673E66000-memory.dmp	xmrig
behavioral2/memory/4604-451-0x00007FF7EEA10000-0x00007FF7EEE06000-memory.dmp	xmrig
behavioral2/memory/4776-453-0x00007FF743E60000-0x00007FF744256000-memory.dmp	xmrig
behavioral2/memory/3428-456-0x00007FF732B10000-0x00007FF732F06000-memory.dmp	xmrig
behavioral2/memory/1088-457-0x00007FF7FD6A0000-0x00007FF7FDA96000-memory.dmp	xmrig
behavioral2/memory/2580-459-0x00007FF79B010000-0x00007FF79B406000-memory.dmp	xmrig
behavioral2/memory/3836-458-0x00007FF66A090000-0x00007FF66A486000-memory.dmp	xmrig
behavioral2/memory/5004-461-0x00007FF7061E0000-0x00007FF7065D6000-memory.dmp	xmrig
behavioral2/memory/4404-455-0x00007FF76EEC0000-0x00007FF76F2B6000-memory.dmp	xmrig
behavioral2/memory/3508-449-0x00007FF7C1F60000-0x00007FF7C2356000-memory.dmp	xmrig
behavioral2/memory/4848-422-0x00007FF7B50D0000-0x00007FF7B54C6000-memory.dmp	xmrig
behavioral2/memory/3156-410-0x00007FF6350D0000-0x00007FF6354C6000-memory.dmp	xmrig
behavioral2/memory/4512-1556-0x00007FF772430000-0x00007FF772826000-memory.dmp	xmrig
behavioral2/memory/2600-1580-0x00007FF7C47A0000-0x00007FF7C4B96000-memory.dmp	xmrig
behavioral2/memory/4060-1596-0x00007FF63E5E0000-0x00007FF63E9D6000-memory.dmp	xmrig
behavioral2/memory/4848-1685-0x00007FF7B50D0000-0x00007FF7B54C6000-memory.dmp	xmrig
behavioral2/memory/4776-1727-0x00007FF743E60000-0x00007FF744256000-memory.dmp	xmrig
behavioral2/memory/4404-1742-0x00007FF76EEC0000-0x00007FF76F2B6000-memory.dmp	xmrig
behavioral2/memory/4604-1738-0x00007FF7EEA10000-0x00007FF7EEE06000-memory.dmp	xmrig

Blocklisted process makes network request 5 IoCs

flow	pid	Process
3	4400	powershell.exe
5	4400	powershell.exe
15	4400	powershell.exe
16	4400	powershell.exe
20	4400	powershell.exe

Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

Powershell Invoke Web Request.

execution

PowerShell

T1059.001

pid	Process
4400	powershell.exe

Executes dropped EXE 64 IoCs

pid	Process
4512	mvBpdrW.exe
2600	meyHRGs.exe
4060	vNCJeuw.exe
2940	yBPuSFU.exe
5004	OjbNeut.exe
4916	OmsAnsv.exe
2720	VbUjmsG.exe
3384	QDpEYju.exe
2108	KEmGGrN.exe
4048	TiHgJII.exe
3156	pNcaYkn.exe
4848	YSeQMcn.exe
1844	civbGZC.exe
2716	SxYDGQr.exe
4836	LKTIFsd.exe
2980	yiqzWBW.exe
3508	zsFToXA.exe
4604	CeSNOcq.exe
4776	NqGPQYU.exe
4404	LqdmUMW.exe
3428	rZMahVk.exe
1088	RovbLZt.exe
3836	vShsNWL.exe
2580	GerXeBC.exe
2132	NyjCWoe.exe
2220	NaMNDnC.exe
1480	eCxDDdR.exe
3776	YfbCipW.exe
4320	NDKCPmj.exe
4080	UQASsyv.exe
3564	FnXLtcL.exe
3960	cLtuRvt.exe
2656	bzLaXNJ.exe
772	xnkSonx.exe
4396	EoKWhJf.exe
3572	mkMBUVE.exe
4988	wbRIuAL.exe
4788	aRbhJDV.exe
4032	OSdsieY.exe
1132	JEMMCQx.exe
4552	nIXTdVp.exe
3288	AiJZSRH.exe
3308	EhgsFJn.exe
2928	RPhkdeq.exe
3668	zsIDtGS.exe
3996	xShJMAW.exe
3276	ibEQYfu.exe
4592	SmetfuD.exe
2348	kFrzBYw.exe
1304	gNUsImd.exe
2896	uggcTYa.exe
5148	cyDpHRi.exe
5176	YRyZOxr.exe
5220	hPdmzvs.exe
5244	BnBWsdK.exe
5260	HmvrbjD.exe
5288	UrOIfdR.exe
5316	zxeZdua.exe
5344	TJVFlYt.exe
5372	LtXxUSL.exe
5436	bAHVskF.exe
5452	YHYmerP.exe
5468	sYrKHWp.exe
5484	fqlMZpz.exe

UPX packed file 64 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/3588-0-0x00007FF7068D0000-0x00007FF706CC6000-memory.dmp	upx
behavioral2/files/0x000900000002324b-6.dat	upx
behavioral2/memory/4512-9-0x00007FF772430000-0x00007FF772826000-memory.dmp	upx
behavioral2/files/0x0008000000023251-20.dat	upx
behavioral2/files/0x0007000000023254-21.dat	upx
behavioral2/files/0x000800000002324f-32.dat	upx
behavioral2/memory/2600-36-0x00007FF7C47A0000-0x00007FF7C4B96000-memory.dmp	upx
behavioral2/files/0x0008000000023252-40.dat	upx
behavioral2/files/0x0008000000023253-45.dat	upx
behavioral2/files/0x0007000000023255-50.dat	upx
behavioral2/files/0x0007000000023256-55.dat	upx
behavioral2/files/0x0007000000023257-60.dat	upx
behavioral2/files/0x0007000000023258-65.dat	upx
behavioral2/files/0x000700000002325a-75.dat	upx
behavioral2/files/0x000700000002325b-80.dat	upx
behavioral2/files/0x000700000002325d-89.dat	upx
behavioral2/files/0x000700000002325e-94.dat	upx
behavioral2/files/0x0007000000023260-108.dat	upx
behavioral2/files/0x0007000000023262-115.dat	upx
behavioral2/files/0x0007000000023263-120.dat	upx
behavioral2/files/0x0007000000023264-128.dat	upx
behavioral2/files/0x000700000002326a-155.dat	upx
behavioral2/files/0x000700000002326c-164.dat	upx
behavioral2/files/0x000700000002326d-170.dat	upx
behavioral2/files/0x000700000002326e-175.dat	upx
behavioral2/files/0x000700000002326b-160.dat	upx
behavioral2/files/0x0007000000023269-150.dat	upx
behavioral2/files/0x0007000000023268-147.dat	upx
behavioral2/files/0x0007000000023267-140.dat	upx
behavioral2/files/0x0007000000023266-135.dat	upx
behavioral2/files/0x0007000000023265-133.dat	upx
behavioral2/files/0x0007000000023261-110.dat	upx
behavioral2/files/0x000700000002325f-100.dat	upx
behavioral2/files/0x000700000002325c-85.dat	upx
behavioral2/files/0x0007000000023259-70.dat	upx
behavioral2/memory/4060-363-0x00007FF63E5E0000-0x00007FF63E9D6000-memory.dmp	upx
behavioral2/memory/2940-367-0x00007FF6D6B80000-0x00007FF6D6F76000-memory.dmp	upx
behavioral2/memory/2720-388-0x00007FF790FE0000-0x00007FF7913D6000-memory.dmp	upx
behavioral2/memory/3384-395-0x00007FF60F250000-0x00007FF60F646000-memory.dmp	upx
behavioral2/memory/4916-382-0x00007FF674610000-0x00007FF674A06000-memory.dmp	upx
behavioral2/memory/2108-399-0x00007FF6A8EF0000-0x00007FF6A92E6000-memory.dmp	upx
behavioral2/memory/4048-405-0x00007FF722C30000-0x00007FF723026000-memory.dmp	upx
behavioral2/memory/1844-428-0x00007FF7FEF80000-0x00007FF7FF376000-memory.dmp	upx
behavioral2/memory/2716-437-0x00007FF78C2D0000-0x00007FF78C6C6000-memory.dmp	upx
behavioral2/memory/4836-446-0x00007FF752210000-0x00007FF752606000-memory.dmp	upx
behavioral2/memory/2980-448-0x00007FF673A70000-0x00007FF673E66000-memory.dmp	upx
behavioral2/memory/4604-451-0x00007FF7EEA10000-0x00007FF7EEE06000-memory.dmp	upx
behavioral2/memory/4776-453-0x00007FF743E60000-0x00007FF744256000-memory.dmp	upx
behavioral2/memory/3428-456-0x00007FF732B10000-0x00007FF732F06000-memory.dmp	upx
behavioral2/memory/1088-457-0x00007FF7FD6A0000-0x00007FF7FDA96000-memory.dmp	upx
behavioral2/memory/2580-459-0x00007FF79B010000-0x00007FF79B406000-memory.dmp	upx
behavioral2/memory/3836-458-0x00007FF66A090000-0x00007FF66A486000-memory.dmp	upx
behavioral2/memory/5004-461-0x00007FF7061E0000-0x00007FF7065D6000-memory.dmp	upx
behavioral2/memory/4404-455-0x00007FF76EEC0000-0x00007FF76F2B6000-memory.dmp	upx
behavioral2/memory/3508-449-0x00007FF7C1F60000-0x00007FF7C2356000-memory.dmp	upx
behavioral2/memory/4848-422-0x00007FF7B50D0000-0x00007FF7B54C6000-memory.dmp	upx
behavioral2/memory/3156-410-0x00007FF6350D0000-0x00007FF6354C6000-memory.dmp	upx
behavioral2/memory/4512-1556-0x00007FF772430000-0x00007FF772826000-memory.dmp	upx
behavioral2/memory/2600-1580-0x00007FF7C47A0000-0x00007FF7C4B96000-memory.dmp	upx
behavioral2/memory/4060-1596-0x00007FF63E5E0000-0x00007FF63E9D6000-memory.dmp	upx
behavioral2/memory/4848-1685-0x00007FF7B50D0000-0x00007FF7B54C6000-memory.dmp	upx
behavioral2/memory/4776-1727-0x00007FF743E60000-0x00007FF744256000-memory.dmp	upx
behavioral2/memory/4404-1742-0x00007FF76EEC0000-0x00007FF76F2B6000-memory.dmp	upx
behavioral2/memory/4604-1738-0x00007FF7EEA10000-0x00007FF7EEE06000-memory.dmp	upx

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
2	raw.githubusercontent.com
3	raw.githubusercontent.com

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\System\kUkaaDn.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\mtjhoHq.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\gCReFmb.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\EoKWhJf.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\HGBYsNi.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\rVgPkGS.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\urtqQJl.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\aRvgAWc.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\hZjDIPl.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\UTGEXQv.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\gBvPHQE.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\bXAaeun.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\PFoenNz.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\qArmKiY.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\acCUFzD.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\HmvrbjD.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\ocLcxqi.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\ttoIjrV.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\QPTpVhn.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\krtbBjj.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\gNFbWqH.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\myhlTzh.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\UDPQbhX.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\rrxrglR.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\EgPnZwy.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\NpoJFJF.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\XYqttrB.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\BtQCKJt.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\sVgmrgE.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\hJYsCXy.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\yPhkovx.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\YLZrWRm.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\AuVqxfj.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\rGUSqUs.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\ePwdxJo.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\CIBISQy.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\lbRaSaY.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\jbBLELn.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\xieRcIe.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\LksHOcs.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\WTXBYtZ.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\ccjOSbU.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\BIwilrv.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\ZGtmauD.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\reNLquP.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\aLCslSN.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\MnrQqFk.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\IDcIskc.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\VeuHOJr.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\QSqEYEF.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\REUxYTz.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\IPNsIig.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\ZbOCppu.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\kKzwpuz.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\dNVTKnh.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\lVCmLQz.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\jKhMOEJ.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\uGOzHHZ.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\wjYLLMr.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\OsyKqxK.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\DnfMdTw.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\JWBfeJK.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\WCEIQhg.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
File created	C:\Windows\System\wLNUuYj.exe	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4400	powershell.exe
4400	powershell.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
Token: SeDebugPrivilege	4400	powershell.exe
Token: SeLockMemoryPrivilege	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3588 wrote to memory of 4400	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	93
PID 3588 wrote to memory of 4400	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	93
PID 3588 wrote to memory of 4512	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	94
PID 3588 wrote to memory of 4512	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	94
PID 3588 wrote to memory of 2600	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	95
PID 3588 wrote to memory of 2600	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	95
PID 3588 wrote to memory of 4060	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	96
PID 3588 wrote to memory of 4060	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	96
PID 3588 wrote to memory of 2940	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	97
PID 3588 wrote to memory of 2940	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	97
PID 3588 wrote to memory of 5004	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	98
PID 3588 wrote to memory of 5004	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	98
PID 3588 wrote to memory of 4916	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	99
PID 3588 wrote to memory of 4916	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	99
PID 3588 wrote to memory of 2720	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	100
PID 3588 wrote to memory of 2720	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	100
PID 3588 wrote to memory of 3384	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	101
PID 3588 wrote to memory of 3384	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	101
PID 3588 wrote to memory of 2108	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	102
PID 3588 wrote to memory of 2108	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	102
PID 3588 wrote to memory of 4048	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	103
PID 3588 wrote to memory of 4048	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	103
PID 3588 wrote to memory of 3156	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	104
PID 3588 wrote to memory of 3156	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	104
PID 3588 wrote to memory of 4848	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	105
PID 3588 wrote to memory of 4848	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	105
PID 3588 wrote to memory of 1844	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	106
PID 3588 wrote to memory of 1844	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	106
PID 3588 wrote to memory of 2716	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	107
PID 3588 wrote to memory of 2716	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	107
PID 3588 wrote to memory of 4836	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	108
PID 3588 wrote to memory of 4836	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	108
PID 3588 wrote to memory of 2980	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	109
PID 3588 wrote to memory of 2980	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	109
PID 3588 wrote to memory of 3508	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	110
PID 3588 wrote to memory of 3508	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	110
PID 3588 wrote to memory of 4604	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	111
PID 3588 wrote to memory of 4604	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	111
PID 3588 wrote to memory of 4776	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	112
PID 3588 wrote to memory of 4776	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	112
PID 3588 wrote to memory of 4404	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	113
PID 3588 wrote to memory of 4404	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	113
PID 3588 wrote to memory of 3428	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	114
PID 3588 wrote to memory of 3428	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	114
PID 3588 wrote to memory of 1088	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	115
PID 3588 wrote to memory of 1088	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	115
PID 3588 wrote to memory of 3836	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	116
PID 3588 wrote to memory of 3836	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	116
PID 3588 wrote to memory of 2580	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	117
PID 3588 wrote to memory of 2580	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	117
PID 3588 wrote to memory of 2132	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	118
PID 3588 wrote to memory of 2132	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	118
PID 3588 wrote to memory of 2220	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	119
PID 3588 wrote to memory of 2220	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	119
PID 3588 wrote to memory of 1480	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	120
PID 3588 wrote to memory of 1480	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	120
PID 3588 wrote to memory of 3776	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	121
PID 3588 wrote to memory of 3776	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	121
PID 3588 wrote to memory of 4320	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	122
PID 3588 wrote to memory of 4320	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	122
PID 3588 wrote to memory of 4080	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	123
PID 3588 wrote to memory of 4080	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	123
PID 3588 wrote to memory of 3564	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	124
PID 3588 wrote to memory of 3564	3588	04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe	124

C:\Users\Admin\AppData\Local\Temp\04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe"
1⤵
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3588
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -command "Invoke-WebRequest "https://raw.githubusercontent.com/" "
  2⤵
  - Blocklisted process makes network request
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:4400
- C:\Windows\System\mvBpdrW.exe
  C:\Windows\System\mvBpdrW.exe
  2⤵
  - Executes dropped EXE
  PID:4512
- C:\Windows\System\meyHRGs.exe
  C:\Windows\System\meyHRGs.exe
  2⤵
  - Executes dropped EXE
  PID:2600
- C:\Windows\System\vNCJeuw.exe
  C:\Windows\System\vNCJeuw.exe
  2⤵
  - Executes dropped EXE
  PID:4060
- C:\Windows\System\yBPuSFU.exe
  C:\Windows\System\yBPuSFU.exe
  2⤵
  - Executes dropped EXE
  PID:2940
- C:\Windows\System\OjbNeut.exe
  C:\Windows\System\OjbNeut.exe
  2⤵
  - Executes dropped EXE
  PID:5004
- C:\Windows\System\OmsAnsv.exe
  C:\Windows\System\OmsAnsv.exe
  2⤵
  - Executes dropped EXE
  PID:4916
- C:\Windows\System\VbUjmsG.exe
  C:\Windows\System\VbUjmsG.exe
  2⤵
  - Executes dropped EXE
  PID:2720
- C:\Windows\System\QDpEYju.exe
  C:\Windows\System\QDpEYju.exe
  2⤵
  - Executes dropped EXE
  PID:3384
- C:\Windows\System\KEmGGrN.exe
  C:\Windows\System\KEmGGrN.exe
  2⤵
  - Executes dropped EXE
  PID:2108
- C:\Windows\System\TiHgJII.exe
  C:\Windows\System\TiHgJII.exe
  2⤵
  - Executes dropped EXE
  PID:4048
- C:\Windows\System\pNcaYkn.exe
  C:\Windows\System\pNcaYkn.exe
  2⤵
  - Executes dropped EXE
  PID:3156
- C:\Windows\System\YSeQMcn.exe
  C:\Windows\System\YSeQMcn.exe
  2⤵
  - Executes dropped EXE
  PID:4848
- C:\Windows\System\civbGZC.exe
  C:\Windows\System\civbGZC.exe
  2⤵
  - Executes dropped EXE
  PID:1844
- C:\Windows\System\SxYDGQr.exe
  C:\Windows\System\SxYDGQr.exe
  2⤵
  - Executes dropped EXE
  PID:2716
- C:\Windows\System\LKTIFsd.exe
  C:\Windows\System\LKTIFsd.exe
  2⤵
  - Executes dropped EXE
  PID:4836
- C:\Windows\System\yiqzWBW.exe
  C:\Windows\System\yiqzWBW.exe
  2⤵
  - Executes dropped EXE
  PID:2980
- C:\Windows\System\zsFToXA.exe
  C:\Windows\System\zsFToXA.exe
  2⤵
  - Executes dropped EXE
  PID:3508
- C:\Windows\System\CeSNOcq.exe
  C:\Windows\System\CeSNOcq.exe
  2⤵
  - Executes dropped EXE
  PID:4604
- C:\Windows\System\NqGPQYU.exe
  C:\Windows\System\NqGPQYU.exe
  2⤵
  - Executes dropped EXE
  PID:4776
- C:\Windows\System\LqdmUMW.exe
  C:\Windows\System\LqdmUMW.exe
  2⤵
  - Executes dropped EXE
  PID:4404
- C:\Windows\System\rZMahVk.exe
  C:\Windows\System\rZMahVk.exe
  2⤵
  - Executes dropped EXE
  PID:3428
- C:\Windows\System\RovbLZt.exe
  C:\Windows\System\RovbLZt.exe
  2⤵
  - Executes dropped EXE
  PID:1088
- C:\Windows\System\vShsNWL.exe
  C:\Windows\System\vShsNWL.exe
  2⤵
  - Executes dropped EXE
  PID:3836
- C:\Windows\System\GerXeBC.exe
  C:\Windows\System\GerXeBC.exe
  2⤵
  - Executes dropped EXE
  PID:2580
- C:\Windows\System\NyjCWoe.exe
  C:\Windows\System\NyjCWoe.exe
  2⤵
  - Executes dropped EXE
  PID:2132
- C:\Windows\System\NaMNDnC.exe
  C:\Windows\System\NaMNDnC.exe
  2⤵
  - Executes dropped EXE
  PID:2220
- C:\Windows\System\eCxDDdR.exe
  C:\Windows\System\eCxDDdR.exe
  2⤵
  - Executes dropped EXE
  PID:1480
- C:\Windows\System\YfbCipW.exe
  C:\Windows\System\YfbCipW.exe
  2⤵
  - Executes dropped EXE
  PID:3776
- C:\Windows\System\NDKCPmj.exe
  C:\Windows\System\NDKCPmj.exe
  2⤵
  - Executes dropped EXE
  PID:4320
- C:\Windows\System\UQASsyv.exe
  C:\Windows\System\UQASsyv.exe
  2⤵
  - Executes dropped EXE
  PID:4080
- C:\Windows\System\FnXLtcL.exe
  C:\Windows\System\FnXLtcL.exe
  2⤵
  - Executes dropped EXE
  PID:3564
- C:\Windows\System\cLtuRvt.exe
  C:\Windows\System\cLtuRvt.exe
  2⤵
  - Executes dropped EXE
  PID:3960
- C:\Windows\System\bzLaXNJ.exe
  C:\Windows\System\bzLaXNJ.exe
  2⤵
  - Executes dropped EXE
  PID:2656
- C:\Windows\System\xnkSonx.exe
  C:\Windows\System\xnkSonx.exe
  2⤵
  - Executes dropped EXE
  PID:772
- C:\Windows\System\EoKWhJf.exe
  C:\Windows\System\EoKWhJf.exe
  2⤵
  - Executes dropped EXE
  PID:4396
- C:\Windows\System\mkMBUVE.exe
  C:\Windows\System\mkMBUVE.exe
  2⤵
  - Executes dropped EXE
  PID:3572
- C:\Windows\System\wbRIuAL.exe
  C:\Windows\System\wbRIuAL.exe
  2⤵
  - Executes dropped EXE
  PID:4988
- C:\Windows\System\aRbhJDV.exe
  C:\Windows\System\aRbhJDV.exe
  2⤵
  - Executes dropped EXE
  PID:4788
- C:\Windows\System\OSdsieY.exe
  C:\Windows\System\OSdsieY.exe
  2⤵
  - Executes dropped EXE
  PID:4032
- C:\Windows\System\JEMMCQx.exe
  C:\Windows\System\JEMMCQx.exe
  2⤵
  - Executes dropped EXE
  PID:1132
- C:\Windows\System\nIXTdVp.exe
  C:\Windows\System\nIXTdVp.exe
  2⤵
  - Executes dropped EXE
  PID:4552
- C:\Windows\System\AiJZSRH.exe
  C:\Windows\System\AiJZSRH.exe
  2⤵
  - Executes dropped EXE
  PID:3288
- C:\Windows\System\EhgsFJn.exe
  C:\Windows\System\EhgsFJn.exe
  2⤵
  - Executes dropped EXE
  PID:3308
- C:\Windows\System\RPhkdeq.exe
  C:\Windows\System\RPhkdeq.exe
  2⤵
  - Executes dropped EXE
  PID:2928
- C:\Windows\System\zsIDtGS.exe
  C:\Windows\System\zsIDtGS.exe
  2⤵
  - Executes dropped EXE
  PID:3668
- C:\Windows\System\xShJMAW.exe
  C:\Windows\System\xShJMAW.exe
  2⤵
  - Executes dropped EXE
  PID:3996
- C:\Windows\System\ibEQYfu.exe
  C:\Windows\System\ibEQYfu.exe
  2⤵
  - Executes dropped EXE
  PID:3276
- C:\Windows\System\SmetfuD.exe
  C:\Windows\System\SmetfuD.exe
  2⤵
  - Executes dropped EXE
  PID:4592
- C:\Windows\System\kFrzBYw.exe
  C:\Windows\System\kFrzBYw.exe
  2⤵
  - Executes dropped EXE
  PID:2348
- C:\Windows\System\gNUsImd.exe
  C:\Windows\System\gNUsImd.exe
  2⤵
  - Executes dropped EXE
  PID:1304
- C:\Windows\System\uggcTYa.exe
  C:\Windows\System\uggcTYa.exe
  2⤵
  - Executes dropped EXE
  PID:2896
- C:\Windows\System\cyDpHRi.exe
  C:\Windows\System\cyDpHRi.exe
  2⤵
  - Executes dropped EXE
  PID:5148
- C:\Windows\System\YRyZOxr.exe
  C:\Windows\System\YRyZOxr.exe
  2⤵
  - Executes dropped EXE
  PID:5176
- C:\Windows\System\hPdmzvs.exe
  C:\Windows\System\hPdmzvs.exe
  2⤵
  - Executes dropped EXE
  PID:5220
- C:\Windows\System\BnBWsdK.exe
  C:\Windows\System\BnBWsdK.exe
  2⤵
  - Executes dropped EXE
  PID:5244
- C:\Windows\System\HmvrbjD.exe
  C:\Windows\System\HmvrbjD.exe
  2⤵
  - Executes dropped EXE
  PID:5260
- C:\Windows\System\UrOIfdR.exe
  C:\Windows\System\UrOIfdR.exe
  2⤵
  - Executes dropped EXE
  PID:5288
- C:\Windows\System\zxeZdua.exe
  C:\Windows\System\zxeZdua.exe
  2⤵
  - Executes dropped EXE
  PID:5316
- C:\Windows\System\TJVFlYt.exe
  C:\Windows\System\TJVFlYt.exe
  2⤵
  - Executes dropped EXE
  PID:5344
- C:\Windows\System\LtXxUSL.exe
  C:\Windows\System\LtXxUSL.exe
  2⤵
  - Executes dropped EXE
  PID:5372
- C:\Windows\System\bAHVskF.exe
  C:\Windows\System\bAHVskF.exe
  2⤵
  - Executes dropped EXE
  PID:5436
- C:\Windows\System\YHYmerP.exe
  C:\Windows\System\YHYmerP.exe
  2⤵
  - Executes dropped EXE
  PID:5452
- C:\Windows\System\sYrKHWp.exe
  C:\Windows\System\sYrKHWp.exe
  2⤵
  - Executes dropped EXE
  PID:5468
- C:\Windows\System\fqlMZpz.exe
  C:\Windows\System\fqlMZpz.exe
  2⤵
  - Executes dropped EXE
  PID:5484
- C:\Windows\System\ZkJtcSy.exe
  C:\Windows\System\ZkJtcSy.exe
  2⤵
  PID:5512
- C:\Windows\System\kWjhpHf.exe
  C:\Windows\System\kWjhpHf.exe
  2⤵
  PID:5540
- C:\Windows\System\wUBeHvv.exe
  C:\Windows\System\wUBeHvv.exe
  2⤵
  PID:5564
- C:\Windows\System\McYziMQ.exe
  C:\Windows\System\McYziMQ.exe
  2⤵
  PID:5592
- C:\Windows\System\lIwuWPP.exe
  C:\Windows\System\lIwuWPP.exe
  2⤵
  PID:5620
- C:\Windows\System\PKZYBcR.exe
  C:\Windows\System\PKZYBcR.exe
  2⤵
  PID:5648
- C:\Windows\System\axcDgJv.exe
  C:\Windows\System\axcDgJv.exe
  2⤵
  PID:5676
- C:\Windows\System\oRjqNiG.exe
  C:\Windows\System\oRjqNiG.exe
  2⤵
  PID:5704
- C:\Windows\System\pTYdBCk.exe
  C:\Windows\System\pTYdBCk.exe
  2⤵
  PID:5732
- C:\Windows\System\ZZTuRvb.exe
  C:\Windows\System\ZZTuRvb.exe
  2⤵
  PID:5760
- C:\Windows\System\WyaQLNC.exe
  C:\Windows\System\WyaQLNC.exe
  2⤵
  PID:5788
- C:\Windows\System\WFhKcCB.exe
  C:\Windows\System\WFhKcCB.exe
  2⤵
  PID:5816
- C:\Windows\System\xcurnhG.exe
  C:\Windows\System\xcurnhG.exe
  2⤵
  PID:5844
- C:\Windows\System\GhGAbgM.exe
  C:\Windows\System\GhGAbgM.exe
  2⤵
  PID:5872
- C:\Windows\System\sDGgFHL.exe
  C:\Windows\System\sDGgFHL.exe
  2⤵
  PID:5912
- C:\Windows\System\boJHbOV.exe
  C:\Windows\System\boJHbOV.exe
  2⤵
  PID:5940
- C:\Windows\System\kAKcnpz.exe
  C:\Windows\System\kAKcnpz.exe
  2⤵
  PID:5960
- C:\Windows\System\UIyYxgG.exe
  C:\Windows\System\UIyYxgG.exe
  2⤵
  PID:5984
- C:\Windows\System\kCRGRmi.exe
  C:\Windows\System\kCRGRmi.exe
  2⤵
  PID:6012
- C:\Windows\System\gGNpbdC.exe
  C:\Windows\System\gGNpbdC.exe
  2⤵
  PID:6040
- C:\Windows\System\GEKRONy.exe
  C:\Windows\System\GEKRONy.exe
  2⤵
  PID:6068
- C:\Windows\System\TKISVMe.exe
  C:\Windows\System\TKISVMe.exe
  2⤵
  PID:6096
- C:\Windows\System\gXOVUnk.exe
  C:\Windows\System\gXOVUnk.exe
  2⤵
  PID:3764
- C:\Windows\System\jHkqKTA.exe
  C:\Windows\System\jHkqKTA.exe
  2⤵
  PID:2932
- C:\Windows\System\vtHjGjg.exe
  C:\Windows\System\vtHjGjg.exe
  2⤵
  PID:4800
- C:\Windows\System\UKEsPWA.exe
  C:\Windows\System\UKEsPWA.exe
  2⤵
  PID:5188
- C:\Windows\System\kXPmKyS.exe
  C:\Windows\System\kXPmKyS.exe
  2⤵
  PID:5240
- C:\Windows\System\tRLQzjQ.exe
  C:\Windows\System\tRLQzjQ.exe
  2⤵
  PID:5276
- C:\Windows\System\TYPuOmF.exe
  C:\Windows\System\TYPuOmF.exe
  2⤵
  PID:5332
- C:\Windows\System\PYGUeOH.exe
  C:\Windows\System\PYGUeOH.exe
  2⤵
  PID:5364
- C:\Windows\System\nbmLJCU.exe
  C:\Windows\System\nbmLJCU.exe
  2⤵
  PID:5444
- C:\Windows\System\QKuGlyf.exe
  C:\Windows\System\QKuGlyf.exe
  2⤵
  PID:5500
- C:\Windows\System\wvKoIYk.exe
  C:\Windows\System\wvKoIYk.exe
  2⤵
  PID:5664
- C:\Windows\System\afgLsZQ.exe
  C:\Windows\System\afgLsZQ.exe
  2⤵
  PID:5720
- C:\Windows\System\AzJeyHC.exe
  C:\Windows\System\AzJeyHC.exe
  2⤵
  PID:5780
- C:\Windows\System\SicMLCz.exe
  C:\Windows\System\SicMLCz.exe
  2⤵
  PID:5808
- C:\Windows\System\wPPhukv.exe
  C:\Windows\System\wPPhukv.exe
  2⤵
  PID:5860
- C:\Windows\System\YguqZkW.exe
  C:\Windows\System\YguqZkW.exe
  2⤵
  PID:2088
- C:\Windows\System\zVhTdRP.exe
  C:\Windows\System\zVhTdRP.exe
  2⤵
  PID:5972
- C:\Windows\System\kCmNzgx.exe
  C:\Windows\System\kCmNzgx.exe
  2⤵
  PID:6060
- C:\Windows\System\ydGPgDG.exe
  C:\Windows\System\ydGPgDG.exe
  2⤵
  PID:880
- C:\Windows\System\TcbDfok.exe
  C:\Windows\System\TcbDfok.exe
  2⤵
  PID:4360
- C:\Windows\System\BYfyOFB.exe
  C:\Windows\System\BYfyOFB.exe
  2⤵
  PID:1728
- C:\Windows\System\TbopJGp.exe
  C:\Windows\System\TbopJGp.exe
  2⤵
  PID:1056
- C:\Windows\System\jCxmGbj.exe
  C:\Windows\System\jCxmGbj.exe
  2⤵
  PID:2084
- C:\Windows\System\dgHqFSE.exe
  C:\Windows\System\dgHqFSE.exe
  2⤵
  PID:3832
- C:\Windows\System\UolKKPM.exe
  C:\Windows\System\UolKKPM.exe
  2⤵
  PID:1964
- C:\Windows\System\gpKSydf.exe
  C:\Windows\System\gpKSydf.exe
  2⤵
  PID:1612
- C:\Windows\System\eUelmOe.exe
  C:\Windows\System\eUelmOe.exe
  2⤵
  PID:4280
- C:\Windows\System\BkbWWfp.exe
  C:\Windows\System\BkbWWfp.exe
  2⤵
  PID:6116
- C:\Windows\System\EZSSgkg.exe
  C:\Windows\System\EZSSgkg.exe
  2⤵
  PID:5132
- C:\Windows\System\wOUNsOa.exe
  C:\Windows\System\wOUNsOa.exe
  2⤵
  PID:5164
- C:\Windows\System\nLZeVAT.exe
  C:\Windows\System\nLZeVAT.exe
  2⤵
  PID:5256
- C:\Windows\System\VZsDUiA.exe
  C:\Windows\System\VZsDUiA.exe
  2⤵
  PID:5728
- C:\Windows\System\JeCnMgI.exe
  C:\Windows\System\JeCnMgI.exe
  2⤵
  PID:5756
- C:\Windows\System\GHjsuad.exe
  C:\Windows\System\GHjsuad.exe
  2⤵
  PID:1188
- C:\Windows\System\OQmUPHF.exe
  C:\Windows\System\OQmUPHF.exe
  2⤵
  PID:5392
- C:\Windows\System\vTPJepl.exe
  C:\Windows\System\vTPJepl.exe
  2⤵
  PID:3712
- C:\Windows\System\RpzpuAs.exe
  C:\Windows\System\RpzpuAs.exe
  2⤵
  PID:928
- C:\Windows\System\IELTqeO.exe
  C:\Windows\System\IELTqeO.exe
  2⤵
  PID:1468
- C:\Windows\System\kdXsMZD.exe
  C:\Windows\System\kdXsMZD.exe
  2⤵
  PID:5840
- C:\Windows\System\jBKgUSc.exe
  C:\Windows\System\jBKgUSc.exe
  2⤵
  PID:5112
- C:\Windows\System\LYJsedF.exe
  C:\Windows\System\LYJsedF.exe
  2⤵
  PID:5208
- C:\Windows\System\wEHhqcz.exe
  C:\Windows\System\wEHhqcz.exe
  2⤵
  PID:5804
- C:\Windows\System\EwmuDFw.exe
  C:\Windows\System\EwmuDFw.exe
  2⤵
  PID:6156
- C:\Windows\System\ziDlVxK.exe
  C:\Windows\System\ziDlVxK.exe
  2⤵
  PID:6180
- C:\Windows\System\nUWdima.exe
  C:\Windows\System\nUWdima.exe
  2⤵
  PID:6212
- C:\Windows\System\xeyvYBi.exe
  C:\Windows\System\xeyvYBi.exe
  2⤵
  PID:6248
- C:\Windows\System\NufkQCx.exe
  C:\Windows\System\NufkQCx.exe
  2⤵
  PID:6276
- C:\Windows\System\TEOHQRp.exe
  C:\Windows\System\TEOHQRp.exe
  2⤵
  PID:6304
- C:\Windows\System\ThoqLDz.exe
  C:\Windows\System\ThoqLDz.exe
  2⤵
  PID:6332
- C:\Windows\System\pbguhrn.exe
  C:\Windows\System\pbguhrn.exe
  2⤵
  PID:6360
- C:\Windows\System\sVnsYGS.exe
  C:\Windows\System\sVnsYGS.exe
  2⤵
  PID:6396
- C:\Windows\System\AutdMYy.exe
  C:\Windows\System\AutdMYy.exe
  2⤵
  PID:6424
- C:\Windows\System\nftTxEC.exe
  C:\Windows\System\nftTxEC.exe
  2⤵
  PID:6452
- C:\Windows\System\nuEaJMO.exe
  C:\Windows\System\nuEaJMO.exe
  2⤵
  PID:6480
- C:\Windows\System\UTGEXQv.exe
  C:\Windows\System\UTGEXQv.exe
  2⤵
  PID:6520
- C:\Windows\System\KlYQcgO.exe
  C:\Windows\System\KlYQcgO.exe
  2⤵
  PID:6552
- C:\Windows\System\rEWghbA.exe
  C:\Windows\System\rEWghbA.exe
  2⤵
  PID:6568
- C:\Windows\System\tyCeUZX.exe
  C:\Windows\System\tyCeUZX.exe
  2⤵
  PID:6584
- C:\Windows\System\AHfoTXI.exe
  C:\Windows\System\AHfoTXI.exe
  2⤵
  PID:6600
- C:\Windows\System\LcwcnmG.exe
  C:\Windows\System\LcwcnmG.exe
  2⤵
  PID:6660
- C:\Windows\System\xDfYSnQ.exe
  C:\Windows\System\xDfYSnQ.exe
  2⤵
  PID:6676
- C:\Windows\System\RlNfHbx.exe
  C:\Windows\System\RlNfHbx.exe
  2⤵
  PID:6696
- C:\Windows\System\lZPjKXc.exe
  C:\Windows\System\lZPjKXc.exe
  2⤵
  PID:6732
- C:\Windows\System\dvlZItB.exe
  C:\Windows\System\dvlZItB.exe
  2⤵
  PID:6764
- C:\Windows\System\HbjdEdf.exe
  C:\Windows\System\HbjdEdf.exe
  2⤵
  PID:6788
- C:\Windows\System\YtnyREp.exe
  C:\Windows\System\YtnyREp.exe
  2⤵
  PID:6816
- C:\Windows\System\VfuqzbF.exe
  C:\Windows\System\VfuqzbF.exe
  2⤵
  PID:6844
- C:\Windows\System\YaSwlMx.exe
  C:\Windows\System\YaSwlMx.exe
  2⤵
  PID:6872
- C:\Windows\System\HRiXQqT.exe
  C:\Windows\System\HRiXQqT.exe
  2⤵
  PID:6904
- C:\Windows\System\tCrSJFw.exe
  C:\Windows\System\tCrSJFw.exe
  2⤵
  PID:6928
- C:\Windows\System\aqiExcX.exe
  C:\Windows\System\aqiExcX.exe
  2⤵
  PID:6956
- C:\Windows\System\VXNltLF.exe
  C:\Windows\System\VXNltLF.exe
  2⤵
  PID:6996
- C:\Windows\System\EayXypX.exe
  C:\Windows\System\EayXypX.exe
  2⤵
  PID:7024
- C:\Windows\System\SnlrPTa.exe
  C:\Windows\System\SnlrPTa.exe
  2⤵
  PID:7044
- C:\Windows\System\UbZySEe.exe
  C:\Windows\System\UbZySEe.exe
  2⤵
  PID:7068
- C:\Windows\System\jPTOXVP.exe
  C:\Windows\System\jPTOXVP.exe
  2⤵
  PID:7096
- C:\Windows\System\NbpEdrq.exe
  C:\Windows\System\NbpEdrq.exe
  2⤵
  PID:7120
- C:\Windows\System\VwDqkSM.exe
  C:\Windows\System\VwDqkSM.exe
  2⤵
  PID:7152
- C:\Windows\System\xPrcCPz.exe
  C:\Windows\System\xPrcCPz.exe
  2⤵
  PID:3292
- C:\Windows\System\qapOudC.exe
  C:\Windows\System\qapOudC.exe
  2⤵
  PID:6208
- C:\Windows\System\DqNWgRT.exe
  C:\Windows\System\DqNWgRT.exe
  2⤵
  PID:6244
- C:\Windows\System\wkWcXuy.exe
  C:\Windows\System\wkWcXuy.exe
  2⤵
  PID:2608
- C:\Windows\System\swshgRE.exe
  C:\Windows\System\swshgRE.exe
  2⤵
  PID:6348
- C:\Windows\System\qPuHDUh.exe
  C:\Windows\System\qPuHDUh.exe
  2⤵
  PID:6388
- C:\Windows\System\kwAueoK.exe
  C:\Windows\System\kwAueoK.exe
  2⤵
  PID:6468
- C:\Windows\System\wqCGPDf.exe
  C:\Windows\System\wqCGPDf.exe
  2⤵
  PID:456
- C:\Windows\System\INIatnk.exe
  C:\Windows\System\INIatnk.exe
  2⤵
  PID:6516
- C:\Windows\System\wYcbwBf.exe
  C:\Windows\System\wYcbwBf.exe
  2⤵
  PID:6576
- C:\Windows\System\NrLISLT.exe
  C:\Windows\System\NrLISLT.exe
  2⤵
  PID:6648
- C:\Windows\System\DGcdxcU.exe
  C:\Windows\System\DGcdxcU.exe
  2⤵
  PID:6692
- C:\Windows\System\oaBPFlG.exe
  C:\Windows\System\oaBPFlG.exe
  2⤵
  PID:6748
- C:\Windows\System\XwwJQLd.exe
  C:\Windows\System\XwwJQLd.exe
  2⤵
  PID:6808
- C:\Windows\System\PmXfcyC.exe
  C:\Windows\System\PmXfcyC.exe
  2⤵
  PID:6912
- C:\Windows\System\egyirEH.exe
  C:\Windows\System\egyirEH.exe
  2⤵
  PID:6948
- C:\Windows\System\PhTMbOf.exe
  C:\Windows\System\PhTMbOf.exe
  2⤵
  PID:7016
- C:\Windows\System\slDgRzK.exe
  C:\Windows\System\slDgRzK.exe
  2⤵
  PID:7088
- C:\Windows\System\wTvzpsc.exe
  C:\Windows\System\wTvzpsc.exe
  2⤵
  PID:7164
- C:\Windows\System\GxJPFQq.exe
  C:\Windows\System\GxJPFQq.exe
  2⤵
  PID:6192
- C:\Windows\System\nrpDVNe.exe
  C:\Windows\System\nrpDVNe.exe
  2⤵
  PID:6316
- C:\Windows\System\EeJGmqM.exe
  C:\Windows\System\EeJGmqM.exe
  2⤵
  PID:6356
- C:\Windows\System\FdXCxDw.exe
  C:\Windows\System\FdXCxDw.exe
  2⤵
  PID:3044
- C:\Windows\System\DnfMdTw.exe
  C:\Windows\System\DnfMdTw.exe
  2⤵
  PID:6688
- C:\Windows\System\FAkhyMN.exe
  C:\Windows\System\FAkhyMN.exe
  2⤵
  PID:6864
- C:\Windows\System\IBZZwFf.exe
  C:\Windows\System\IBZZwFf.exe
  2⤵
  PID:6976
- C:\Windows\System\eyeFqID.exe
  C:\Windows\System\eyeFqID.exe
  2⤵
  PID:7056
- C:\Windows\System\ujbsqxr.exe
  C:\Windows\System\ujbsqxr.exe
  2⤵
  PID:6352
- C:\Windows\System\lzjCIVV.exe
  C:\Windows\System\lzjCIVV.exe
  2⤵
  PID:2496
- C:\Windows\System\PDcHLvB.exe
  C:\Windows\System\PDcHLvB.exe
  2⤵
  PID:6800
- C:\Windows\System\qhlqVoy.exe
  C:\Windows\System\qhlqVoy.exe
  2⤵
  PID:4612
- C:\Windows\System\VzEYnCX.exe
  C:\Windows\System\VzEYnCX.exe
  2⤵
  PID:1036
- C:\Windows\System\zRUbBwX.exe
  C:\Windows\System\zRUbBwX.exe
  2⤵
  PID:7180
- C:\Windows\System\mdDZgLs.exe
  C:\Windows\System\mdDZgLs.exe
  2⤵
  PID:7220
- C:\Windows\System\bIfhrVI.exe
  C:\Windows\System\bIfhrVI.exe
  2⤵
  PID:7244
- C:\Windows\System\TOXjkKo.exe
  C:\Windows\System\TOXjkKo.exe
  2⤵
  PID:7268
- C:\Windows\System\qaSzRWh.exe
  C:\Windows\System\qaSzRWh.exe
  2⤵
  PID:7296
- C:\Windows\System\QXZpJoW.exe
  C:\Windows\System\QXZpJoW.exe
  2⤵
  PID:7328
- C:\Windows\System\WNvAPZl.exe
  C:\Windows\System\WNvAPZl.exe
  2⤵
  PID:7348
- C:\Windows\System\sqLrTPh.exe
  C:\Windows\System\sqLrTPh.exe
  2⤵
  PID:7384
- C:\Windows\System\zycMGZc.exe
  C:\Windows\System\zycMGZc.exe
  2⤵
  PID:7424
- C:\Windows\System\kTZtPli.exe
  C:\Windows\System\kTZtPli.exe
  2⤵
  PID:7440
- C:\Windows\System\ujZYLQz.exe
  C:\Windows\System\ujZYLQz.exe
  2⤵
  PID:7464
- C:\Windows\System\FFJBMCW.exe
  C:\Windows\System\FFJBMCW.exe
  2⤵
  PID:7484
- C:\Windows\System\jgQMkHr.exe
  C:\Windows\System\jgQMkHr.exe
  2⤵
  PID:7508
- C:\Windows\System\EgPnZwy.exe
  C:\Windows\System\EgPnZwy.exe
  2⤵
  PID:7556
- C:\Windows\System\CJDDeGr.exe
  C:\Windows\System\CJDDeGr.exe
  2⤵
  PID:7572
- C:\Windows\System\uqQhkpx.exe
  C:\Windows\System\uqQhkpx.exe
  2⤵
  PID:7596
- C:\Windows\System\adpaSYm.exe
  C:\Windows\System\adpaSYm.exe
  2⤵
  PID:7612
- C:\Windows\System\SryHMRy.exe
  C:\Windows\System\SryHMRy.exe
  2⤵
  PID:7636
- C:\Windows\System\WSjclTQ.exe
  C:\Windows\System\WSjclTQ.exe
  2⤵
  PID:7660
- C:\Windows\System\iDcYXnz.exe
  C:\Windows\System\iDcYXnz.exe
  2⤵
  PID:7684
- C:\Windows\System\CriiNQg.exe
  C:\Windows\System\CriiNQg.exe
  2⤵
  PID:7704
- C:\Windows\System\tzGOTNu.exe
  C:\Windows\System\tzGOTNu.exe
  2⤵
  PID:7736
- C:\Windows\System\TLLOScB.exe
  C:\Windows\System\TLLOScB.exe
  2⤵
  PID:7756
- C:\Windows\System\MifHVYK.exe
  C:\Windows\System\MifHVYK.exe
  2⤵
  PID:7792
- C:\Windows\System\qtDHfpV.exe
  C:\Windows\System\qtDHfpV.exe
  2⤵
  PID:7820
- C:\Windows\System\nkcGlEl.exe
  C:\Windows\System\nkcGlEl.exe
  2⤵
  PID:7848
- C:\Windows\System\JoarQFc.exe
  C:\Windows\System\JoarQFc.exe
  2⤵
  PID:7884
- C:\Windows\System\hIleZgM.exe
  C:\Windows\System\hIleZgM.exe
  2⤵
  PID:7912
- C:\Windows\System\vckMBcp.exe
  C:\Windows\System\vckMBcp.exe
  2⤵
  PID:7948
- C:\Windows\System\iIbrJfi.exe
  C:\Windows\System\iIbrJfi.exe
  2⤵
  PID:7984
- C:\Windows\System\fozPgmh.exe
  C:\Windows\System\fozPgmh.exe
  2⤵
  PID:8024
- C:\Windows\System\XUngRgT.exe
  C:\Windows\System\XUngRgT.exe
  2⤵
  PID:8052
- C:\Windows\System\jwNBpUz.exe
  C:\Windows\System\jwNBpUz.exe
  2⤵
  PID:8076
- C:\Windows\System\qOcjlfz.exe
  C:\Windows\System\qOcjlfz.exe
  2⤵
  PID:8112
- C:\Windows\System\TTQhNOm.exe
  C:\Windows\System\TTQhNOm.exe
  2⤵
  PID:8128
- C:\Windows\System\EjvUivj.exe
  C:\Windows\System\EjvUivj.exe
  2⤵
  PID:8152
- C:\Windows\System\uujASjZ.exe
  C:\Windows\System\uujASjZ.exe
  2⤵
  PID:7216
- C:\Windows\System\HOTsjQL.exe
  C:\Windows\System\HOTsjQL.exe
  2⤵
  PID:7316
- C:\Windows\System\DIzcNZX.exe
  C:\Windows\System\DIzcNZX.exe
  2⤵
  PID:7412
- C:\Windows\System\ccCuagz.exe
  C:\Windows\System\ccCuagz.exe
  2⤵
  PID:7480
- C:\Windows\System\qlikEdt.exe
  C:\Windows\System\qlikEdt.exe
  2⤵
  PID:7500
- C:\Windows\System\ajWvjAJ.exe
  C:\Windows\System\ajWvjAJ.exe
  2⤵
  PID:7604
- C:\Windows\System\palhSgF.exe
  C:\Windows\System\palhSgF.exe
  2⤵
  PID:7592
- C:\Windows\System\TvtWqtQ.exe
  C:\Windows\System\TvtWqtQ.exe
  2⤵
  PID:7808
- C:\Windows\System\FCYphwU.exe
  C:\Windows\System\FCYphwU.exe
  2⤵
  PID:7780
- C:\Windows\System\KAjeFxZ.exe
  C:\Windows\System\KAjeFxZ.exe
  2⤵
  PID:7816
- C:\Windows\System\bAaknSp.exe
  C:\Windows\System\bAaknSp.exe
  2⤵
  PID:7936
- C:\Windows\System\IQAKKPz.exe
  C:\Windows\System\IQAKKPz.exe
  2⤵
  PID:8060
- C:\Windows\System\UsuwDmL.exe
  C:\Windows\System\UsuwDmL.exe
  2⤵
  PID:8108
- C:\Windows\System\aUaogwK.exe
  C:\Windows\System\aUaogwK.exe
  2⤵
  PID:8188
- C:\Windows\System\qHAyqNb.exe
  C:\Windows\System\qHAyqNb.exe
  2⤵
  PID:7292
- C:\Windows\System\TPtQupo.exe
  C:\Windows\System\TPtQupo.exe
  2⤵
  PID:7656
- C:\Windows\System\ksJbTgu.exe
  C:\Windows\System\ksJbTgu.exe
  2⤵
  PID:7768
- C:\Windows\System\mKWVpaE.exe
  C:\Windows\System\mKWVpaE.exe
  2⤵
  PID:7748
- C:\Windows\System\qFKVAVr.exe
  C:\Windows\System\qFKVAVr.exe
  2⤵
  PID:7996
- C:\Windows\System\uobxltb.exe
  C:\Windows\System\uobxltb.exe
  2⤵
  PID:8124
- C:\Windows\System\YChvrSb.exe
  C:\Windows\System\YChvrSb.exe
  2⤵
  PID:7212
- C:\Windows\System\hAgmUco.exe
  C:\Windows\System\hAgmUco.exe
  2⤵
  PID:7800
- C:\Windows\System\wjYLLMr.exe
  C:\Windows\System\wjYLLMr.exe
  2⤵
  PID:8048
- C:\Windows\System\yqEcxQQ.exe
  C:\Windows\System\yqEcxQQ.exe
  2⤵
  PID:7924
- C:\Windows\System\tUENiuD.exe
  C:\Windows\System\tUENiuD.exe
  2⤵
  PID:7344
- C:\Windows\System\swnmJzE.exe
  C:\Windows\System\swnmJzE.exe
  2⤵
  PID:8212
- C:\Windows\System\bmXoLMV.exe
  C:\Windows\System\bmXoLMV.exe
  2⤵
  PID:8228
- C:\Windows\System\lCConcF.exe
  C:\Windows\System\lCConcF.exe
  2⤵
  PID:8264
- C:\Windows\System\BYXNude.exe
  C:\Windows\System\BYXNude.exe
  2⤵
  PID:8300
- C:\Windows\System\wlwzlRM.exe
  C:\Windows\System\wlwzlRM.exe
  2⤵
  PID:8332
- C:\Windows\System\qysLEEU.exe
  C:\Windows\System\qysLEEU.exe
  2⤵
  PID:8460
- C:\Windows\System\rlkWbQk.exe
  C:\Windows\System\rlkWbQk.exe
  2⤵
  PID:8488
- C:\Windows\System\PdYJDbL.exe
  C:\Windows\System\PdYJDbL.exe
  2⤵
  PID:8516
- C:\Windows\System\exADunV.exe
  C:\Windows\System\exADunV.exe
  2⤵
  PID:8556
- C:\Windows\System\ykHvUKw.exe
  C:\Windows\System\ykHvUKw.exe
  2⤵
  PID:8588
- C:\Windows\System\LVyDSbC.exe
  C:\Windows\System\LVyDSbC.exe
  2⤵
  PID:8616
- C:\Windows\System\sOFoQdZ.exe
  C:\Windows\System\sOFoQdZ.exe
  2⤵
  PID:8656
- C:\Windows\System\WnnBzbB.exe
  C:\Windows\System\WnnBzbB.exe
  2⤵
  PID:8676
- C:\Windows\System\Xwpfvtn.exe
  C:\Windows\System\Xwpfvtn.exe
  2⤵
  PID:8708
- C:\Windows\System\SQbDfvI.exe
  C:\Windows\System\SQbDfvI.exe
  2⤵
  PID:8732
- C:\Windows\System\pQFfOGw.exe
  C:\Windows\System\pQFfOGw.exe
  2⤵
  PID:8764
- C:\Windows\System\uYJCFXL.exe
  C:\Windows\System\uYJCFXL.exe
  2⤵
  PID:8808
- C:\Windows\System\ZrRnQQV.exe
  C:\Windows\System\ZrRnQQV.exe
  2⤵
  PID:8840
- C:\Windows\System\xaoDKwA.exe
  C:\Windows\System\xaoDKwA.exe
  2⤵
  PID:8876
- C:\Windows\System\LnKnsHJ.exe
  C:\Windows\System\LnKnsHJ.exe
  2⤵
  PID:8900
- C:\Windows\System\ZZHNlzd.exe
  C:\Windows\System\ZZHNlzd.exe
  2⤵
  PID:8928
- C:\Windows\System\IPNsIig.exe
  C:\Windows\System\IPNsIig.exe
  2⤵
  PID:8964
- C:\Windows\System\uWYjwtZ.exe
  C:\Windows\System\uWYjwtZ.exe
  2⤵
  PID:8992
- C:\Windows\System\ZKKlQxB.exe
  C:\Windows\System\ZKKlQxB.exe
  2⤵
  PID:9012
- C:\Windows\System\cRwOEAU.exe
  C:\Windows\System\cRwOEAU.exe
  2⤵
  PID:9040
- C:\Windows\System\kOvaihm.exe
  C:\Windows\System\kOvaihm.exe
  2⤵
  PID:9072
- C:\Windows\System\uFrgxAy.exe
  C:\Windows\System\uFrgxAy.exe
  2⤵
  PID:9124
- C:\Windows\System\jUOQggb.exe
  C:\Windows\System\jUOQggb.exe
  2⤵
  PID:9152
- C:\Windows\System\XhyvWpv.exe
  C:\Windows\System\XhyvWpv.exe
  2⤵
  PID:9192
- C:\Windows\System\MAaWgSs.exe
  C:\Windows\System\MAaWgSs.exe
  2⤵
  PID:7908
- C:\Windows\System\FhIjGzj.exe
  C:\Windows\System\FhIjGzj.exe
  2⤵
  PID:7672
- C:\Windows\System\JpLhupv.exe
  C:\Windows\System\JpLhupv.exe
  2⤵
  PID:8224
- C:\Windows\System\mitFbJq.exe
  C:\Windows\System\mitFbJq.exe
  2⤵
  PID:8364
- C:\Windows\System\iJIMVAx.exe
  C:\Windows\System\iJIMVAx.exe
  2⤵
  PID:8320
- C:\Windows\System\IWPGcCM.exe
  C:\Windows\System\IWPGcCM.exe
  2⤵
  PID:8496
- C:\Windows\System\epNDcQX.exe
  C:\Windows\System\epNDcQX.exe
  2⤵
  PID:8552
- C:\Windows\System\eRzfcqv.exe
  C:\Windows\System\eRzfcqv.exe
  2⤵
  PID:8652
- C:\Windows\System\BtRvOrD.exe
  C:\Windows\System\BtRvOrD.exe
  2⤵
  PID:8644
- C:\Windows\System\CzrOQyg.exe
  C:\Windows\System\CzrOQyg.exe
  2⤵
  PID:8752
- C:\Windows\System\iLiWILj.exe
  C:\Windows\System\iLiWILj.exe
  2⤵
  PID:8952
- C:\Windows\System\hujXtOF.exe
  C:\Windows\System\hujXtOF.exe
  2⤵
  PID:8944
- C:\Windows\System\TlQoLww.exe
  C:\Windows\System\TlQoLww.exe
  2⤵
  PID:9068
- C:\Windows\System\nURupKR.exe
  C:\Windows\System\nURupKR.exe
  2⤵
  PID:9184
- C:\Windows\System\WJWouqK.exe
  C:\Windows\System\WJWouqK.exe
  2⤵
  PID:9200
- C:\Windows\System\LpAekMI.exe
  C:\Windows\System\LpAekMI.exe
  2⤵
  PID:9164
- C:\Windows\System\MGHGged.exe
  C:\Windows\System\MGHGged.exe
  2⤵
  PID:8468
- C:\Windows\System\BZnwbAt.exe
  C:\Windows\System\BZnwbAt.exe
  2⤵
  PID:8824
- C:\Windows\System\MxHaNNc.exe
  C:\Windows\System\MxHaNNc.exe
  2⤵
  PID:8632
- C:\Windows\System\ydYIZWy.exe
  C:\Windows\System\ydYIZWy.exe
  2⤵
  PID:8828
- C:\Windows\System\AWfEtWA.exe
  C:\Windows\System\AWfEtWA.exe
  2⤵
  PID:4052
- C:\Windows\System\FjOZHCR.exe
  C:\Windows\System\FjOZHCR.exe
  2⤵
  PID:9276
- C:\Windows\System\zQcOfEf.exe
  C:\Windows\System\zQcOfEf.exe
  2⤵
  PID:9304
- C:\Windows\System\LZtQgic.exe
  C:\Windows\System\LZtQgic.exe
  2⤵
  PID:9352
- C:\Windows\System\TNFVeeP.exe
  C:\Windows\System\TNFVeeP.exe
  2⤵
  PID:9420
- C:\Windows\System\JyMyrkq.exe
  C:\Windows\System\JyMyrkq.exe
  2⤵
  PID:9452
- C:\Windows\System\vdlqLDR.exe
  C:\Windows\System\vdlqLDR.exe
  2⤵
  PID:9468
- C:\Windows\System\RaxtvxD.exe
  C:\Windows\System\RaxtvxD.exe
  2⤵
  PID:9584
- C:\Windows\System\XLKaSJa.exe
  C:\Windows\System\XLKaSJa.exe
  2⤵
  PID:9600
- C:\Windows\System\ccjOSbU.exe
  C:\Windows\System\ccjOSbU.exe
  2⤵
  PID:9632
- C:\Windows\System\bCLnUfV.exe
  C:\Windows\System\bCLnUfV.exe
  2⤵
  PID:9720
- C:\Windows\System\tCzCKUH.exe
  C:\Windows\System\tCzCKUH.exe
  2⤵
  PID:9768
- C:\Windows\System\BfKgolp.exe
  C:\Windows\System\BfKgolp.exe
  2⤵
  PID:9796
- C:\Windows\System\SacBfjt.exe
  C:\Windows\System\SacBfjt.exe
  2⤵
  PID:9828
- C:\Windows\System\RQFcFvk.exe
  C:\Windows\System\RQFcFvk.exe
  2⤵
  PID:9856
- C:\Windows\System\PWpPGCj.exe
  C:\Windows\System\PWpPGCj.exe
  2⤵
  PID:9888
- C:\Windows\System\wfqIxbt.exe
  C:\Windows\System\wfqIxbt.exe
  2⤵
  PID:9908
- C:\Windows\System\rUITQuJ.exe
  C:\Windows\System\rUITQuJ.exe
  2⤵
  PID:9936
- C:\Windows\System\RkgYKxg.exe
  C:\Windows\System\RkgYKxg.exe
  2⤵
  PID:9952
- C:\Windows\System\NLZxLEz.exe
  C:\Windows\System\NLZxLEz.exe
  2⤵
  PID:9976
- C:\Windows\System\UGQdTLq.exe
  C:\Windows\System\UGQdTLq.exe
  2⤵
  PID:10016
- C:\Windows\System\jdXHsxN.exe
  C:\Windows\System\jdXHsxN.exe
  2⤵
  PID:10076
- C:\Windows\System\XjvDaVS.exe
  C:\Windows\System\XjvDaVS.exe
  2⤵
  PID:10120
- C:\Windows\System\oTsTWAZ.exe
  C:\Windows\System\oTsTWAZ.exe
  2⤵
  PID:10148
- C:\Windows\System\fUdDXJI.exe
  C:\Windows\System\fUdDXJI.exe
  2⤵
  PID:10176
- C:\Windows\System\GzRbLbg.exe
  C:\Windows\System\GzRbLbg.exe
  2⤵
  PID:10212
- C:\Windows\System\ieMXJze.exe
  C:\Windows\System\ieMXJze.exe
  2⤵
  PID:4088
- C:\Windows\System\HGBYsNi.exe
  C:\Windows\System\HGBYsNi.exe
  2⤵
  PID:8804
- C:\Windows\System\AARKvLu.exe
  C:\Windows\System\AARKvLu.exe
  2⤵
  PID:8924
- C:\Windows\System\cUqaFJL.exe
  C:\Windows\System\cUqaFJL.exe
  2⤵
  PID:8348
- C:\Windows\System\rCaqCTP.exe
  C:\Windows\System\rCaqCTP.exe
  2⤵
  PID:8416
- C:\Windows\System\ElWTtuf.exe
  C:\Windows\System\ElWTtuf.exe
  2⤵
  PID:7944
- C:\Windows\System\NSpReQY.exe
  C:\Windows\System\NSpReQY.exe
  2⤵
  PID:4044
- C:\Windows\System\fZUwhEh.exe
  C:\Windows\System\fZUwhEh.exe
  2⤵
  PID:9316
- C:\Windows\System\WcwRplX.exe
  C:\Windows\System\WcwRplX.exe
  2⤵
  PID:8340
- C:\Windows\System\MZlfQhS.exe
  C:\Windows\System\MZlfQhS.exe
  2⤵
  PID:9232
- C:\Windows\System\tGGDrqZ.exe
  C:\Windows\System\tGGDrqZ.exe
  2⤵
  PID:9480
- C:\Windows\System\zVBgoGT.exe
  C:\Windows\System\zVBgoGT.exe
  2⤵
  PID:9376
- C:\Windows\System\gYSEgbx.exe
  C:\Windows\System\gYSEgbx.exe
  2⤵
  PID:9644
- C:\Windows\System\gwgLfeu.exe
  C:\Windows\System\gwgLfeu.exe
  2⤵
  PID:9484
- C:\Windows\System\juYDqdo.exe
  C:\Windows\System\juYDqdo.exe
  2⤵
  PID:9504
- C:\Windows\System\oSfszUt.exe
  C:\Windows\System\oSfszUt.exe
  2⤵
  PID:9528
- C:\Windows\System\FoLnQfh.exe
  C:\Windows\System\FoLnQfh.exe
  2⤵
  PID:9404
- C:\Windows\System\zbpshcb.exe
  C:\Windows\System\zbpshcb.exe
  2⤵
  PID:9428
- C:\Windows\System\PPhkAHV.exe
  C:\Windows\System\PPhkAHV.exe
  2⤵
  PID:9740
- C:\Windows\System\GfVGGsa.exe
  C:\Windows\System\GfVGGsa.exe
  2⤵
  PID:5048
- C:\Windows\System\uIaOYLv.exe
  C:\Windows\System\uIaOYLv.exe
  2⤵
  PID:9820
- C:\Windows\System\rEqwHBx.exe
  C:\Windows\System\rEqwHBx.exe
  2⤵
  PID:9920
- C:\Windows\System\yzyjuop.exe
  C:\Windows\System\yzyjuop.exe
  2⤵
  PID:9972
- C:\Windows\System\ovXnzJg.exe
  C:\Windows\System\ovXnzJg.exe
  2⤵
  PID:2484
- C:\Windows\System\mvjXFfw.exe
  C:\Windows\System\mvjXFfw.exe
  2⤵
  PID:2852
- C:\Windows\System\IGSKZph.exe
  C:\Windows\System\IGSKZph.exe
  2⤵
  PID:10088
- C:\Windows\System\LHFlRVO.exe
  C:\Windows\System\LHFlRVO.exe
  2⤵
  PID:10168
- C:\Windows\System\lUJdRZR.exe
  C:\Windows\System\lUJdRZR.exe
  2⤵
  PID:3980
- C:\Windows\System\CWhLAqI.exe
  C:\Windows\System\CWhLAqI.exe
  2⤵
  PID:8852
- C:\Windows\System\kjgEbuO.exe
  C:\Windows\System\kjgEbuO.exe
  2⤵
  PID:1332
- C:\Windows\System\lHDJYHW.exe
  C:\Windows\System\lHDJYHW.exe
  2⤵
  PID:2760
- C:\Windows\System\hqIxSxF.exe
  C:\Windows\System\hqIxSxF.exe
  2⤵
  PID:8540
- C:\Windows\System\CizxLmj.exe
  C:\Windows\System\CizxLmj.exe
  2⤵
  PID:4132
- C:\Windows\System\IWmulNa.exe
  C:\Windows\System\IWmulNa.exe
  2⤵
  PID:8816
- C:\Windows\System\XSNfbIH.exe
  C:\Windows\System\XSNfbIH.exe
  2⤵
  PID:9516
- C:\Windows\System\bbsobqy.exe
  C:\Windows\System\bbsobqy.exe
  2⤵
  PID:9676
- C:\Windows\System\vXSHDtG.exe
  C:\Windows\System\vXSHDtG.exe
  2⤵
  PID:9780
- C:\Windows\System\sazMdWi.exe
  C:\Windows\System\sazMdWi.exe
  2⤵
  PID:9732
- C:\Windows\System\LRydHEy.exe
  C:\Windows\System\LRydHEy.exe
  2⤵
  PID:9760
- C:\Windows\System\shscRaN.exe
  C:\Windows\System\shscRaN.exe
  2⤵
  PID:3692
- C:\Windows\System\CsoheOI.exe
  C:\Windows\System\CsoheOI.exe
  2⤵
  PID:3724
- C:\Windows\System\YFNzBEg.exe
  C:\Windows\System\YFNzBEg.exe
  2⤵
  PID:10208
- C:\Windows\System\gWKsOkp.exe
  C:\Windows\System\gWKsOkp.exe
  2⤵
  PID:2540
- C:\Windows\System\omcKbic.exe
  C:\Windows\System\omcKbic.exe
  2⤵
  PID:10072
- C:\Windows\System\yPhkovx.exe
  C:\Windows\System\yPhkovx.exe
  2⤵
  PID:9312
- C:\Windows\System\lrjXxSH.exe
  C:\Windows\System\lrjXxSH.exe
  2⤵
  PID:8420
- C:\Windows\System\yZZdIkC.exe
  C:\Windows\System\yZZdIkC.exe
  2⤵
  PID:3964
- C:\Windows\System\hubzkdQ.exe
  C:\Windows\System\hubzkdQ.exe
  2⤵
  PID:2876
- C:\Windows\System\sCrFcHP.exe
  C:\Windows\System\sCrFcHP.exe
  2⤵
  PID:5432
- C:\Windows\System\QqSrRFg.exe
  C:\Windows\System\QqSrRFg.exe
  2⤵
  PID:4424
- C:\Windows\System\hFwEUGm.exe
  C:\Windows\System\hFwEUGm.exe
  2⤵
  PID:9824
- C:\Windows\System\EOixxvW.exe
  C:\Windows\System\EOixxvW.exe
  2⤵
  PID:10160
- C:\Windows\System\sCSPttz.exe
  C:\Windows\System\sCSPttz.exe
  2⤵
  PID:9208
- C:\Windows\System\WBJJevn.exe
  C:\Windows\System\WBJJevn.exe
  2⤵
  PID:4452
- C:\Windows\System\rCkxRkV.exe
  C:\Windows\System\rCkxRkV.exe
  2⤵
  PID:9460
- C:\Windows\System\dwSKiNk.exe
  C:\Windows\System\dwSKiNk.exe
  2⤵
  PID:9540
- C:\Windows\System\VwfwhHu.exe
  C:\Windows\System\VwfwhHu.exe
  2⤵
  PID:9492
- C:\Windows\System\BjnqiYo.exe
  C:\Windows\System\BjnqiYo.exe
  2⤵
  PID:9868
- C:\Windows\System\BNsnKkG.exe
  C:\Windows\System\BNsnKkG.exe
  2⤵
  PID:2156
- C:\Windows\System\dmMxxNj.exe
  C:\Windows\System\dmMxxNj.exe
  2⤵
  PID:856
- C:\Windows\System\Xjuoabk.exe
  C:\Windows\System\Xjuoabk.exe
  2⤵
  PID:1404
- C:\Windows\System\QSPtOQx.exe
  C:\Windows\System\QSPtOQx.exe
  2⤵
  PID:10264
- C:\Windows\System\pMZVWGX.exe
  C:\Windows\System\pMZVWGX.exe
  2⤵
  PID:10280
- C:\Windows\System\wjxmIMK.exe
  C:\Windows\System\wjxmIMK.exe
  2⤵
  PID:10300
- C:\Windows\System\RwljWws.exe
  C:\Windows\System\RwljWws.exe
  2⤵
  PID:10388
- C:\Windows\System\TIfXDEx.exe
  C:\Windows\System\TIfXDEx.exe
  2⤵
  PID:10416
- C:\Windows\System\gbRMwFn.exe
  C:\Windows\System\gbRMwFn.exe
  2⤵
  PID:10432
- C:\Windows\System\jFcbPHG.exe
  C:\Windows\System\jFcbPHG.exe
  2⤵
  PID:10448
- C:\Windows\System\LXXRCot.exe
  C:\Windows\System\LXXRCot.exe
  2⤵
  PID:10476
- C:\Windows\System\kHAWcDo.exe
  C:\Windows\System\kHAWcDo.exe
  2⤵
  PID:10504
- C:\Windows\System\etjZvIj.exe
  C:\Windows\System\etjZvIj.exe
  2⤵
  PID:10536
- C:\Windows\System\dCtJusY.exe
  C:\Windows\System\dCtJusY.exe
  2⤵
  PID:10576
- C:\Windows\System\efJhuiu.exe
  C:\Windows\System\efJhuiu.exe
  2⤵
  PID:10604
- C:\Windows\System\qVKwkYy.exe
  C:\Windows\System\qVKwkYy.exe
  2⤵
  PID:10628
- C:\Windows\System\tNrpEqZ.exe
  C:\Windows\System\tNrpEqZ.exe
  2⤵
  PID:10652
- C:\Windows\System\VhZfwNV.exe
  C:\Windows\System\VhZfwNV.exe
  2⤵
  PID:10688
- C:\Windows\System\rkWKWdC.exe
  C:\Windows\System\rkWKWdC.exe
  2⤵
  PID:10720
- C:\Windows\System\ozSaGLQ.exe
  C:\Windows\System\ozSaGLQ.exe
  2⤵
  PID:10740
- C:\Windows\System\mmgaMPZ.exe
  C:\Windows\System\mmgaMPZ.exe
  2⤵
  PID:10768
- C:\Windows\System\YNEdKxN.exe
  C:\Windows\System\YNEdKxN.exe
  2⤵
  PID:10804
- C:\Windows\System\IUKoXXz.exe
  C:\Windows\System\IUKoXXz.exe
  2⤵
  PID:10820
- C:\Windows\System\VRREULy.exe
  C:\Windows\System\VRREULy.exe
  2⤵
  PID:10852
- C:\Windows\System\IsSHiMl.exe
  C:\Windows\System\IsSHiMl.exe
  2⤵
  PID:10880
- C:\Windows\System\guUqBAx.exe
  C:\Windows\System\guUqBAx.exe
  2⤵
  PID:10908
- C:\Windows\System\OixPORk.exe
  C:\Windows\System\OixPORk.exe
  2⤵
  PID:10928
- C:\Windows\System\lXtePXN.exe
  C:\Windows\System\lXtePXN.exe
  2⤵
  PID:10944
- C:\Windows\System\vaPfyTR.exe
  C:\Windows\System\vaPfyTR.exe
  2⤵
  PID:10972
- C:\Windows\System\jzfwoQZ.exe
  C:\Windows\System\jzfwoQZ.exe
  2⤵
  PID:10996
- C:\Windows\System\fqUEtIY.exe
  C:\Windows\System\fqUEtIY.exe
  2⤵
  PID:11024
- C:\Windows\System\WeOhDNV.exe
  C:\Windows\System\WeOhDNV.exe
  2⤵
  PID:11048
- C:\Windows\System\krtbBjj.exe
  C:\Windows\System\krtbBjj.exe
  2⤵
  PID:11068
- C:\Windows\System\FxNSVJC.exe
  C:\Windows\System\FxNSVJC.exe
  2⤵
  PID:11096
- C:\Windows\System\REUxYTz.exe
  C:\Windows\System\REUxYTz.exe
  2⤵
  PID:11112
- C:\Windows\System\Uckirho.exe
  C:\Windows\System\Uckirho.exe
  2⤵
  PID:11140
- C:\Windows\System\wGwXVYA.exe
  C:\Windows\System\wGwXVYA.exe
  2⤵
  PID:11172
- C:\Windows\System\OQkYBAT.exe
  C:\Windows\System\OQkYBAT.exe
  2⤵
  PID:11196
- C:\Windows\System\sAngnNQ.exe
  C:\Windows\System\sAngnNQ.exe
  2⤵
  PID:11220
- C:\Windows\System\rpoxAqa.exe
  C:\Windows\System\rpoxAqa.exe
  2⤵
  PID:11240
- C:\Windows\System\ccDDvHn.exe
  C:\Windows\System\ccDDvHn.exe
  2⤵
  PID:11256
- C:\Windows\System\KWmOVbv.exe
  C:\Windows\System\KWmOVbv.exe
  2⤵
  PID:10248
- C:\Windows\System\ZMtfGnP.exe
  C:\Windows\System\ZMtfGnP.exe
  2⤵
  PID:10276
- C:\Windows\System\WIcCnsX.exe
  C:\Windows\System\WIcCnsX.exe
  2⤵
  PID:10328
- C:\Windows\System\GtITocx.exe
  C:\Windows\System\GtITocx.exe
  2⤵
  PID:10396
- C:\Windows\System\feKngWf.exe
  C:\Windows\System\feKngWf.exe
  2⤵
  PID:10444
- C:\Windows\System\rBVeNOx.exe
  C:\Windows\System\rBVeNOx.exe
  2⤵
  PID:10516
- C:\Windows\System\rwwOjvn.exe
  C:\Windows\System\rwwOjvn.exe
  2⤵
  PID:10564
- C:\Windows\System\reIiDLK.exe
  C:\Windows\System\reIiDLK.exe
  2⤵
  PID:10648
- C:\Windows\System\IezbSKC.exe
  C:\Windows\System\IezbSKC.exe
  2⤵
  PID:10700
- C:\Windows\System\bJFKmwn.exe
  C:\Windows\System\bJFKmwn.exe
  2⤵
  PID:10756
- C:\Windows\System\GYyjpiv.exe
  C:\Windows\System\GYyjpiv.exe
  2⤵
  PID:3472
- C:\Windows\System\qTylgOG.exe
  C:\Windows\System\qTylgOG.exe
  2⤵
  PID:10836
- C:\Windows\System\pzYPcFe.exe
  C:\Windows\System\pzYPcFe.exe
  2⤵
  PID:1140
- C:\Windows\System\mzJgahd.exe
  C:\Windows\System\mzJgahd.exe
  2⤵
  PID:10360
- C:\Windows\System\LhRGxuM.exe
  C:\Windows\System\LhRGxuM.exe
  2⤵
  PID:11012
- C:\Windows\System\QSqEYEF.exe
  C:\Windows\System\QSqEYEF.exe
  2⤵
  PID:4564
- C:\Windows\System\TTbKSrH.exe
  C:\Windows\System\TTbKSrH.exe
  2⤵
  PID:11136
- C:\Windows\System\VTkljXE.exe
  C:\Windows\System\VTkljXE.exe
  2⤵
  PID:11228
- C:\Windows\System\jcutJHD.exe
  C:\Windows\System\jcutJHD.exe
  2⤵
  PID:11188
- C:\Windows\System\fgckksp.exe
  C:\Windows\System\fgckksp.exe
  2⤵
  PID:10500
- C:\Windows\System\mvoNJhJ.exe
  C:\Windows\System\mvoNJhJ.exe
  2⤵
  PID:10376
- C:\Windows\System\vBFmrnl.exe
  C:\Windows\System\vBFmrnl.exe
  2⤵
  PID:10528
- C:\Windows\System\szoffkL.exe
  C:\Windows\System\szoffkL.exe
  2⤵
  PID:10424
- C:\Windows\System\iyMQPoM.exe
  C:\Windows\System\iyMQPoM.exe
  2⤵
  PID:10520
- C:\Windows\System\TUzZhvQ.exe
  C:\Windows\System\TUzZhvQ.exe
  2⤵
  PID:10776
- C:\Windows\System\NGVlvqw.exe
  C:\Windows\System\NGVlvqw.exe
  2⤵
  PID:2892
- C:\Windows\System\YtsMMGF.exe
  C:\Windows\System\YtsMMGF.exe
  2⤵
  PID:10244
- C:\Windows\System\MdUMQfn.exe
  C:\Windows\System\MdUMQfn.exe
  2⤵
  PID:10680
- C:\Windows\System\dVgxjRN.exe
  C:\Windows\System\dVgxjRN.exe
  2⤵
  PID:11284
- C:\Windows\System\OaAEJoF.exe
  C:\Windows\System\OaAEJoF.exe
  2⤵
  PID:11308
- C:\Windows\System\qoCKCvG.exe
  C:\Windows\System\qoCKCvG.exe
  2⤵
  PID:11332
- C:\Windows\System\rZduzcy.exe
  C:\Windows\System\rZduzcy.exe
  2⤵
  PID:11424
- C:\Windows\System\TyXlfrN.exe
  C:\Windows\System\TyXlfrN.exe
  2⤵
  PID:11444
- C:\Windows\System\XXtbEmI.exe
  C:\Windows\System\XXtbEmI.exe
  2⤵
  PID:11468
- C:\Windows\System\ZBcjWaE.exe
  C:\Windows\System\ZBcjWaE.exe
  2⤵
  PID:11524
- C:\Windows\System\MdALoFC.exe
  C:\Windows\System\MdALoFC.exe
  2⤵
  PID:11544
- C:\Windows\System\tZxqftl.exe
  C:\Windows\System\tZxqftl.exe
  2⤵
  PID:11584
- C:\Windows\System\DmEbuxQ.exe
  C:\Windows\System\DmEbuxQ.exe
  2⤵
  PID:11608
- C:\Windows\System\bLAlIrz.exe
  C:\Windows\System\bLAlIrz.exe
  2⤵
  PID:11628
- C:\Windows\System\oigUyvS.exe
  C:\Windows\System\oigUyvS.exe
  2⤵
  PID:11652
- C:\Windows\System\chnbKCk.exe
  C:\Windows\System\chnbKCk.exe
  2⤵
  PID:11708
- C:\Windows\System\oXGoQwR.exe
  C:\Windows\System\oXGoQwR.exe
  2⤵
  PID:11772
- C:\Windows\System\yXCGhye.exe
  C:\Windows\System\yXCGhye.exe
  2⤵
  PID:11804
- C:\Windows\System\KDmfGsf.exe
  C:\Windows\System\KDmfGsf.exe
  2⤵
  PID:11916
- C:\Windows\System\gIsNWHg.exe
  C:\Windows\System\gIsNWHg.exe
  2⤵
  PID:11932
- C:\Windows\System\VdsqCbq.exe
  C:\Windows\System\VdsqCbq.exe
  2⤵
  PID:11952
- C:\Windows\System\zRknNTO.exe
  C:\Windows\System\zRknNTO.exe
  2⤵
  PID:11968
- C:\Windows\System\hYuZJqm.exe
  C:\Windows\System\hYuZJqm.exe
  2⤵
  PID:11984
- C:\Windows\System\saKAfnk.exe
  C:\Windows\System\saKAfnk.exe
  2⤵
  PID:12008
- C:\Windows\System\uqdLWQI.exe
  C:\Windows\System\uqdLWQI.exe
  2⤵
  PID:12036
- C:\Windows\System\NvStWdl.exe
  C:\Windows\System\NvStWdl.exe
  2⤵
  PID:12072
- C:\Windows\System\iZCZhZd.exe
  C:\Windows\System\iZCZhZd.exe
  2⤵
  PID:12096
- C:\Windows\System\xNElOwR.exe
  C:\Windows\System\xNElOwR.exe
  2⤵
  PID:12120
- C:\Windows\System\GNmLdAR.exe
  C:\Windows\System\GNmLdAR.exe
  2⤵
  PID:12140
- C:\Windows\System\LltEGZb.exe
  C:\Windows\System\LltEGZb.exe
  2⤵
  PID:12164
- C:\Windows\System\AWGgWXy.exe
  C:\Windows\System\AWGgWXy.exe
  2⤵
  PID:12232
- C:\Windows\System\rTMpQdH.exe
  C:\Windows\System\rTMpQdH.exe
  2⤵
  PID:12248
- C:\Windows\System\TgXySsY.exe
  C:\Windows\System\TgXySsY.exe
  2⤵
  PID:12268
- C:\Windows\System\BCiCHPi.exe
  C:\Windows\System\BCiCHPi.exe
  2⤵
  PID:4864
- C:\Windows\System\kBgopnl.exe
  C:\Windows\System\kBgopnl.exe
  2⤵
  PID:4092
- C:\Windows\System\vwHLYsX.exe
  C:\Windows\System\vwHLYsX.exe
  2⤵
  PID:3904
- C:\Windows\System\viVgySq.exe
  C:\Windows\System\viVgySq.exe
  2⤵
  PID:10572
- C:\Windows\System\OTDTwIk.exe
  C:\Windows\System\OTDTwIk.exe
  2⤵
  PID:11304
- C:\Windows\System\ZlxbMWl.exe
  C:\Windows\System\ZlxbMWl.exe
  2⤵
  PID:11456
- C:\Windows\System\HZvZDXs.exe
  C:\Windows\System\HZvZDXs.exe
  2⤵
  PID:11432
- C:\Windows\System\LXlMCdx.exe
  C:\Windows\System\LXlMCdx.exe
  2⤵
  PID:4480
- C:\Windows\System\ePwdxJo.exe
  C:\Windows\System\ePwdxJo.exe
  2⤵
  PID:11568
- C:\Windows\System\HCPTDfQ.exe
  C:\Windows\System\HCPTDfQ.exe
  2⤵
  PID:11636
- C:\Windows\System\aBFCsfP.exe
  C:\Windows\System\aBFCsfP.exe
  2⤵
  PID:11704
- C:\Windows\System\sGhEmwR.exe
  C:\Windows\System\sGhEmwR.exe
  2⤵
  PID:11792
- C:\Windows\System\etExTDD.exe
  C:\Windows\System\etExTDD.exe
  2⤵
  PID:10828
- C:\Windows\System\ycVFpaJ.exe
  C:\Windows\System\ycVFpaJ.exe
  2⤵
  PID:5532
- C:\Windows\System\GncqgVp.exe
  C:\Windows\System\GncqgVp.exe
  2⤵
  PID:5748
- C:\Windows\System\ABlspBU.exe
  C:\Windows\System\ABlspBU.exe
  2⤵
  PID:5932
- C:\Windows\System\RWrIpEn.exe
  C:\Windows\System\RWrIpEn.exe
  2⤵
  PID:5072
- C:\Windows\System\HKNSTml.exe
  C:\Windows\System\HKNSTml.exe
  2⤵
  PID:6000
- C:\Windows\System\hfxmgop.exe
  C:\Windows\System\hfxmgop.exe
  2⤵
  PID:11184
- C:\Windows\System\VQaBotg.exe
  C:\Windows\System\VQaBotg.exe
  2⤵
  PID:3820
- C:\Windows\System\MKJSawR.exe
  C:\Windows\System\MKJSawR.exe
  2⤵
  PID:5832
- C:\Windows\System\fxwExPV.exe
  C:\Windows\System\fxwExPV.exe
  2⤵
  PID:5868
- C:\Windows\System\vxJAhFQ.exe
  C:\Windows\System\vxJAhFQ.exe
  2⤵
  PID:5608
- C:\Windows\System\iTljVGb.exe
  C:\Windows\System\iTljVGb.exe
  2⤵
  PID:112
- C:\Windows\System\pAyfUNO.exe
  C:\Windows\System\pAyfUNO.exe
  2⤵
  PID:5284
- C:\Windows\System\gkyVDfV.exe
  C:\Windows\System\gkyVDfV.exe
  2⤵
  PID:3460
- C:\Windows\System\iRvbipf.exe
  C:\Windows\System\iRvbipf.exe
  2⤵
  PID:2816
- C:\Windows\System\ajYeAiE.exe
  C:\Windows\System\ajYeAiE.exe
  2⤵
  PID:1124
- C:\Windows\System\PNSQIhw.exe
  C:\Windows\System\PNSQIhw.exe
  2⤵
  PID:5408
- C:\Windows\System\hOhhwWo.exe
  C:\Windows\System\hOhhwWo.exe
  2⤵
  PID:5184
- C:\Windows\System\XKwyIjN.exe
  C:\Windows\System\XKwyIjN.exe
  2⤵
  PID:3852
- C:\Windows\System\vYtiFJa.exe
  C:\Windows\System\vYtiFJa.exe
  2⤵
  PID:11416
- C:\Windows\System\eGjYdoJ.exe
  C:\Windows\System\eGjYdoJ.exe
  2⤵
  PID:5352
- C:\Windows\System\RagJiGn.exe
  C:\Windows\System\RagJiGn.exe
  2⤵
  PID:5600
- C:\Windows\System\xXkXjbW.exe
  C:\Windows\System\xXkXjbW.exe
  2⤵
  PID:11964
- C:\Windows\System\LgdQMOu.exe
  C:\Windows\System\LgdQMOu.exe
  2⤵
  PID:11380
- C:\Windows\System\YbMoOoR.exe
  C:\Windows\System\YbMoOoR.exe
  2⤵
  PID:5660
- C:\Windows\System\JZCAiAU.exe
  C:\Windows\System\JZCAiAU.exe
  2⤵
  PID:5712
- C:\Windows\System\IUltPWA.exe
  C:\Windows\System\IUltPWA.exe
  2⤵
  PID:11508
- C:\Windows\System\hGaxvMi.exe
  C:\Windows\System\hGaxvMi.exe
  2⤵
  PID:11388
- C:\Windows\System\TArpnwp.exe
  C:\Windows\System\TArpnwp.exe
  2⤵
  PID:5740
- C:\Windows\System\DWuSPmR.exe
  C:\Windows\System\DWuSPmR.exe
  2⤵
  PID:12260
- C:\Windows\System\ZgBaSaB.exe
  C:\Windows\System\ZgBaSaB.exe
  2⤵
  PID:5796
- C:\Windows\System\CKRyRzD.exe
  C:\Windows\System\CKRyRzD.exe
  2⤵
  PID:12280
- C:\Windows\System\UHVeSnj.exe
  C:\Windows\System\UHVeSnj.exe
  2⤵
  PID:9292
- C:\Windows\System\amWpBpm.exe
  C:\Windows\System\amWpBpm.exe
  2⤵
  PID:11156
- C:\Windows\System\AbmRcLS.exe
  C:\Windows\System\AbmRcLS.exe
  2⤵
  PID:11276
- C:\Windows\System\skWCowb.exe
  C:\Windows\System\skWCowb.exe
  2⤵
  PID:1100
- C:\Windows\System\ZbZBuQM.exe
  C:\Windows\System\ZbZBuQM.exe
  2⤵
  PID:11520
- C:\Windows\System\wNOubUd.exe
  C:\Windows\System\wNOubUd.exe
  2⤵
  PID:11560
- C:\Windows\System\bpxcjtR.exe
  C:\Windows\System\bpxcjtR.exe
  2⤵
  PID:5948
- C:\Windows\System\vfYNzRY.exe
  C:\Windows\System\vfYNzRY.exe
  2⤵
  PID:3896
- C:\Windows\System\cQHumvR.exe
  C:\Windows\System\cQHumvR.exe
  2⤵
  PID:4704
- C:\Windows\System\ZbOCppu.exe
  C:\Windows\System\ZbOCppu.exe
  2⤵
  PID:5952
- C:\Windows\System\MadDMhj.exe
  C:\Windows\System\MadDMhj.exe
  2⤵
  PID:4548
- C:\Windows\System\wNcHXXL.exe
  C:\Windows\System\wNcHXXL.exe
  2⤵
  PID:6132
- C:\Windows\System\FzdVLRM.exe
  C:\Windows\System\FzdVLRM.exe
  2⤵
  PID:696
- C:\Windows\System\RFbsHxV.exe
  C:\Windows\System\RFbsHxV.exe
  2⤵
  PID:3364
- C:\Windows\System\riENdgj.exe
  C:\Windows\System\riENdgj.exe
  2⤵
  PID:3780
- C:\Windows\System\FdHsDHW.exe
  C:\Windows\System\FdHsDHW.exe
  2⤵
  PID:5192
- C:\Windows\System\reNLquP.exe
  C:\Windows\System\reNLquP.exe
  2⤵
  PID:5604
- C:\Windows\System\THqBpKT.exe
  C:\Windows\System\THqBpKT.exe
  2⤵
  PID:8536
- C:\Windows\System\NJElPHd.exe
  C:\Windows\System\NJElPHd.exe
  2⤵
  PID:12020
- C:\Windows\System\ITWmFOT.exe
  C:\Windows\System\ITWmFOT.exe
  2⤵
  PID:12224
- C:\Windows\System\HpWrOsk.exe
  C:\Windows\System\HpWrOsk.exe
  2⤵
  PID:3884
- C:\Windows\System\wwVRDGn.exe
  C:\Windows\System\wwVRDGn.exe
  2⤵
  PID:8292
- C:\Windows\System\HubKUcW.exe
  C:\Windows\System\HubKUcW.exe
  2⤵
  PID:9652
- C:\Windows\System\LwBykVr.exe
  C:\Windows\System\LwBykVr.exe
  2⤵
  PID:7396
- C:\Windows\System\gvZlhmA.exe
  C:\Windows\System\gvZlhmA.exe
  2⤵
  PID:3944
- C:\Windows\System\kEbqqKm.exe
  C:\Windows\System\kEbqqKm.exe
  2⤵
  PID:6092
- C:\Windows\System\ReaKVtN.exe
  C:\Windows\System\ReaKVtN.exe
  2⤵
  PID:2284
- C:\Windows\System\PMgzgXW.exe
  C:\Windows\System\PMgzgXW.exe
  2⤵
  PID:5908
- C:\Windows\System\SuJmJlN.exe
  C:\Windows\System\SuJmJlN.exe
  2⤵
  PID:3484
- C:\Windows\System\tbtJmBY.exe
  C:\Windows\System\tbtJmBY.exe
  2⤵
  PID:5420
- C:\Windows\System\TyjUNtK.exe
  C:\Windows\System\TyjUNtK.exe
  2⤵
  PID:6152
- C:\Windows\System\nZQYqJO.exe
  C:\Windows\System\nZQYqJO.exe
  2⤵
  PID:11292
- C:\Windows\System\ERYPjvi.exe
  C:\Windows\System\ERYPjvi.exe
  2⤵
  PID:11492
- C:\Windows\System\wZnSNua.exe
  C:\Windows\System\wZnSNua.exe
  2⤵
  PID:6264
- C:\Windows\System\ZALbevT.exe
  C:\Windows\System\ZALbevT.exe
  2⤵
  PID:6344
- C:\Windows\System\gARehvj.exe
  C:\Windows\System\gARehvj.exe
  2⤵
  PID:12264
- C:\Windows\System\QdXPoFT.exe
  C:\Windows\System\QdXPoFT.exe
  2⤵
  PID:6412
- C:\Windows\System\JWuSWFJ.exe
  C:\Windows\System\JWuSWFJ.exe
  2⤵
  PID:6460
- C:\Windows\System\XRBSWFj.exe
  C:\Windows\System\XRBSWFj.exe
  2⤵
  PID:11960
- C:\Windows\System\JWBfeJK.exe
  C:\Windows\System\JWBfeJK.exe
  2⤵
  PID:11352
- C:\Windows\System\EqEVNPt.exe
  C:\Windows\System\EqEVNPt.exe
  2⤵
  PID:11440
- C:\Windows\System\YvnLDug.exe
  C:\Windows\System\YvnLDug.exe
  2⤵
  PID:5880
- C:\Windows\System\YzNEwGN.exe
  C:\Windows\System\YzNEwGN.exe
  2⤵
  PID:6496
- C:\Windows\System\edjBZSQ.exe
  C:\Windows\System\edjBZSQ.exe
  2⤵
  PID:4292
- C:\Windows\System\oEIaVjG.exe
  C:\Windows\System\oEIaVjG.exe
  2⤵
  PID:12292
- C:\Windows\System\asmzJBF.exe
  C:\Windows\System\asmzJBF.exe
  2⤵
  PID:12328
- C:\Windows\System\RJlhXio.exe
  C:\Windows\System\RJlhXio.exe
  2⤵
  PID:12364
- C:\Windows\System\ahGQYcz.exe
  C:\Windows\System\ahGQYcz.exe
  2⤵
  PID:12392
- C:\Windows\System\ltfobuP.exe
  C:\Windows\System\ltfobuP.exe
  2⤵
  PID:12412
- C:\Windows\System\kFlivoX.exe
  C:\Windows\System\kFlivoX.exe
  2⤵
  PID:12436
- C:\Windows\System\kUkaaDn.exe
  C:\Windows\System\kUkaaDn.exe
  2⤵
  PID:12460
- C:\Windows\System\wZwuxKq.exe
  C:\Windows\System\wZwuxKq.exe
  2⤵
  PID:12496
- C:\Windows\System\tmgzmbx.exe
  C:\Windows\System\tmgzmbx.exe
  2⤵
  PID:12532
- C:\Windows\System\aUXoSDX.exe
  C:\Windows\System\aUXoSDX.exe
  2⤵
  PID:12560
- C:\Windows\System\IHkOoyG.exe
  C:\Windows\System\IHkOoyG.exe
  2⤵
  PID:12592
- C:\Windows\System\NXUBuXE.exe
  C:\Windows\System\NXUBuXE.exe
  2⤵
  PID:12620
- C:\Windows\System\xJiOAMO.exe
  C:\Windows\System\xJiOAMO.exe
  2⤵
  PID:12644
- C:\Windows\System\GvGFnQT.exe
  C:\Windows\System\GvGFnQT.exe
  2⤵
  PID:12664
- C:\Windows\System\iqhLRfP.exe
  C:\Windows\System\iqhLRfP.exe
  2⤵
  PID:12704
- C:\Windows\System\HGQeyXt.exe
  C:\Windows\System\HGQeyXt.exe
  2⤵
  PID:12740
- C:\Windows\System\DMvNnVC.exe
  C:\Windows\System\DMvNnVC.exe
  2⤵
  PID:12776
- C:\Windows\System\YzrmltI.exe
  C:\Windows\System\YzrmltI.exe
  2⤵
  PID:12808
- C:\Windows\System\YpemaQW.exe
  C:\Windows\System\YpemaQW.exe
  2⤵
  PID:12828
- C:\Windows\System\dCFfTUy.exe
  C:\Windows\System\dCFfTUy.exe
  2⤵
  PID:12852
- C:\Windows\System\PbPqRXN.exe
  C:\Windows\System\PbPqRXN.exe
  2⤵
  PID:12880
- C:\Windows\System\YYoTpTs.exe
  C:\Windows\System\YYoTpTs.exe
  2⤵
  PID:12912
- C:\Windows\System\lUcUZiR.exe
  C:\Windows\System\lUcUZiR.exe
  2⤵
  PID:12940
- C:\Windows\System\IgfPVIX.exe
  C:\Windows\System\IgfPVIX.exe
  2⤵
  PID:12960
- C:\Windows\System\CIBISQy.exe
  C:\Windows\System\CIBISQy.exe
  2⤵
  PID:12984
- C:\Windows\System\bjkybeb.exe
  C:\Windows\System\bjkybeb.exe
  2⤵
  PID:13012
- C:\Windows\System\ZUynJUc.exe
  C:\Windows\System\ZUynJUc.exe
  2⤵
  PID:13036
- C:\Windows\System\tNBbAxn.exe
  C:\Windows\System\tNBbAxn.exe
  2⤵
  PID:13072
- C:\Windows\System\EFPhJwi.exe
  C:\Windows\System\EFPhJwi.exe
  2⤵
  PID:13096
- C:\Windows\System\oBujetg.exe
  C:\Windows\System\oBujetg.exe
  2⤵
  PID:13128
- C:\Windows\System\mCOANdO.exe
  C:\Windows\System\mCOANdO.exe
  2⤵
  PID:13172
- C:\Windows\System\afgCFjT.exe
  C:\Windows\System\afgCFjT.exe
  2⤵
  PID:13200
- C:\Windows\System\nkOnwTo.exe
  C:\Windows\System\nkOnwTo.exe
  2⤵
  PID:13224
- C:\Windows\System\KpORMXZ.exe
  C:\Windows\System\KpORMXZ.exe
  2⤵
  PID:13256
- C:\Windows\System\vOxVNpz.exe
  C:\Windows\System\vOxVNpz.exe
  2⤵
  PID:13280
- C:\Windows\System\iGyypgr.exe
  C:\Windows\System\iGyypgr.exe
  2⤵
  PID:13308
- C:\Windows\System\LuRJnwx.exe
  C:\Windows\System\LuRJnwx.exe
  2⤵
  PID:6236
- C:\Windows\System\pPTBMnT.exe
  C:\Windows\System\pPTBMnT.exe
  2⤵
  PID:12300
- C:\Windows\System\AATvozT.exe
  C:\Windows\System\AATvozT.exe
  2⤵
  PID:12380
- C:\Windows\System\NNeyRkc.exe
  C:\Windows\System\NNeyRkc.exe
  2⤵
  PID:12400
- C:\Windows\System\rckmoff.exe
  C:\Windows\System\rckmoff.exe
  2⤵
  PID:12340
- C:\Windows\System\zFxhZCx.exe
  C:\Windows\System\zFxhZCx.exe
  2⤵
  PID:12472
- C:\Windows\System\BEfEahq.exe
  C:\Windows\System\BEfEahq.exe
  2⤵
  PID:12528
- C:\Windows\System\cksGNTh.exe
  C:\Windows\System\cksGNTh.exe
  2⤵
  PID:12632
- C:\Windows\System\gmEPzxD.exe
  C:\Windows\System\gmEPzxD.exe
  2⤵
  PID:12604
- C:\Windows\System\DaGhljk.exe
  C:\Windows\System\DaGhljk.exe
  2⤵
  PID:7132
- C:\Windows\System\kKzwpuz.exe
  C:\Windows\System\kKzwpuz.exe
  2⤵
  PID:5560
- C:\Windows\System\qkAzOmJ.exe
  C:\Windows\System\qkAzOmJ.exe
  2⤵
  PID:12796
- C:\Windows\System\UWVVFnO.exe
  C:\Windows\System\UWVVFnO.exe
  2⤵
  PID:12908
- C:\Windows\System\YQYhAWj.exe
  C:\Windows\System\YQYhAWj.exe
  2⤵
  PID:6376
- C:\Windows\System\TvuSUfm.exe
  C:\Windows\System\TvuSUfm.exe
  2⤵
  PID:12972
- C:\Windows\System\LXESiZT.exe
  C:\Windows\System\LXESiZT.exe
  2⤵
  PID:13004
- C:\Windows\System\JwHhkwX.exe
  C:\Windows\System\JwHhkwX.exe
  2⤵
  PID:6668
- C:\Windows\System\dNVTKnh.exe
  C:\Windows\System\dNVTKnh.exe
  2⤵
  PID:13152
- C:\Windows\System\ATkNKTW.exe
  C:\Windows\System\ATkNKTW.exe
  2⤵
  PID:13092
- C:\Windows\System\nVWTSyL.exe
  C:\Windows\System\nVWTSyL.exe
  2⤵
  PID:6840
- C:\Windows\System\RsMMiRf.exe
  C:\Windows\System\RsMMiRf.exe
  2⤵
  PID:13268
- C:\Windows\System\NndXQuV.exe
  C:\Windows\System\NndXQuV.exe
  2⤵
  PID:13252
- C:\Windows\System\VuuMtCH.exe
  C:\Windows\System\VuuMtCH.exe
  2⤵
  PID:3332
- C:\Windows\System\rMxzuSd.exe
  C:\Windows\System\rMxzuSd.exe
  2⤵
  PID:6328
- C:\Windows\System\wdUEUyH.exe
  C:\Windows\System\wdUEUyH.exe
  2⤵
  PID:6784
- C:\Windows\System\dANqTyJ.exe
  C:\Windows\System\dANqTyJ.exe
  2⤵
  PID:12456
- C:\Windows\System\uWUeuRq.exe
  C:\Windows\System\uWUeuRq.exe
  2⤵
  PID:8504
- C:\Windows\System\KyIqpLb.exe
  C:\Windows\System\KyIqpLb.exe
  2⤵
  PID:6992
- C:\Windows\System\AZVjSeu.exe
  C:\Windows\System\AZVjSeu.exe
  2⤵
  PID:6492
- C:\Windows\System\FxcPpVJ.exe
  C:\Windows\System\FxcPpVJ.exe
  2⤵
  PID:7200
- C:\Windows\System\XwULKnj.exe
  C:\Windows\System\XwULKnj.exe
  2⤵
  PID:13048
- C:\Windows\System\HUGLHlO.exe
  C:\Windows\System\HUGLHlO.exe
  2⤵
  PID:6548
- C:\Windows\System\FApkfYc.exe
  C:\Windows\System\FApkfYc.exe
  2⤵
  PID:13216
- C:\Windows\System\qGeWHDX.exe
  C:\Windows\System\qGeWHDX.exe
  2⤵
  PID:13288
- C:\Windows\System\yIJuPlU.exe
  C:\Windows\System\yIJuPlU.exe
  2⤵
  PID:12580
- C:\Windows\System\HMkiZqR.exe
  C:\Windows\System\HMkiZqR.exe
  2⤵
  PID:12872
- C:\Windows\System\xonfued.exe
  C:\Windows\System\xonfued.exe
  2⤵
  PID:12764
- C:\Windows\System\FKkwdbH.exe
  C:\Windows\System\FKkwdbH.exe
  2⤵
  PID:12980
- C:\Windows\System\aZwHWNn.exe
  C:\Windows\System\aZwHWNn.exe
  2⤵
  PID:13032
- C:\Windows\System\tDhvnzm.exe
  C:\Windows\System\tDhvnzm.exe
  2⤵
  PID:7376
- C:\Windows\System\CFtYXKu.exe
  C:\Windows\System\CFtYXKu.exe
  2⤵
  PID:6836
- C:\Windows\System\zVfCRhl.exe
  C:\Windows\System\zVfCRhl.exe
  2⤵
  PID:4508
- C:\Windows\System\OWLmrPL.exe
  C:\Windows\System\OWLmrPL.exe
  2⤵
  PID:7628
- C:\Windows\System\giOovqz.exe
  C:\Windows\System\giOovqz.exe
  2⤵
  PID:12952
- C:\Windows\System\nsiGXRP.exe
  C:\Windows\System\nsiGXRP.exe
  2⤵
  PID:5388
- C:\Windows\System\RxJZHvE.exe
  C:\Windows\System\RxJZHvE.exe
  2⤵
  PID:13316
- C:\Windows\System\eUqGfPq.exe
  C:\Windows\System\eUqGfPq.exe
  2⤵
  PID:13344
- C:\Windows\System\pzmRsHt.exe
  C:\Windows\System\pzmRsHt.exe
  2⤵
  PID:13364
- C:\Windows\System\uwJeRZt.exe
  C:\Windows\System\uwJeRZt.exe
  2⤵
  PID:13380
- C:\Windows\System\QhRweKE.exe
  C:\Windows\System\QhRweKE.exe
  2⤵
  PID:13400
- C:\Windows\System\zPpmRPn.exe
  C:\Windows\System\zPpmRPn.exe
  2⤵
  PID:13424
- C:\Windows\System\CznkSdJ.exe
  C:\Windows\System\CznkSdJ.exe
  2⤵
  PID:13448
- C:\Windows\System\jqcKCXM.exe
  C:\Windows\System\jqcKCXM.exe
  2⤵
  PID:13484
- C:\Windows\System\XyowrHt.exe
  C:\Windows\System\XyowrHt.exe
  2⤵
  PID:13508
- C:\Windows\System\iSHWhTJ.exe
  C:\Windows\System\iSHWhTJ.exe
  2⤵
  PID:13524
- C:\Windows\System\xglGTke.exe
  C:\Windows\System\xglGTke.exe
  2⤵
  PID:13608
- C:\Windows\System\vJXsJBZ.exe
  C:\Windows\System\vJXsJBZ.exe
  2⤵
  PID:13656
- C:\Windows\System\aJDskxE.exe
  C:\Windows\System\aJDskxE.exe
  2⤵
  PID:13684
- C:\Windows\System\oIqzBzO.exe
  C:\Windows\System\oIqzBzO.exe
  2⤵
  PID:13704
- C:\Windows\System\avcpZMF.exe
  C:\Windows\System\avcpZMF.exe
  2⤵
  PID:13760
- C:\Windows\System\ZldbRsk.exe
  C:\Windows\System\ZldbRsk.exe
  2⤵
  PID:13796
- C:\Windows\System\UkhowKJ.exe
  C:\Windows\System\UkhowKJ.exe
  2⤵
  PID:14168
- C:\Windows\System\HgIBjJf.exe
  C:\Windows\System\HgIBjJf.exe
  2⤵
  PID:13464
- C:\Windows\System\OjVFSgM.exe
  C:\Windows\System\OjVFSgM.exe
  2⤵
  PID:13420
- C:\Windows\System\xToObAC.exe
  C:\Windows\System\xToObAC.exe
  2⤵
  PID:8408
- C:\Windows\System\tnMCOTO.exe
  C:\Windows\System\tnMCOTO.exe
  2⤵
  PID:13576
- C:\Windows\System\mrbVVsc.exe
  C:\Windows\System\mrbVVsc.exe
  2⤵
  PID:13756
- C:\Windows\System\xsSpWWb.exe
  C:\Windows\System\xsSpWWb.exe
  2⤵
  PID:13808
- C:\Windows\System\QEtuEVb.exe
  C:\Windows\System\QEtuEVb.exe
  2⤵
  PID:13836
- C:\Windows\System\EGOBoCB.exe
  C:\Windows\System\EGOBoCB.exe
  2⤵
  PID:13876
- C:\Windows\System\rvxaLCC.exe
  C:\Windows\System\rvxaLCC.exe
  2⤵
  PID:13888
- C:\Windows\System\OzRylJJ.exe
  C:\Windows\System\OzRylJJ.exe
  2⤵
  PID:5056
- C:\Windows\System\XZWmDGH.exe
  C:\Windows\System\XZWmDGH.exe
  2⤵
  PID:8848
- C:\Windows\System\dNRIuTe.exe
  C:\Windows\System\dNRIuTe.exe
  2⤵
  PID:13948
- C:\Windows\System\segLSQz.exe
  C:\Windows\System\segLSQz.exe
  2⤵
  PID:13964
- C:\Windows\System\TaXzfMk.exe
  C:\Windows\System\TaXzfMk.exe
  2⤵
  PID:13984
- C:\Windows\System\PCmYWTg.exe
  C:\Windows\System\PCmYWTg.exe
  2⤵
  PID:14008
- C:\Windows\System\ZdcvXar.exe
  C:\Windows\System\ZdcvXar.exe
  2⤵
  PID:14032
- C:\Windows\System\rKrKBEv.exe
  C:\Windows\System\rKrKBEv.exe
  2⤵
  PID:14120
- C:\Windows\System\EoJsHJi.exe
  C:\Windows\System\EoJsHJi.exe
  2⤵
  PID:14144
- C:\Windows\System\fXdTVIL.exe
  C:\Windows\System\fXdTVIL.exe
  2⤵
  PID:14180
- C:\Windows\System\Mlijlgd.exe
  C:\Windows\System\Mlijlgd.exe
  2⤵
  PID:14212
- C:\Windows\System\BfCEyfX.exe
  C:\Windows\System\BfCEyfX.exe
  2⤵
  PID:14072
- C:\Windows\System\cfQRirG.exe
  C:\Windows\System\cfQRirG.exe
  2⤵
  PID:14252
- C:\Windows\System\NKvpiIG.exe
  C:\Windows\System\NKvpiIG.exe
  2⤵
  PID:14268
- C:\Windows\System\HrFFAlC.exe
  C:\Windows\System\HrFFAlC.exe
  2⤵
  PID:14284
- C:\Windows\System\shohbnc.exe
  C:\Windows\System\shohbnc.exe
  2⤵
  PID:2916
- C:\Windows\System\QhLIkko.exe
  C:\Windows\System\QhLIkko.exe
  2⤵
  PID:13084
- C:\Windows\System\FNlFCTb.exe
  C:\Windows\System\FNlFCTb.exe
  2⤵
  PID:5692
- C:\Windows\System\imXMahq.exe
  C:\Windows\System\imXMahq.exe
  2⤵
  PID:1240
- C:\Windows\System\iAyXuRV.exe
  C:\Windows\System\iAyXuRV.exe
  2⤵
  PID:14288
- C:\Windows\System\LpBsLoR.exe
  C:\Windows\System\LpBsLoR.exe
  2⤵
  PID:13500
- C:\Windows\System\nARdjAP.exe
  C:\Windows\System\nARdjAP.exe
  2⤵
  PID:13548
- C:\Windows\System\JjFMMpL.exe
  C:\Windows\System\JjFMMpL.exe
  2⤵
  PID:5696
- C:\Windows\System\VKxKjsT.exe
  C:\Windows\System\VKxKjsT.exe
  2⤵
  PID:13592
- C:\Windows\System\OhcLINU.exe
  C:\Windows\System\OhcLINU.exe
  2⤵
  PID:13532
- C:\Windows\System\fMCTqIQ.exe
  C:\Windows\System\fMCTqIQ.exe
  2⤵
  PID:13620
- C:\Windows\System\kXHJdTL.exe
  C:\Windows\System\kXHJdTL.exe
  2⤵
  PID:10096
- C:\Windows\System\lPXPoob.exe
  C:\Windows\System\lPXPoob.exe
  2⤵
  PID:1408
- C:\Windows\System\jLaKDAj.exe
  C:\Windows\System\jLaKDAj.exe
  2⤵
  PID:13748
- C:\Windows\System\YBTubHT.exe
  C:\Windows\System\YBTubHT.exe
  2⤵
  PID:13852
- C:\Windows\System\ngtLkPP.exe
  C:\Windows\System\ngtLkPP.exe
  2⤵
  PID:14028
- C:\Windows\System\IMoeIGW.exe
  C:\Windows\System\IMoeIGW.exe
  2⤵
  PID:8436
- C:\Windows\System\NOdLCzP.exe
  C:\Windows\System\NOdLCzP.exe
  2⤵
  PID:14148
- C:\Windows\System\RkrWZKc.exe
  C:\Windows\System\RkrWZKc.exe
  2⤵
  PID:14228
- C:\Windows\System\WCrKBNy.exe
  C:\Windows\System\WCrKBNy.exe
  2⤵
  PID:14260
- C:\Windows\System\NhTkkKV.exe
  C:\Windows\System\NhTkkKV.exe
  2⤵
  PID:6868
- C:\Windows\System\yVknPai.exe
  C:\Windows\System\yVknPai.exe
  2⤵
  PID:14204
- C:\Windows\System\xCUgspq.exe
  C:\Windows\System\xCUgspq.exe
  2⤵
  PID:5700
- C:\Windows\System\GuMiKky.exe
  C:\Windows\System\GuMiKky.exe
  2⤵
  PID:13388
- C:\Windows\System\fkrDVIk.exe
  C:\Windows\System\fkrDVIk.exe
  2⤵
  PID:14280
- C:\Windows\System\tOKFuJn.exe
  C:\Windows\System\tOKFuJn.exe
  2⤵
  PID:4900
- C:\Windows\System\HzFhMaY.exe
  C:\Windows\System\HzFhMaY.exe
  2⤵
  PID:13516
- C:\Windows\System\XtqiRph.exe
  C:\Windows\System\XtqiRph.exe
  2⤵
  PID:9344
- C:\Windows\System\vPbEGbW.exe
  C:\Windows\System\vPbEGbW.exe
  2⤵
  PID:4528
- C:\Windows\System\AZOZupA.exe
  C:\Windows\System\AZOZupA.exe
  2⤵
  PID:9996
- C:\Windows\System\epkxPXJ.exe
  C:\Windows\System\epkxPXJ.exe
  2⤵
  PID:13944
- C:\Windows\System\OQXcqyp.exe
  C:\Windows\System\OQXcqyp.exe
  2⤵
  PID:7064
- C:\Windows\System\dMMyCQx.exe
  C:\Windows\System\dMMyCQx.exe
  2⤵
  PID:3888
- C:\Windows\System\wFWvXHt.exe
  C:\Windows\System\wFWvXHt.exe
  2⤵
  PID:14080
- C:\Windows\System\ppUUUMb.exe
  C:\Windows\System\ppUUUMb.exe
  2⤵
  PID:7092
- C:\Windows\System\YDPNEHv.exe
  C:\Windows\System\YDPNEHv.exe
  2⤵
  PID:13480
- C:\Windows\System\EqTVxDs.exe
  C:\Windows\System\EqTVxDs.exe
  2⤵
  PID:7076
- C:\Windows\System\rGUSqUs.exe
  C:\Windows\System\rGUSqUs.exe
  2⤵
  PID:13440
- C:\Windows\System\WYuLbfQ.exe
  C:\Windows\System\WYuLbfQ.exe
  2⤵
  PID:7304
- C:\Windows\System\mteFQsE.exe
  C:\Windows\System\mteFQsE.exe
  2⤵
  PID:7372
- C:\Windows\System\nCKlNWA.exe
  C:\Windows\System\nCKlNWA.exe
  2⤵
  PID:13816
- C:\Windows\System\qprSZux.exe
  C:\Windows\System\qprSZux.exe
  2⤵
  PID:7448
- C:\Windows\System\UBPufvl.exe
  C:\Windows\System\UBPufvl.exe
  2⤵
  PID:7128
- C:\Windows\System\FdeqFju.exe
  C:\Windows\System\FdeqFju.exe
  2⤵
  PID:6268
- C:\Windows\System\ithDDUF.exe
  C:\Windows\System\ithDDUF.exe
  2⤵
  PID:7492
- C:\Windows\System\ZGSmurP.exe
  C:\Windows\System\ZGSmurP.exe
  2⤵
  PID:6580
- C:\Windows\System\KfoycFh.exe
  C:\Windows\System\KfoycFh.exe
  2⤵
  PID:6828
- C:\Windows\System\lUleXDj.exe
  C:\Windows\System\lUleXDj.exe
  2⤵
  PID:13884
- C:\Windows\System\JfcXETa.exe
  C:\Windows\System\JfcXETa.exe
  2⤵
  PID:7772
- C:\Windows\System\EnYGpzT.exe
  C:\Windows\System\EnYGpzT.exe
  2⤵
  PID:7116
- C:\Windows\System\lVCmLQz.exe
  C:\Windows\System\lVCmLQz.exe
  2⤵
  PID:7828
- C:\Windows\System\piwRNJD.exe
  C:\Windows\System\piwRNJD.exe
  2⤵
  PID:8000
- C:\Windows\System\OyFCkRW.exe
  C:\Windows\System\OyFCkRW.exe
  2⤵
  PID:7788
- C:\Windows\System\VUGAWyf.exe
  C:\Windows\System\VUGAWyf.exe
  2⤵
  PID:6772
- C:\Windows\System\uPiOkyy.exe
  C:\Windows\System\uPiOkyy.exe
  2⤵
  PID:7112
- C:\Windows\System\Rfqxmku.exe
  C:\Windows\System\Rfqxmku.exe
  2⤵
  PID:7392
- C:\Windows\System\gBvPHQE.exe
  C:\Windows\System\gBvPHQE.exe
  2⤵
  PID:6440
- C:\Windows\System\KLTkMgr.exe
  C:\Windows\System\KLTkMgr.exe
  2⤵
  PID:7992
- C:\Windows\System\eDVxgje.exe
  C:\Windows\System\eDVxgje.exe
  2⤵
  PID:8140
- C:\Windows\System\mtjhoHq.exe
  C:\Windows\System\mtjhoHq.exe
  2⤵
  PID:9412
- C:\Windows\System\wmwDKQy.exe
  C:\Windows\System\wmwDKQy.exe
  2⤵
  PID:8176
- C:\Windows\System\eBNtyuu.exe
  C:\Windows\System\eBNtyuu.exe
  2⤵
  PID:14356
- C:\Windows\System\THiyweu.exe
  C:\Windows\System\THiyweu.exe
  2⤵
  PID:14384
- C:\Windows\System\nFPCojl.exe
  C:\Windows\System\nFPCojl.exe
  2⤵
  PID:14420
- C:\Windows\System\VBvFvkv.exe
  C:\Windows\System\VBvFvkv.exe
  2⤵
  PID:14444
- C:\Windows\System\GjKdLGF.exe
  C:\Windows\System\GjKdLGF.exe
  2⤵
  PID:14468
- C:\Windows\System\KcEzcNl.exe
  C:\Windows\System\KcEzcNl.exe
  2⤵
  PID:14488
- C:\Windows\System\nAzBQxq.exe
  C:\Windows\System\nAzBQxq.exe
  2⤵
  PID:14512
- C:\Windows\System\noBeIEs.exe
  C:\Windows\System\noBeIEs.exe
  2⤵
  PID:14604
- C:\Windows\System\KluXyoF.exe
  C:\Windows\System\KluXyoF.exe
  2⤵
  PID:14636
- C:\Windows\System\HwqcQOd.exe
  C:\Windows\System\HwqcQOd.exe
  2⤵
  PID:14672
- C:\Windows\System\vFAUzqz.exe
  C:\Windows\System\vFAUzqz.exe
  2⤵
  PID:14712
- C:\Windows\System\yXZAvPe.exe
  C:\Windows\System\yXZAvPe.exe
  2⤵
  PID:14736
- C:\Windows\System\WEUVCkx.exe
  C:\Windows\System\WEUVCkx.exe
  2⤵
  PID:14756
- C:\Windows\System\iTSoXXF.exe
  C:\Windows\System\iTSoXXF.exe
  2⤵
  PID:14772
- C:\Windows\System\WfYaqeb.exe
  C:\Windows\System\WfYaqeb.exe
  2⤵
  PID:14804
- C:\Windows\System\CRgQEiL.exe
  C:\Windows\System\CRgQEiL.exe
  2⤵
  PID:14820
- C:\Windows\System\rciwIHV.exe
  C:\Windows\System\rciwIHV.exe
  2⤵
  PID:14844
- C:\Windows\System\LNwRWVk.exe
  C:\Windows\System\LNwRWVk.exe
  2⤵
  PID:14868
- C:\Windows\System\fVAesUd.exe
  C:\Windows\System\fVAesUd.exe
  2⤵
  PID:14884
- C:\Windows\System\XOarQiN.exe
  C:\Windows\System\XOarQiN.exe
  2⤵
  PID:14904
- C:\Windows\System\DNidGxt.exe
  C:\Windows\System\DNidGxt.exe
  2⤵
  PID:14932
- C:\Windows\System\LMkoiJO.exe
  C:\Windows\System\LMkoiJO.exe
  2⤵
  PID:14964
- C:\Windows\System\FDLJxUY.exe
  C:\Windows\System\FDLJxUY.exe
  2⤵
  PID:14992
- C:\Windows\System\uznNRTc.exe
  C:\Windows\System\uznNRTc.exe
  2⤵
  PID:15036
- C:\Windows\System\JJFaBbE.exe
  C:\Windows\System\JJFaBbE.exe
  2⤵
  PID:15084
- C:\Windows\System\rikMqIZ.exe
  C:\Windows\System\rikMqIZ.exe
  2⤵
  PID:15108
- C:\Windows\System\nRrbfgA.exe
  C:\Windows\System\nRrbfgA.exe
  2⤵
  PID:15136
- C:\Windows\System\NqoqsQC.exe
  C:\Windows\System\NqoqsQC.exe
  2⤵
  PID:15160
- C:\Windows\System\cSBEype.exe
  C:\Windows\System\cSBEype.exe
  2⤵
  PID:15200
- C:\Windows\System\lVYvZnS.exe
  C:\Windows\System\lVYvZnS.exe
  2⤵
  PID:15236
- C:\Windows\System\XDtcqWK.exe
  C:\Windows\System\XDtcqWK.exe
  2⤵
  PID:15264
- C:\Windows\System\YWnOAmX.exe
  C:\Windows\System\YWnOAmX.exe
  2⤵
  PID:15292
- C:\Windows\System\hzXfPNd.exe
  C:\Windows\System\hzXfPNd.exe
  2⤵
  PID:15308
- C:\Windows\System\RiccAfY.exe
  C:\Windows\System\RiccAfY.exe
  2⤵
  PID:15324
- C:\Windows\System\tykvqjx.exe
  C:\Windows\System\tykvqjx.exe
  2⤵
  PID:15340
- C:\Windows\System\ZqSKFAP.exe
  C:\Windows\System\ZqSKFAP.exe
  2⤵
  PID:7280
- C:\Windows\System\SpcSGAK.exe
  C:\Windows\System\SpcSGAK.exe
  2⤵
  PID:7960
- C:\Windows\System\GzFpuDS.exe
  C:\Windows\System\GzFpuDS.exe
  2⤵
  PID:7236
- C:\Windows\System\FgUwbER.exe
  C:\Windows\System\FgUwbER.exe
  2⤵
  PID:7620
- C:\Windows\System\jdilrpp.exe
  C:\Windows\System\jdilrpp.exe
  2⤵
  PID:7896
- C:\Windows\System\YLDOkcD.exe
  C:\Windows\System\YLDOkcD.exe
  2⤵
  PID:14476
- C:\Windows\System\BPDoAVq.exe
  C:\Windows\System\BPDoAVq.exe
  2⤵
  PID:8044
- C:\Windows\System\cTzFJjG.exe
  C:\Windows\System\cTzFJjG.exe
  2⤵
  PID:7356
- C:\Windows\System\TjGCFac.exe
  C:\Windows\System\TjGCFac.exe
  2⤵
  PID:7680
- C:\Windows\System\bgsAkWp.exe
  C:\Windows\System\bgsAkWp.exe
  2⤵
  PID:14664
- C:\Windows\System\dreLqhi.exe
  C:\Windows\System\dreLqhi.exe
  2⤵
  PID:14620
- C:\Windows\System\NDhkxFB.exe
  C:\Windows\System\NDhkxFB.exe
  2⤵
  PID:8072
- C:\Windows\System\EEzzJfn.exe
  C:\Windows\System\EEzzJfn.exe
  2⤵
  PID:14720
- C:\Windows\System\uLWaJai.exe
  C:\Windows\System\uLWaJai.exe
  2⤵
  PID:3392
- C:\Windows\System\CfyEFOM.exe
  C:\Windows\System\CfyEFOM.exe
  2⤵
  PID:14816
- C:\Windows\System\RrjnSbG.exe
  C:\Windows\System\RrjnSbG.exe
  2⤵
  PID:8244
- C:\Windows\System\jDwIcWx.exe
  C:\Windows\System\jDwIcWx.exe
  2⤵
  PID:14832
- C:\Windows\System\BUdVRll.exe
  C:\Windows\System\BUdVRll.exe
  2⤵
  PID:14800
- C:\Windows\System\nIwXlsO.exe
  C:\Windows\System\nIwXlsO.exe
  2⤵
  PID:6636
- C:\Windows\System\IygeGWv.exe
  C:\Windows\System\IygeGWv.exe
  2⤵
  PID:8360
- C:\Windows\System\mbJgRDt.exe
  C:\Windows\System\mbJgRDt.exe
  2⤵
  PID:8380
- C:\Windows\System\zqKnbaR.exe
  C:\Windows\System\zqKnbaR.exe
  2⤵
  PID:14544
- C:\Windows\System\TClSKFG.exe
  C:\Windows\System\TClSKFG.exe
  2⤵
  PID:15012
- C:\Windows\System\QPTpVhn.exe
  C:\Windows\System\QPTpVhn.exe
  2⤵
  PID:15096
- C:\Windows\System\hPRgfVc.exe
  C:\Windows\System\hPRgfVc.exe
  2⤵
  PID:10584
- C:\Windows\System\DEtGaWt.exe
  C:\Windows\System\DEtGaWt.exe
  2⤵
  PID:8636
- C:\Windows\System\qGOfwXo.exe
  C:\Windows\System\qGOfwXo.exe
  2⤵
  PID:8700
- C:\Windows\System\hxknZTd.exe
  C:\Windows\System\hxknZTd.exe
  2⤵
  PID:15176
- C:\Windows\System\mTlQnda.exe
  C:\Windows\System\mTlQnda.exe
  2⤵
  PID:15212
- C:\Windows\System\LUHWwzF.exe
  C:\Windows\System\LUHWwzF.exe
  2⤵
  PID:8756
- C:\Windows\System\TIUhXUA.exe
  C:\Windows\System\TIUhXUA.exe
  2⤵
  PID:10764
- C:\Windows\System\BZUKVEp.exe
  C:\Windows\System\BZUKVEp.exe
  2⤵
  PID:8888
- C:\Windows\System\zpQZFTl.exe
  C:\Windows\System\zpQZFTl.exe
  2⤵
  PID:15356
- C:\Windows\System\bXAaeun.exe
  C:\Windows\System\bXAaeun.exe
  2⤵
  PID:8956
- C:\Windows\System\PmldDsi.exe
  C:\Windows\System\PmldDsi.exe
  2⤵
  PID:8168
- C:\Windows\System\LZFakbe.exe
  C:\Windows\System\LZFakbe.exe
  2⤵
  PID:9108
- C:\Windows\System\RKgnqmV.exe
  C:\Windows\System\RKgnqmV.exe
  2⤵
  PID:14400
- C:\Windows\System\qQgSQir.exe
  C:\Windows\System\qQgSQir.exe
  2⤵
  PID:9160
- C:\Windows\System\IBlOhYr.exe
  C:\Windows\System\IBlOhYr.exe
  2⤵
  PID:7496
- C:\Windows\System\yczzSAI.exe
  C:\Windows\System\yczzSAI.exe
  2⤵
  PID:14584
- C:\Windows\System\ectwAwz.exe
  C:\Windows\System\ectwAwz.exe
  2⤵
  PID:8328
- C:\Windows\System\oNPyXCb.exe
  C:\Windows\System\oNPyXCb.exe
  2⤵
  PID:10364
- C:\Windows\System\eTDKqki.exe
  C:\Windows\System\eTDKqki.exe
  2⤵
  PID:7624
- C:\Windows\System\EGZsNrx.exe
  C:\Windows\System\EGZsNrx.exe
  2⤵
  PID:14892
- C:\Windows\System\ixLsQXL.exe
  C:\Windows\System\ixLsQXL.exe
  2⤵
  PID:8724
- C:\Windows\System\kWfDAiC.exe
  C:\Windows\System\kWfDAiC.exe
  2⤵
  PID:14864
- C:\Windows\System\siAbknu.exe
  C:\Windows\System\siAbknu.exe
  2⤵
  PID:14924
- C:\Windows\System\uTtUfJI.exe
  C:\Windows\System\uTtUfJI.exe
  2⤵
  PID:14520
- C:\Windows\System\XMspvkM.exe
  C:\Windows\System\XMspvkM.exe
  2⤵
  PID:15148
- C:\Windows\System\KcXxqHA.exe
  C:\Windows\System\KcXxqHA.exe
  2⤵
  PID:8692
- C:\Windows\System\tvOzFCn.exe
  C:\Windows\System\tvOzFCn.exe
  2⤵
  PID:15100
- C:\Windows\System\hmkpnpS.exe
  C:\Windows\System\hmkpnpS.exe
  2⤵
  PID:9444
- C:\Windows\System\NUzoTMU.exe
  C:\Windows\System\NUzoTMU.exe
  2⤵
  PID:10792
- C:\Windows\System\hQAQNWe.exe
  C:\Windows\System\hQAQNWe.exe
  2⤵
  PID:15336
- C:\Windows\System\fsaRoTt.exe
  C:\Windows\System\fsaRoTt.exe
  2⤵
  PID:15352
- C:\Windows\System\mipvkDf.exe
  C:\Windows\System\mipvkDf.exe
  2⤵
  PID:9616
- C:\Windows\System\qcWVNSg.exe
  C:\Windows\System\qcWVNSg.exe
  2⤵
  PID:14348
- C:\Windows\System\mEQexlH.exe
  C:\Windows\System\mEQexlH.exe
  2⤵
  PID:9608
- C:\Windows\System\qqPWsfw.exe
  C:\Windows\System\qqPWsfw.exe
  2⤵
  PID:9756
- C:\Windows\System\PMYzmBx.exe
  C:\Windows\System\PMYzmBx.exe
  2⤵
  PID:10136
- C:\Windows\System\OsyKqxK.exe
  C:\Windows\System\OsyKqxK.exe
  2⤵
  PID:9172
- C:\Windows\System\rNZmWmm.exe
  C:\Windows\System\rNZmWmm.exe
  2⤵
  PID:8144
- C:\Windows\System\ORMvQLU.exe
  C:\Windows\System\ORMvQLU.exe
  2⤵
  PID:14880
- C:\Windows\System\mURAvVV.exe
  C:\Windows\System\mURAvVV.exe
  2⤵
  PID:10408
- C:\Windows\System\lbRaSaY.exe
  C:\Windows\System\lbRaSaY.exe
  2⤵
  PID:4312
- C:\Windows\System\WwykOhY.exe
  C:\Windows\System\WwykOhY.exe
  2⤵
  PID:8524
- C:\Windows\System\vNqSSDN.exe
  C:\Windows\System\vNqSSDN.exe
  2⤵
  PID:10060
- C:\Windows\System\RBCzIya.exe
  C:\Windows\System\RBCzIya.exe
  2⤵
  PID:14856
- C:\Windows\System\pagcOjS.exe
  C:\Windows\System\pagcOjS.exe
  2⤵
  PID:15172
- C:\Windows\System\ORcCJgx.exe
  C:\Windows\System\ORcCJgx.exe
  2⤵
  PID:8856
- C:\Windows\System\lLCHmup.exe
  C:\Windows\System\lLCHmup.exe
  2⤵
  PID:10196
- C:\Windows\System\lUjHHOJ.exe
  C:\Windows\System\lUjHHOJ.exe
  2⤵
  PID:10200
- C:\Windows\System\HUzHoMb.exe
  C:\Windows\System\HUzHoMb.exe
  2⤵
  PID:9640
- C:\Windows\System\aSRwAmK.exe
  C:\Windows\System\aSRwAmK.exe
  2⤵
  PID:14668
- C:\Windows\System\HAWxAVm.exe
  C:\Windows\System\HAWxAVm.exe
  2⤵
  PID:9916
- C:\Windows\System\OENGnQz.exe
  C:\Windows\System\OENGnQz.exe
  2⤵
  PID:9328
- C:\Windows\System\URIzTlj.exe
  C:\Windows\System\URIzTlj.exe
  2⤵
  PID:9260
- C:\Windows\System\qUssxfY.exe
  C:\Windows\System\qUssxfY.exe
  2⤵
  PID:9552
- C:\Windows\System\NpoJFJF.exe
  C:\Windows\System\NpoJFJF.exe
  2⤵
  PID:8984
- C:\Windows\System\TwEiKwl.exe
  C:\Windows\System\TwEiKwl.exe
  2⤵
  PID:9536
- C:\Windows\System\xWCqJGP.exe
  C:\Windows\System\xWCqJGP.exe
  2⤵
  PID:9736
- C:\Windows\System\fqpehbJ.exe
  C:\Windows\System\fqpehbJ.exe
  2⤵
  PID:3048
- C:\Windows\System\aLCslSN.exe
  C:\Windows\System\aLCslSN.exe
  2⤵
  PID:9660
- C:\Windows\System\IJakNHS.exe
  C:\Windows\System\IJakNHS.exe
  2⤵
  PID:9932
- C:\Windows\System\Eyolncm.exe
  C:\Windows\System\Eyolncm.exe
  2⤵
  PID:14452
- C:\Windows\System\sHLGWby.exe
  C:\Windows\System\sHLGWby.exe
  2⤵
  PID:9388
- C:\Windows\System\WvzpAve.exe
  C:\Windows\System\WvzpAve.exe
  2⤵
  PID:8424
- C:\Windows\System\MNakkWJ.exe
  C:\Windows\System\MNakkWJ.exe
  2⤵
  PID:2260
- C:\Windows\System\GoTauwL.exe
  C:\Windows\System\GoTauwL.exe
  2⤵
  PID:9348
- C:\Windows\System\JvpjrMs.exe
  C:\Windows\System\JvpjrMs.exe
  2⤵
  PID:1272
- C:\Windows\System\FZgGOdt.exe
  C:\Windows\System\FZgGOdt.exe
  2⤵
  PID:2564
- C:\Windows\System\PEGqfJM.exe
  C:\Windows\System\PEGqfJM.exe
  2⤵
  PID:15124
- C:\Windows\System\WJKUzyw.exe
  C:\Windows\System\WJKUzyw.exe
  2⤵
  PID:9004
- C:\Windows\System\Vlekktb.exe
  C:\Windows\System\Vlekktb.exe
  2⤵
  PID:9368
- C:\Windows\System\hQJuxRb.exe
  C:\Windows\System\hQJuxRb.exe
  2⤵
  PID:9392
- C:\Windows\System\xXYNhhK.exe
  C:\Windows\System\xXYNhhK.exe
  2⤵
  PID:3876
- C:\Windows\System\JMJKtMO.exe
  C:\Windows\System\JMJKtMO.exe
  2⤵
  PID:10052
- C:\Windows\System\bwNdNzC.exe
  C:\Windows\System\bwNdNzC.exe
  2⤵
  PID:7568
- C:\Windows\System\sMPJkWi.exe
  C:\Windows\System\sMPJkWi.exe
  2⤵
  PID:9556
- C:\Windows\System\kZEsjSh.exe
  C:\Windows\System\kZEsjSh.exe
  2⤵
  PID:11876
- C:\Windows\System\qdWIxwD.exe
  C:\Windows\System\qdWIxwD.exe
  2⤵
  PID:9568
- C:\Windows\System\mUTLDmx.exe
  C:\Windows\System\mUTLDmx.exe
  2⤵
  PID:15380
- C:\Windows\System\cAMHvRP.exe
  C:\Windows\System\cAMHvRP.exe
  2⤵
  PID:15412
- C:\Windows\System\stsJeAe.exe
  C:\Windows\System\stsJeAe.exe
  2⤵
  PID:15440
- C:\Windows\System\aRvgAWc.exe
  C:\Windows\System\aRvgAWc.exe
  2⤵
  PID:15472
- C:\Windows\System\UHxGNkG.exe
  C:\Windows\System\UHxGNkG.exe
  2⤵
  PID:15496
- C:\Windows\System\tGOgDPu.exe
  C:\Windows\System\tGOgDPu.exe
  2⤵
  PID:15516
- C:\Windows\System\PFoenNz.exe
  C:\Windows\System\PFoenNz.exe
  2⤵
  PID:15552
- C:\Windows\System\MifMCog.exe
  C:\Windows\System\MifMCog.exe
  2⤵
  PID:15620
- C:\Windows\System\whJmWwP.exe
  C:\Windows\System\whJmWwP.exe
  2⤵
  PID:15636
- C:\Windows\System\ZXsanNK.exe
  C:\Windows\System\ZXsanNK.exe
  2⤵
  PID:15692
- C:\Windows\System\adtQASS.exe
  C:\Windows\System\adtQASS.exe
  2⤵
  PID:15788
- C:\Windows\System\BgtGgFN.exe
  C:\Windows\System\BgtGgFN.exe
  2⤵
  PID:15804
- C:\Windows\System\ApmCwHX.exe
  C:\Windows\System\ApmCwHX.exe
  2⤵
  PID:15832
- C:\Windows\System\glywcdC.exe
  C:\Windows\System\glywcdC.exe
  2⤵
  PID:15852
- C:\Windows\System\XYqttrB.exe
  C:\Windows\System\XYqttrB.exe
  2⤵
  PID:15896
- C:\Windows\System\QMxrDes.exe
  C:\Windows\System\QMxrDes.exe
  2⤵
  PID:15924
- C:\Windows\System\MBzjcKa.exe
  C:\Windows\System\MBzjcKa.exe
  2⤵
  PID:15940
- C:\Windows\System\uViFQVB.exe
  C:\Windows\System\uViFQVB.exe
  2⤵
  PID:15964
- C:\Windows\System\uzQcZkj.exe
  C:\Windows\System\uzQcZkj.exe
  2⤵
  PID:15992
- C:\Windows\System\TYLhIFy.exe
  C:\Windows\System\TYLhIFy.exe
  2⤵
  PID:16024
- C:\Windows\System\etFxKQf.exe
  C:\Windows\System\etFxKQf.exe
  2⤵
  PID:16040
- C:\Windows\System\rzkMRMu.exe
  C:\Windows\System\rzkMRMu.exe
  2⤵
  PID:16068
- C:\Windows\System\PRQcNJN.exe
  C:\Windows\System\PRQcNJN.exe
  2⤵
  PID:16116
- C:\Windows\System\ofpOWMZ.exe
  C:\Windows\System\ofpOWMZ.exe
  2⤵
  PID:16144
- C:\Windows\System\gOyarpu.exe
  C:\Windows\System\gOyarpu.exe
  2⤵
  PID:16164
- C:\Windows\System\ckJzGLA.exe
  C:\Windows\System\ckJzGLA.exe
  2⤵
  PID:16196
- C:\Windows\System\dKyQIwE.exe
  C:\Windows\System\dKyQIwE.exe
  2⤵
  PID:16232
- C:\Windows\System\yEFWjuS.exe
  C:\Windows\System\yEFWjuS.exe
  2⤵
  PID:16264
- C:\Windows\System\HFkHndE.exe
  C:\Windows\System\HFkHndE.exe
  2⤵
  PID:16292
- C:\Windows\System\SwJSfiL.exe
  C:\Windows\System\SwJSfiL.exe
  2⤵
  PID:16320
- C:\Windows\System\kSfUaAZ.exe
  C:\Windows\System\kSfUaAZ.exe
  2⤵
  PID:16340
- C:\Windows\System\CHBjVRA.exe
  C:\Windows\System\CHBjVRA.exe
  2⤵
  PID:16356
- C:\Windows\System\xwHmDdS.exe
  C:\Windows\System\xwHmDdS.exe
  2⤵
  PID:1472
- C:\Windows\System\GbWqcAr.exe
  C:\Windows\System\GbWqcAr.exe
  2⤵
  PID:15408
- C:\Windows\System\LVyWnqT.exe
  C:\Windows\System\LVyWnqT.exe
  2⤵
  PID:15452
- C:\Windows\System\CXGCfEt.exe
  C:\Windows\System\CXGCfEt.exe
  2⤵
  PID:15544
- C:\Windows\System\ZBGvIXz.exe
  C:\Windows\System\ZBGvIXz.exe
  2⤵
  PID:12200
- C:\Windows\System\oOHyqCI.exe
  C:\Windows\System\oOHyqCI.exe
  2⤵
  PID:12216
- C:\Windows\System\YzMsEbS.exe
  C:\Windows\System\YzMsEbS.exe
  2⤵
  PID:15596
- C:\Windows\System\ONObmcy.exe
  C:\Windows\System\ONObmcy.exe
  2⤵
  PID:10064
- C:\Windows\System\kiRamUX.exe
  C:\Windows\System\kiRamUX.exe
  2⤵
  PID:9992
- C:\Windows\System\IpSVbBh.exe
  C:\Windows\System\IpSVbBh.exe
  2⤵
  PID:15828
- C:\Windows\System\yQWfdUS.exe
  C:\Windows\System\yQWfdUS.exe
  2⤵
  PID:10164
- C:\Windows\System\EhNGhEu.exe
  C:\Windows\System\EhNGhEu.exe
  2⤵
  PID:15880
- C:\Windows\System\qQnHuNQ.exe
  C:\Windows\System\qQnHuNQ.exe
  2⤵
  PID:15892
- C:\Windows\System\JhMYDzS.exe
  C:\Windows\System\JhMYDzS.exe
  2⤵
  PID:15952
- C:\Windows\System\NgJtFzY.exe
  C:\Windows\System\NgJtFzY.exe
  2⤵
  PID:15936
- C:\Windows\System\XMXOLMt.exe
  C:\Windows\System\XMXOLMt.exe
  2⤵
  PID:11896
- C:\Windows\System\pWJmSng.exe
  C:\Windows\System\pWJmSng.exe
  2⤵
  PID:1512
- C:\Windows\System\vNEJscz.exe
  C:\Windows\System\vNEJscz.exe
  2⤵
  PID:16080
- C:\Windows\System\toKBqmk.exe
  C:\Windows\System\toKBqmk.exe
  2⤵
  PID:16128
- C:\Windows\System\QuUqcoR.exe
  C:\Windows\System\QuUqcoR.exe
  2⤵
  PID:16212
- C:\Windows\System\yEaDTFk.exe
  C:\Windows\System\yEaDTFk.exe
  2⤵
  PID:16188
- C:\Windows\System\iEWWLSR.exe
  C:\Windows\System\iEWWLSR.exe
  2⤵
  PID:10260
- C:\Windows\System\OjRveBU.exe
  C:\Windows\System\OjRveBU.exe
  2⤵
  PID:16304
- C:\Windows\System\jXfvAqG.exe
  C:\Windows\System\jXfvAqG.exe
  2⤵
  PID:10288
- C:\Windows\System\JBeurDp.exe
  C:\Windows\System\JBeurDp.exe
  2⤵
  PID:10348
- C:\Windows\System\hpivohM.exe
  C:\Windows\System\hpivohM.exe
  2⤵
  PID:15568
- C:\Windows\System\mAVieko.exe
  C:\Windows\System\mAVieko.exe
  2⤵
  PID:15592
- C:\Windows\System\XpKlZkp.exe
  C:\Windows\System\XpKlZkp.exe
  2⤵
  PID:15504
- C:\Windows\System\vzSWLqY.exe
  C:\Windows\System\vzSWLqY.exe
  2⤵
  PID:15628
- C:\Windows\System\eyJDorn.exe
  C:\Windows\System\eyJDorn.exe
  2⤵
  PID:15704
- C:\Windows\System\IkueRsH.exe
  C:\Windows\System\IkueRsH.exe
  2⤵
  PID:15760
- C:\Windows\System\BdRMVfU.exe
  C:\Windows\System\BdRMVfU.exe
  2⤵
  PID:10560
- C:\Windows\System\UwZQgjv.exe
  C:\Windows\System\UwZQgjv.exe
  2⤵
  PID:10620
- C:\Windows\System\jxwNjNb.exe
  C:\Windows\System\jxwNjNb.exe
  2⤵
  PID:10716
- C:\Windows\System\udNSzNk.exe
  C:\Windows\System\udNSzNk.exe
  2⤵
  PID:15764
- C:\Windows\System\bbXlQSp.exe
  C:\Windows\System\bbXlQSp.exe
  2⤵
  PID:15844
- C:\Windows\System\wFnMJxj.exe
  C:\Windows\System\wFnMJxj.exe
  2⤵
  PID:10872
- C:\Windows\System\bGDteNg.exe
  C:\Windows\System\bGDteNg.exe
  2⤵
  PID:1884
- C:\Windows\System\FFNKKKj.exe
  C:\Windows\System\FFNKKKj.exe
  2⤵
  PID:4632
- C:\Windows\System\ecWFxKC.exe
  C:\Windows\System\ecWFxKC.exe
  2⤵
  PID:10324
- C:\Windows\System\tOkgWGq.exe
  C:\Windows\System\tOkgWGq.exe
  2⤵
  PID:11092
- C:\Windows\System\CAtskBq.exe
  C:\Windows\System\CAtskBq.exe
  2⤵
  PID:11216
- C:\Windows\System\jlaFSfv.exe
  C:\Windows\System\jlaFSfv.exe
  2⤵
  PID:10492
- C:\Windows\System\mMbpYOY.exe
  C:\Windows\System\mMbpYOY.exe
  2⤵
  PID:15468
- C:\Windows\System\xzmWDBr.exe
  C:\Windows\System\xzmWDBr.exe
  2⤵
  PID:15720
- C:\Windows\System\ATZtUqg.exe
  C:\Windows\System\ATZtUqg.exe
  2⤵
  PID:10644
- C:\Windows\System\IvfnyDU.exe
  C:\Windows\System\IvfnyDU.exe
  2⤵
  PID:10684
- C:\Windows\System\zYlViAJ.exe
  C:\Windows\System\zYlViAJ.exe
  2⤵
  PID:5584
- C:\Windows\System\UzPVkWv.exe
  C:\Windows\System\UzPVkWv.exe
  2⤵
  PID:10832
- C:\Windows\System\CKopPmc.exe
  C:\Windows\System\CKopPmc.exe
  2⤵
  PID:11084
- C:\Windows\System\pqjTemA.exe
  C:\Windows\System\pqjTemA.exe
  2⤵
  PID:9708
- C:\Windows\System\gkSftaU.exe
  C:\Windows\System\gkSftaU.exe
  2⤵
  PID:15976
- C:\Windows\System\kJTTsIr.exe
  C:\Windows\System\kJTTsIr.exe
  2⤵
  PID:10292
- C:\Windows\System\RayNzUI.exe
  C:\Windows\System\RayNzUI.exe
  2⤵
  PID:16328
- C:\Windows\System\HaBopWe.exe
  C:\Windows\System\HaBopWe.exe
  2⤵
  PID:16260
- C:\Windows\System\FdPYcit.exe
  C:\Windows\System\FdPYcit.exe
  2⤵
  PID:10428
- C:\Windows\System\xfkPiPy.exe
  C:\Windows\System\xfkPiPy.exe
  2⤵
  PID:10968
- C:\Windows\System\GJLmfqb.exe
  C:\Windows\System\GJLmfqb.exe
  2⤵
  PID:16224
- C:\Windows\System\tFaMJHk.exe
  C:\Windows\System\tFaMJHk.exe
  2⤵
  PID:11208
- C:\Windows\System\WewXPuN.exe
  C:\Windows\System\WewXPuN.exe
  2⤵
  PID:9664
- C:\Windows\System\fighoit.exe
  C:\Windows\System\fighoit.exe
  2⤵
  PID:16280
- C:\Windows\System\TKkGIVH.exe
  C:\Windows\System\TKkGIVH.exe
  2⤵
  PID:620
- C:\Windows\System\EswzMqN.exe
  C:\Windows\System\EswzMqN.exe
  2⤵
  PID:12680
- C:\Windows\System\NTnoifL.exe
  C:\Windows\System\NTnoifL.exe
  2⤵
  PID:11164
- C:\Windows\System\EdYKGAI.exe
  C:\Windows\System\EdYKGAI.exe
  2⤵
  PID:10672
- C:\Windows\System\CBnlEJr.exe
  C:\Windows\System\CBnlEJr.exe
  2⤵
  PID:10752
- C:\Windows\System\zmzymLG.exe
  C:\Windows\System\zmzymLG.exe
  2⤵
  PID:11824
- C:\Windows\System\TWLBbiY.exe
  C:\Windows\System\TWLBbiY.exe
  2⤵
  PID:10864
- C:\Windows\System\vzDwoqN.exe
  C:\Windows\System\vzDwoqN.exe
  2⤵
  PID:11420
- C:\Windows\System\CgfxiyB.exe
  C:\Windows\System\CgfxiyB.exe
  2⤵
  PID:10668
- C:\Windows\System\JTmZrSy.exe
  C:\Windows\System\JTmZrSy.exe
  2⤵
  PID:16064
- C:\Windows\System\msGYgOD.exe
  C:\Windows\System\msGYgOD.exe
  2⤵
  PID:16012
- C:\Windows\System\LzeRRmS.exe
  C:\Windows\System\LzeRRmS.exe
  2⤵
  PID:11672
- C:\Windows\System\cmvpPiO.exe
  C:\Windows\System\cmvpPiO.exe
  2⤵
  PID:11664
- C:\Windows\System\rsvgKBA.exe
  C:\Windows\System\rsvgKBA.exe
  2⤵
  PID:11684
- C:\Windows\System\hhxyenX.exe
  C:\Windows\System\hhxyenX.exe
  2⤵
  PID:11056
- C:\Windows\System\IKkmHRA.exe
  C:\Windows\System\IKkmHRA.exe
  2⤵
  PID:11756
- C:\Windows\System\lxxgusn.exe
  C:\Windows\System\lxxgusn.exe
  2⤵
  PID:16252
- C:\Windows\System\wnhpXCp.exe
  C:\Windows\System\wnhpXCp.exe
  2⤵
  PID:11120
- C:\Windows\System\RMLHEKM.exe
  C:\Windows\System\RMLHEKM.exe
  2⤵
  PID:11908
- C:\Windows\System\hwdPvgN.exe
  C:\Windows\System\hwdPvgN.exe
  2⤵
  PID:11108
- C:\Windows\System\SzDNLVy.exe
  C:\Windows\System\SzDNLVy.exe
  2⤵
  PID:12028
- C:\Windows\System\mGGmkEi.exe
  C:\Windows\System\mGGmkEi.exe
  2⤵
  PID:11540
- C:\Windows\System\SeupUEE.exe
  C:\Windows\System\SeupUEE.exe
  2⤵
  PID:8792
- C:\Windows\System\XPaCMag.exe
  C:\Windows\System\XPaCMag.exe
  2⤵
  PID:12172
- C:\Windows\System\JzGMqmz.exe
  C:\Windows\System\JzGMqmz.exe
  2⤵
  PID:11676
- C:\Windows\System\OiAYASq.exe
  C:\Windows\System\OiAYASq.exe
  2⤵
  PID:10800
- C:\Windows\System\khDRgkJ.exe
  C:\Windows\System\khDRgkJ.exe
  2⤵
  PID:12276
- C:\Windows\System\pxTExAj.exe
  C:\Windows\System\pxTExAj.exe
  2⤵
  PID:11404
- C:\Windows\System\BUeNncF.exe
  C:\Windows\System\BUeNncF.exe
  2⤵
  PID:8980
- C:\Windows\System\BIwilrv.exe
  C:\Windows\System\BIwilrv.exe
  2⤵
  PID:11596
- C:\Windows\System\SSzQAsW.exe
  C:\Windows\System\SSzQAsW.exe
  2⤵
  PID:11532
- C:\Windows\System\MPbPwAR.exe
  C:\Windows\System\MPbPwAR.exe
  2⤵
  PID:4216

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1344 --field-trial-handle=2276,i,11674642242468042059,14711253743544118298,262144 --variations-seed-version /prefetch:8
1⤵
PID:1232

Network

DNS

raw.githubusercontent.com

powershell.exe

Remote address:

8.8.8.8:53

Request

raw.githubusercontent.com

IN A

Response

raw.githubusercontent.com

IN A

185.199.108.133

raw.githubusercontent.com

IN A

185.199.109.133

raw.githubusercontent.com

IN A

185.199.110.133

raw.githubusercontent.com

IN A

185.199.111.133
GET

https://raw.githubusercontent.com/

powershell.exe

Remote address:

185.199.108.133:443

Request

GET / HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1237
Host: raw.githubusercontent.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Connection: keep-alive
Content-Length: 0
Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
Location: https://github.com/
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-XSS-Protection: 1; mode=block
X-GitHub-Request-Id: 8094:1F01CE:2E6066:3AE0AC:6654BB8E
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:08 GMT
Via: 1.1 varnish
X-Served-By: cache-lcy-eglc8600099-LCY
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1716831309.942978,VS0,VE1
Vary: Authorization,Accept-Encoding,Origin
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-Fastly-Request-ID: 1d24c1c38c628c689b43747be59bc3375803aafb
Expires: Mon, 27 May 2024 17:40:08 GMT
Source-Age: 2238
DNS

github.com

powershell.exe

Remote address:

8.8.8.8:53

Request

github.com

IN A

Response

github.com

IN A

20.26.156.215
GET

https://github.com/

powershell.exe

Remote address:

20.26.156.215:443

Request

GET / HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1237
Host: github.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Server: GitHub.com
Date: Mon, 27 May 2024 17:35:09 GMT
Content-Type: text/html; charset=utf-8
Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Language, Accept-Encoding, Accept, X-Requested-With
content-language: en-US
ETag: W/"f9915506a33d0bd8a884dbd181e168f3"
Cache-Control: max-age=0, private, must-revalidate
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/copilot-codex/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com github.githubassets.com edge.fullstory.com rs.fullstory.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com github.githubassets.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
Set-Cookie: _gh_sess=ughZtaNihyL4aJUD7JKRaB3ihEiVBLmqwRWpFZaRF0ofCNFRQA1yFk1LnzHOcB9RilLFDNi6EZmxQYEhnoth5MhINybJEDUAPX4T%2FsJNLgpHxedt75cFqD3i%2BLX6mtJfBrGrZxC6B59UtxL8VmpO6BLJZ8ObhFOuTKZOBzpvCr1H5D6qi7eqCDiVigiibtFgv1FNRWtD4lYS6IsQyaYW%2BlZShT4sSScC%2FxXMdgwmVQFIqp025NaD7z6ksPCuKXnnHrwx0MrWfNrgpxC%2Fp3n3fA%3D%3D--GbGQmlvaOXAf2Jvz--ZLGFG%2BBsJfHhnBqPp6SX0Q%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax
Set-Cookie: _octo=GH1.1.952880813.1716831310; Path=/; Domain=github.com; Expires=Tue, 27 May 2025 17:35:10 GMT; Secure; SameSite=Lax
Set-Cookie: logged_in=no; Path=/; Domain=github.com; Expires=Tue, 27 May 2025 17:35:10 GMT; HttpOnly; Secure; SameSite=Lax
Accept-Ranges: bytes
Transfer-Encoding: chunked
X-GitHub-Request-Id: C32C:274804:11F7206:13C3BAC:6654C44D
DNS

133.108.199.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

133.108.199.185.in-addr.arpa

IN PTR

Response

133.108.199.185.in-addr.arpa

IN PTR

cdn-185-199-108-133githubcom
DNS

215.156.26.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

215.156.26.20.in-addr.arpa

IN PTR

Response
DNS

104.219.191.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

104.219.191.52.in-addr.arpa

IN PTR

Response
DNS

172.210.232.199.in-addr.arpa

Remote address:

8.8.8.8:53

Request

172.210.232.199.in-addr.arpa

IN PTR

Response
DNS

github.githubassets.com

powershell.exe

Remote address:

8.8.8.8:53

Request

github.githubassets.com

IN A

Response

github.githubassets.com

IN A

185.199.109.154

github.githubassets.com

IN A

185.199.110.154

github.githubassets.com

IN A

185.199.108.154

github.githubassets.com

IN A

185.199.111.154
GET

https://github.githubassets.com/assets/light-f552bab6ce72.css

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/light-f552bab6ce72.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 7116
Cache-Control: public, max-age=31536000, immutable
Content-Type: text/css
Last-Modified: Thu, 16 May 2024 22:17:18 GMT
ETag: 0x8DC75F5F2DDF8A0
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:33 GMT
Age: 868887
X-Served-By: cache-iad-kcgs7200113-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 9, 2
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: e00613864f983f682665502c588d2c46e3c071de
GET

https://github.githubassets.com/assets/primer-primitives-4cbeaa0795ef.css

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/primer-primitives-4cbeaa0795ef.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 1586
Cache-Control: public, max-age=31536000, immutable
Content-Type: text/css
Last-Modified: Thu, 16 May 2024 22:17:19 GMT
ETag: 0x8DC75F5F35B9C00
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:34 GMT
Age: 868888
X-Served-By: cache-iad-kcgs7200035-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 11, 4
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 80f3fff6e4bc3fd5a08b399fcf8e39c03d7e79e4
GET

https://github.githubassets.com/assets/github-151c896d0930.css

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/github-151c896d0930.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 22966
Cache-Control: public, max-age=31536000, immutable
Content-Type: text/css
Last-Modified: Mon, 20 May 2024 16:10:05 GMT
ETag: 0x8DC78E74FF2DB0B
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:34 GMT
Age: 298794
X-Served-By: cache-iad-kcgs7200159-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 32, 2
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: d122b7e68758763953ad6c92099b80ec08925c8f
GET

https://github.githubassets.com/assets/dashboard-a6d30410cd03.css

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/dashboard-a6d30410cd03.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 2460
Cache-Control: public, max-age=31536000, immutable
Content-Type: text/css
Last-Modified: Mon, 13 May 2024 23:54:50 GMT
ETag: 0x8DC73A813E5FF40
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:34 GMT
Age: 558993
X-Served-By: cache-iad-kiad7000107-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 6315, 36
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: c7d2283d5b6628869cdc144afe0a39af1303ec44
GET

https://github.githubassets.com/assets/site-f8e2af77e017.css

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/site-f8e2af77e017.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 10304
Cache-Control: public, max-age=31536000, immutable
Content-Type: text/css
Last-Modified: Fri, 24 May 2024 20:51:34 GMT
ETag: 0x8DC7C334C5F1747
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 235019
Date: Mon, 27 May 2024 17:35:34 GMT
X-Served-By: cache-iad-kcgs7200023-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 60, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 80789b7028abb5465cd276211908197a55199351
GET

https://github.githubassets.com/assets/wp-runtime-cc613172fd3f.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/wp-runtime-cc613172fd3f.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 12633
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Mon, 27 May 2024 15:13:33 GMT
ETag: 0x8DC7E5F93338314
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:34 GMT
Age: 5008
X-Served-By: cache-iad-kiad7000083-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 16, 2
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: c70ab0459e7205945dd3d1bcddbece9fee1c78bd
GET

https://github.githubassets.com/assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-4ac41d0a76fd.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-4ac41d0a76fd.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3255
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Fri, 24 May 2024 16:03:57 GMT
ETag: 0x8DC7C0B1E5EC962
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:34 GMT
Age: 254950
X-Served-By: cache-iad-kcgs7200077-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 5268, 2
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 956f03242729f716695751c5319c89a0b29db01d
GET

https://github.githubassets.com/assets/environment-2168885ea2b8.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/environment-2168885ea2b8.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5518
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Tue, 21 May 2024 17:04:40 GMT
ETag: 0x8DC79B81AAD08BE
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:34 GMT
Age: 310325
X-Served-By: cache-iad-kjyo7100058-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 20, 26
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 8b3ad4af0c7bc9edbd9e10e268017b2b3075fd83
GET

https://github.githubassets.com/assets/vendors-node_modules_github_selector-observer_dist_index_esm_js-9f960d9b217c.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_github_selector-observer_dist_index_esm_js-9f960d9b217c.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3460
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Tue, 24 Oct 2023 17:57:35 GMT
ETag: 0x8DBD4BAB420D672
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:34 GMT
Age: 2936926
X-Served-By: cache-iad-kiad7000063-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 58463, 106
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 686a9b35c062c500fd5af8df90c836294492dc3d
GET

https://github.githubassets.com/assets/vendors-node_modules_github_combobox-nav_dist_index_js-node_modules_github_markdown-toolbar-e-820fc0-1176135e4d90.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_github_combobox-nav_dist_index_js-node_modules_github_markdown-toolbar-e-820fc0-1176135e4d90.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5052
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Tue, 14 May 2024 13:45:06 GMT
ETag: 0x8DC741C1086C796
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:34 GMT
Age: 1127619
X-Served-By: cache-iad-kcgs7200139-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 52, 26
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 4e72e3c025f4d3cd947dd80e318f18f0177b11b2
GET

https://github.githubassets.com/assets/vendors-node_modules_github_text-expander-element_dist_index_js-b2135edb5ced.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_github_text-expander-element_dist_index_js-b2135edb5ced.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3789
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 16:01:10 GMT
ETag: 0x8DC6F781431EC7E
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:34 GMT
Age: 1204386
X-Served-By: cache-iad-kiad7000035-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 51, 3
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 9fe12823c28cad58cace46711ee0b2a787a55774
GET

https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_stacktrace-parser_dist_stack-8585c6-b62c48e55af5.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_stacktrace-parser_dist_stack-8585c6-b62c48e55af5.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 6052
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 15 May 2024 11:46:02 GMT
ETag: 0x8DC74D498D91DC8
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 1050101
Date: Mon, 27 May 2024 17:35:34 GMT
X-Served-By: cache-iad-kjyo7100065-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 12, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 5175123c93bdcfe47a8073e7ecf192163fea9c20
GET

https://github.githubassets.com/assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-3959a9-8b35cf73f178.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-3959a9-8b35cf73f178.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 21039
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 15 May 2024 16:02:33 GMT
ETag: 0x8DC74F86EBC4FC9
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:35 GMT
Age: 1029987
X-Served-By: cache-iad-kcgs7200038-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 46, 4
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: ca5af4b6fb4ec451ef64ed577d481e1503262062
GET

https://github.githubassets.com/assets/element-registry-0909f749db2e.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/element-registry-0909f749db2e.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 7930
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Fri, 24 May 2024 22:06:28 GMT
ETag: 0x8DC7C3DC335C053
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:35 GMT
Age: 235034
X-Served-By: cache-iad-kjyo7100110-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 52, 9
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: dfaaaf7176aa08975bb38ef0bb30f086243778dc
GET

https://github.githubassets.com/assets/vendors-node_modules_lit-html_lit-html_js-cc7cb714ead5.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_lit-html_lit-html_js-cc7cb714ead5.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4096
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 16:01:10 GMT
ETag: 0x8DC6F78142D5DBE
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:35 GMT
Age: 1204388
X-Served-By: cache-iad-kcgs7200023-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 52, 2
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 2e1099954d8f26e9732fa4ae81afe8482e3c86cd
GET

https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-880ac2bbb719.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-880ac2bbb719.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3994
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 16:01:09 GMT
ETag: 0x8DC6F7813D95AB0
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 1204387
Date: Mon, 27 May 2024 17:35:35 GMT
X-Served-By: cache-iad-kjyo7100063-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 49, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 2036452ca9a18eb20e21fef9bb098b0134360426
GET

https://github.githubassets.com/assets/vendors-node_modules_color-convert_index_js-94fdbf91204e.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_color-convert_index_js-94fdbf91204e.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4972
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 16:01:09 GMT
ETag: 0x8DC6F7813A407C0
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:35 GMT
Age: 1204387
X-Served-By: cache-iad-kiad7000084-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 51, 2
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 9073914a9f5daace10ed32068020874656d8bb83
GET

https://github.githubassets.com/assets/vendors-node_modules_github_session-resume_dist_index_js-node_modules_primer_behaviors_dist_e-da6ec6-77ce2f267f4e.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_github_session-resume_dist_index_js-node_modules_primer_behaviors_dist_e-da6ec6-77ce2f267f4e.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3196
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 16:01:10 GMT
ETag: 0x8DC6F7814310325
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:35 GMT
Age: 1204387
X-Served-By: cache-iad-kiad7000046-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 48, 1
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 7036d35ff52ac71cfa53331cee8ff25aab7172ae
GET

https://github.githubassets.com/assets/app_assets_modules_github_updatable-content_ts-4d91e80fb877.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/app_assets_modules_github_updatable-content_ts-4d91e80fb877.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 8026
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Tue, 21 May 2024 17:04:39 GMT
ETag: 0x8DC79B819BF46B7
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:35 GMT
Age: 310328
X-Served-By: cache-iad-kiad7000159-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 20, 55
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: bb1c5d64b15086afeee368e75df1bd3196096c08
GET

https://github.githubassets.com/assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_onfocus_ts-app_ass-421cec-d3af2356fb47.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_onfocus_ts-app_ass-421cec-d3af2356fb47.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5342
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Thu, 16 May 2024 17:33:35 GMT
ETag: 0x8DC75CE50833F1B
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:35 GMT
Age: 927928
X-Served-By: cache-iad-kjyo7100083-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 24, 2
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 648464546d96aadf0f18ecf4dae2d60c50ff4205
GET

https://github.githubassets.com/assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_modules_github_behaviors_include-467754-25aa4f5b0d26.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_modules_github_behaviors_include-467754-25aa4f5b0d26.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5889
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Thu, 16 May 2024 17:33:35 GMT
ETag: 0x8DC75CE50827CAA
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:35 GMT
Age: 927928
X-Served-By: cache-iad-kiad7000094-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 24, 14
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 263fd09b09146457ecaa8796e889c3e75a431fa2
GET

https://github.githubassets.com/assets/behaviors-b75fc2506ff4.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/behaviors-b75fc2506ff4.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 65267
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Fri, 24 May 2024 10:14:24 GMT
ETag: 0x8DC7BDA497B7738
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:36 GMT
Age: 278594
X-Served-By: cache-iad-kjyo7100131-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 14, 41
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 310e4d187d5c9bbeeaf6b3ad9bcac7e763eaed5f
GET

https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_stacktrace-parser_dist_stack-8189f0-31cd693b2264.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_stacktrace-parser_dist_stack-8189f0-31cd693b2264.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 7700
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 15 May 2024 11:46:02 GMT
ETag: 0x8DC74D498D8D003
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 1049809
Date: Mon, 27 May 2024 17:35:36 GMT
X-Served-By: cache-iad-kjyo7100168-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 5, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 28d7c8689df0a3847cd13a2384933a5aad696c38
GET

https://github.githubassets.com/assets/home-5523b374aaa9.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/home-5523b374aaa9.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 375
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Tue, 26 Mar 2024 12:01:52 GMT
ETag: 0x8DC4D8C8690D958
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 3031355
Date: Mon, 27 May 2024 17:35:36 GMT
X-Served-By: cache-iad-kcgs7200051-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 55, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: f961c4abff0aea7fc5730ce4d8d84b0e12c04587
GET

https://github.githubassets.com/assets/webgl-globe-d3e3295f0ac2.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/webgl-globe-d3e3295f0ac2.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 191
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Thu, 22 Feb 2024 16:53:17 GMT
ETag: 0x8DC33C6C4DF4E45
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 2976575
Date: Mon, 27 May 2024 17:35:36 GMT
X-Served-By: cache-iad-kcgs7200055-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 51, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: aef8d7e824e1b183c633843af70009c04f7e52db
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_octicons-react_dist_index_esm_js-node_modules_primer_react_lib-es-541a38-c63b7a3484dd.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_primer_octicons-react_dist_index_esm_js-node_modules_primer_react_lib-es-541a38-c63b7a3484dd.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 148788
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 15 May 2024 21:15:54 GMT
ETag: 0x8DC752434F1027D
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 972400
Date: Mon, 27 May 2024 17:35:36 GMT
X-Served-By: cache-iad-kjyo7100096-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 12, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 636495fffffba9f0884336c3b1b7aa672c49861b
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-97ed51d4f278.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-97ed51d4f278.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3422
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 16:01:11 GMT
ETag: 0x8DC6F781482E5B4
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 1204388
Date: Mon, 27 May 2024 17:35:36 GMT
X-Served-By: cache-iad-kjyo7100067-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 51, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 67c7cd2caac54e656778ee6831277d4ddbff3144
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_react_node_modules_primer_octicons-react_dist_index_esm_mjs-dc98a76c65d6.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_primer_react_node_modules_primer_octicons-react_dist_index_esm_mjs-dc98a76c65d6.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 6662
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 16:01:11 GMT
ETag: 0x8DC6F7814C96365
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:36 GMT
Age: 1127573
X-Served-By: cache-iad-kcgs7200110-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 51, 2
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 3a52abcac33251d5cd624ae16933585297b34b0b
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_IconButton_js-node_modules_primer_react_lib--1cd808-6070bc6b2c67.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_primer_react_lib-esm_Button_IconButton_js-node_modules_primer_react_lib--1cd808-6070bc6b2c67.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 10360
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 15 May 2024 11:46:03 GMT
ETag: 0x8DC74D49942B37E
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:36 GMT
Age: 1050102
X-Served-By: cache-iad-kcgs7200076-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 12, 22
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 6d0adc7d4e8ff7452cb017a1dc588a88cd467ceb
GET

https://github.githubassets.com/assets/keyboard-shortcuts-dialog-52a107eb77ae.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/keyboard-shortcuts-dialog-52a107eb77ae.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 9893
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Fri, 17 May 2024 03:01:11 GMT
ETag: 0x8DC761D9B99E19E
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 865572
Date: Mon, 27 May 2024 17:35:37 GMT
X-Served-By: cache-iad-kcgs7200176-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 6, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 2baf3231ff83761c27975c583bf3e92c34c14638
GET

https://github.githubassets.com/assets/sessions-458fee042571.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/sessions-458fee042571.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4364
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Tue, 14 May 2024 17:55:27 GMT
ETag: 0x8DC743F09CB6B73
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 1033109
Date: Mon, 27 May 2024 17:35:37 GMT
X-Served-By: cache-iad-kcgs7200163-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 5, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 81e3e62d83a682785686ed9c990cbb004b37763e
GET

https://github.githubassets.com/assets/hero-desktop-a38b0fd77b6c.webp

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/hero-desktop-a38b0fd77b6c.webp HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 105072
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/webp
Last-Modified: Fri, 03 Nov 2023 16:44:34 GMT
ETag: 0x8DBDC8C28E47862
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:37 GMT
Age: 989941
X-Served-By: cache-iad-kiad7000070-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 40, 724
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: d65e08ec62a720fd31058aabc018701721c3ef6c
GET

https://github.githubassets.com/assets/3m-0151c2fda0ce.svg

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/3m-0151c2fda0ce.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 1043
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Wed, 25 Oct 2023 15:44:25 GMT
ETag: 0x8DBD57144584E52
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:37 GMT
Age: 2172815
X-Served-By: cache-iad-kcgs7200056-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 45, 705
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 6669c15c11c477fbcf3ab0095c48cb77ecb36f7e
GET

https://github.githubassets.com/assets/sap-96248a56d312.svg

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/sap-96248a56d312.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 2583
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Wed, 25 Oct 2023 15:44:31 GMT
ETag: 0x8DBD57147E34473
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:38 GMT
Age: 4337431
X-Served-By: cache-iad-kiad7000145-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 27, 713
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 37757dbc80e30b3ed3d71543a0478c51cc2f60b7
GET

https://github.githubassets.com/assets/telus-df0c2109df99.svg

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/telus-df0c2109df99.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3398
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 19 Oct 2023 22:56:32 GMT
ETag: 0x8DBD0F6A3AEA6EB
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:38 GMT
Age: 455267
X-Served-By: cache-iad-kjyo7100131-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 31, 722
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 757d89798c7c57a2747cebc9a612b916ba928ef2
GET

https://github.githubassets.com/assets/illu-copilot-editor-6474457a5b19.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/illu-copilot-editor-6474457a5b19.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 241485
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Thu, 02 Nov 2023 13:18:10 GMT
ETag: 0x8DBDBA6293AFF42
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:38 GMT
Age: 2341387
X-Served-By: cache-iad-kiad7000059-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 26936, 731
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 0e9267cadcbbf2e5aec3d1e2265f0da98bccdd6a
GET

https://github.githubassets.com/assets/git-branch-productivity-c304b83d09c7.svg

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/git-branch-productivity-c304b83d09c7.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3106
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 19 Oct 2023 22:56:23 GMT
ETag: 0x8DBD0F69E1D306E
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:38 GMT
Age: 1148375
X-Served-By: cache-iad-kcgs7200026-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 28, 258
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: d093388afa0f70cf38dac512cac1fdbd2af75c9e
GET

https://github.githubassets.com/assets/bg-glow-purple-6e9a6a96cb04.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/bg-glow-purple-6e9a6a96cb04.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 617
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Fri, 03 Nov 2023 16:32:00 GMT
ETag: 0x8DBDC8A6790B80A
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:38 GMT
Age: 3398570
X-Served-By: cache-iad-kcgs7200038-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 38, 638
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: c710a21da5ded85155d20dc958abc15b3a15bd28
GET

https://github.githubassets.com/assets/illu-codespaces-1d2d17e8b2b7.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/illu-codespaces-1d2d17e8b2b7.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 86803
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Fri, 27 Oct 2023 14:48:11 GMT
ETag: 0x8DBD6FBBE1E78F4
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:38 GMT
Age: 1753958
X-Served-By: cache-iad-kiad7000125-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 38743, 22
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 8cfde1437ed0f8b3e1a4f429088e33ae9aa6304a
GET

https://github.githubassets.com/assets/illu-code-scanning-fc9dfb212aa3.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/illu-code-scanning-fc9dfb212aa3.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 70105
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Thu, 19 Oct 2023 22:56:25 GMT
ETag: 0x8DBD0F69F297AB9
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:39 GMT
Age: 1914458
X-Served-By: cache-iad-kiad7000123-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 20448, 1
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: c0a5451de5c64cd3e95371b619decc45d1846c6a
GET

https://github.githubassets.com/assets/illu-secret-scanning-2-88fb429376d6.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/illu-secret-scanning-2-88fb429376d6.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 37410
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Thu, 26 Oct 2023 15:51:00 GMT
ETag: 0x8DBD63B59C20B5B
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 2706523
Date: Mon, 27 May 2024 17:35:39 GMT
X-Served-By: cache-iad-kiad7000071-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 24, 0
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 691e77e16187f4234408a7d04f63da75bd28fd7b
GET

https://github.githubassets.com/assets/issues-plan-2-46d1ce1d4519.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/issues-plan-2-46d1ce1d4519.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 127003
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Mon, 30 Oct 2023 13:22:10 GMT
ETag: 0x8DBD94B3926D7AF
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:39 GMT
Age: 2193577
X-Served-By: cache-iad-kcgs7200128-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 4001, 1
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: e6019b2e22038b6c543ed9b77dabd76d32d98cf9
GET

https://github.githubassets.com/assets/illu-projects-2-26077f1dd188.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/illu-projects-2-26077f1dd188.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 39261
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Thu, 26 Oct 2023 15:51:00 GMT
ETag: 0x8DBD63B59BFC3FE
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:39 GMT
Age: 1677697
X-Served-By: cache-iad-kjyo7100129-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 31652, 1
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 1be682db19c848965a95c20db5cb6cda36e9db6b
GET

https://github.githubassets.com/assets/illu-pull-requests-2-280cc958fc05.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/illu-pull-requests-2-280cc958fc05.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 35090
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Fri, 27 Oct 2023 13:57:40 GMT
ETag: 0x8DBD6F4AF740331
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:39 GMT
Age: 1743698
X-Served-By: cache-iad-kcgs7200121-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 11459, 21
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 127bf580d79640cb9bd943011afb2e87edc771e5
GET

https://github.githubassets.com/assets/commandpost-18d45fffda67.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/commandpost-18d45fffda67.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 35498
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Thu, 19 Oct 2023 22:56:20 GMT
ETag: 0x8DBD0F69C3CF88B
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:39 GMT
Age: 363545
X-Served-By: cache-iad-kiad7000179-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 38288, 3
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: cb001e0a5f0434091f2360079f703613138086d4
GET

https://github.githubassets.com/assets/yyx990803-e11c7b140b17.jpeg

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/yyx990803-e11c7b140b17.jpeg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 7993
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/jpeg
Last-Modified: Thu, 19 Oct 2023 22:56:36 GMT
ETag: 0x8DBD0F6A5AE9F1B
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 4333718
Date: Mon, 27 May 2024 17:35:39 GMT
X-Served-By: cache-iad-kjyo7100173-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 4836, 0
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: db27436652c2da196a21f2d41adbd70d22cfd519
GET

https://github.githubassets.com/assets/curl-24ff778d1afc.jpeg

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/curl-24ff778d1afc.jpeg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5316
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/jpeg
Last-Modified: Thu, 19 Oct 2023 22:56:20 GMT
ETag: 0x8DBD0F69C5C1D48
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:39 GMT
Age: 547434
X-Served-By: cache-iad-kiad7000127-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 14830, 44
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: adece2015af0368dc7bc768cb35d070673679383
GET

https://github.githubassets.com/assets/kazupon-d7aeb7b8df20.jpeg

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/kazupon-d7aeb7b8df20.jpeg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3898
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/jpeg
Last-Modified: Thu, 19 Oct 2023 22:56:26 GMT
ETag: 0x8DBD0F69FDE1CA7
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 893078
Date: Mon, 27 May 2024 17:35:39 GMT
X-Served-By: cache-iad-kiad7000066-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 1, 0
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 31092a835a9acc1d8d67bc874e66ec21cab570ac
GET

https://github.githubassets.com/assets/footer-copilot-54114bfd1d20.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/footer-copilot-54114bfd1d20.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 14889
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Fri, 03 Nov 2023 14:46:32 GMT
ETag: 0x8DBDC7BABCF81C2
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:39 GMT
Age: 1685740
X-Served-By: cache-iad-kiad7000173-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 53967, 8
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: c23792b4cb9d991f8b3df1f9bcb7113b64b9472c
GET

https://github.githubassets.com/assets/footer-star-36e5b5724973.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/footer-star-36e5b5724973.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 2681
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Fri, 03 Nov 2023 14:46:32 GMT
ETag: 0x8DBDC7BABCFA842
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:40 GMT
Age: 2864762
X-Served-By: cache-iad-kjyo7100039-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 1, 9
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 1c7b93fb0d94085a4405cc44147e4216faa80370
GET

https://github.githubassets.com/assets/footer-orb-a0438104a7a2.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/footer-orb-a0438104a7a2.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 9318
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Fri, 03 Nov 2023 14:46:32 GMT
ETag: 0x8DBDC7BABCF81C2
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:40 GMT
Age: 1161879
X-Served-By: cache-iad-kiad7000074-IAD, cache-lcy-eglc8600027-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 1, 6
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: f911a8c0a46f3491e545537a9cc3632d3c70b811
GET

https://github.githubassets.com/assets/dark-4589f64a2275.css

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/dark-4589f64a2275.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 7114
Cache-Control: public, max-age=31536000, immutable
Content-Type: text/css
Last-Modified: Thu, 16 May 2024 22:17:16 GMT
ETag: 0x8DC75F5F1BC2758
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:33 GMT
Age: 868887
X-Served-By: cache-iad-kjyo7100020-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 10, 4
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 4cb7503eb0f5b5434177b72dbe5a3759c0854106
GET

https://github.githubassets.com/assets/primer-fa3434a1ba0a.css

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/primer-fa3434a1ba0a.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 44082
Cache-Control: public, max-age=31536000, immutable
Content-Type: text/css
Last-Modified: Tue, 14 May 2024 20:40:11 GMT
ETag: 0x8DC74560D18760C
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 1090856
Date: Mon, 27 May 2024 17:35:34 GMT
X-Served-By: cache-iad-kiad7000065-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 23, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 56bba13d514daeb31d31c9a0ef77392e1ff3b4e5
GET

https://github.githubassets.com/assets/global-31defe89cafd.css

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/global-31defe89cafd.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 42015
Cache-Control: public, max-age=31536000, immutable
Content-Type: text/css
Last-Modified: Fri, 17 May 2024 10:38:02 GMT
ETag: 0x8DC765D6D72313A
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 868888
Date: Mon, 27 May 2024 17:35:34 GMT
X-Served-By: cache-iad-kjyo7100174-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 11, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 36e9a4db5a2edde78276223ad1121efb00dc1836
GET

https://github.githubassets.com/assets/discussions-14bed0f2ace1.css

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/discussions-14bed0f2ace1.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 1393
Cache-Control: public, max-age=31536000, immutable
Content-Type: text/css
Last-Modified: Tue, 07 May 2024 20:04:53 GMT
ETag: 0x8DC6ED0F5BC49AC
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 1458156
Date: Mon, 27 May 2024 17:35:34 GMT
X-Served-By: cache-iad-kcgs7200057-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 2, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 2587197bb376b10d9979442f3af358651360376f
GET

https://github.githubassets.com/assets/home-f57bcc4383d0.css

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/home-f57bcc4383d0.css HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 1447
Cache-Control: public, max-age=31536000, immutable
Content-Type: text/css
Last-Modified: Fri, 10 May 2024 00:32:18 GMT
ETag: 0x8DC7088A5FB8D8E
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 1193920
Date: Mon, 27 May 2024 17:35:34 GMT
X-Served-By: cache-iad-kjyo7100179-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 11, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 15046b04c0f5569583d3d8eac509abf684b7b0be
GET

https://github.githubassets.com/assets/vendors-node_modules_dompurify_dist_purify_js-810e4b1b9abd.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_dompurify_dist_purify_js-810e4b1b9abd.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 8194
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 16:01:09 GMT
ETag: 0x8DC6F7813A19979
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:34 GMT
Age: 1204386
X-Served-By: cache-iad-kiad7000099-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 20, 2
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 2169cb5a143ebd6ff80ae5f5c9958b0daa43774b
GET

https://github.githubassets.com/assets/vendors-node_modules_smoothscroll-polyfill_dist_smoothscroll_js-node_modules_stacktrace-parse-a448e4-f17a27f30529.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_smoothscroll-polyfill_dist_smoothscroll_js-node_modules_stacktrace-parse-a448e4-f17a27f30529.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4867
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 16:01:11 GMT
ETag: 0x8DC6F7814C3C466
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:34 GMT
Age: 1204386
X-Served-By: cache-iad-kjyo7100133-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 21, 2
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 48b1e30c5515865b21c1f0aa814c47b1ca5ffa6c
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-c7679f99a1f3.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-c7679f99a1f3.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3353
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 16:01:10 GMT
ETag: 0x8DC6F78143177D8
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:34 GMT
Age: 1204386
X-Served-By: cache-iad-kiad7000055-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 20, 1
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: d449cdb201b3a6d97c0625a6e744164a7119ad7c
GET

https://github.githubassets.com/assets/vendors-node_modules_github_relative-time-element_dist_index_js-c76945c5961a.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_github_relative-time-element_dist_index_js-c76945c5961a.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4795
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Fri, 26 Jan 2024 14:37:34 GMT
ETag: 0x8DC1E7C55AB5C06
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:34 GMT
Age: 3463991
X-Served-By: cache-iad-kjyo7100082-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 41040, 648
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 8493101abf160ee1cf2ed7aebc6bc59f5a0e6101
GET

https://github.githubassets.com/assets/vendors-node_modules_github_auto-complete-element_dist_index_js-node_modules_github_catalyst_-392fe4-1327b94f3269.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_github_auto-complete-element_dist_index_js-node_modules_github_catalyst_-392fe4-1327b94f3269.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 8238
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 15 May 2024 11:46:02 GMT
ETag: 0x8DC74D498FC5CB4
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 1050101
Date: Mon, 27 May 2024 17:35:34 GMT
X-Served-By: cache-iad-kjyo7100170-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 12, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 854d862559d7f4e1545d2894e20c3589b18cef9b
GET

https://github.githubassets.com/assets/vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-b7d8f4-6e6f83bcc978.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-b7d8f4-6e6f83bcc978.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5673
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 16:01:09 GMT
ETag: 0x8DC6F7813D32028
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:34 GMT
Age: 1075834
X-Served-By: cache-iad-kiad7000078-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 48, 4
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 87c88e9461cc18a82068052a7cc7e030bb4d4af3
GET

https://github.githubassets.com/assets/app_assets_modules_github_onfocus_ts-ui_packages_trusted-types-policies_policy_ts-ui_packages-6fe316-ae5060590d17.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/app_assets_modules_github_onfocus_ts-ui_packages_trusted-types-policies_policy_ts-ui_packages-6fe316-ae5060590d17.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5407
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Sat, 18 May 2024 00:23:47 GMT
ETag: 0x8DC76D0C8D26836
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:34 GMT
Age: 834359
X-Served-By: cache-iad-kiad7000112-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 25, 2
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: ed55476bcc38d511b329faa590e02b0fa9a63193
GET

https://github.githubassets.com/assets/github-elements-524aae40a1ff.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/github-elements-524aae40a1ff.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 9962
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Fri, 24 May 2024 17:13:07 GMT
ETag: 0x8DC7C14C7EE3635
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 250931
Date: Mon, 27 May 2024 17:35:35 GMT
X-Served-By: cache-iad-kiad7000104-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 46, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: e73006398b9faa13e68efdc072942dcc449c5876
GET

https://github.githubassets.com/assets/vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_githu-fd5530-141bf1a3abfb.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_githu-fd5530-141bf1a3abfb.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 7428
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 16:01:09 GMT
ETag: 0x8DC6F78139F2B34
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:35 GMT
Age: 1204387
X-Served-By: cache-iad-kiad7000084-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 49, 5
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 40c6ad6b8d64fabbc457e58ee100018663a339b9
GET

https://github.githubassets.com/assets/vendors-node_modules_morphdom_dist_morphdom-esm_js-node_modules_github_memoize_dist_esm_index_js-8d7117d67c36.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_morphdom_dist_morphdom-esm_js-node_modules_github_memoize_dist_esm_index_js-8d7117d67c36.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 2321
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 16:01:10 GMT
ETag: 0x8DC6F78143150ED
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:35 GMT
Age: 1204387
X-Served-By: cache-iad-kjyo7100055-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 51, 2
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 33ea84d376ac31d36eac4f5418b314377ba2a6c3
GET

https://github.githubassets.com/assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-1cea0f5eff45.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-1cea0f5eff45.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 19527
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 16:01:10 GMT
ETag: 0x8DC6F78143BA58C
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:35 GMT
Age: 1204387
X-Served-By: cache-iad-kcgs7200093-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 51, 443
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: a7931d52bb996b6e1ad4d712d37e8f4657dcb99f
GET

https://github.githubassets.com/assets/vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_github_hotkey-1a1d91-1bb71f3f93c2.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_github_hotkey-1a1d91-1bb71f3f93c2.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4803
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 19:43:27 GMT
ETag: 0x8DC6F9721624649
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:35 GMT
Age: 1204387
X-Served-By: cache-iad-kjyo7100151-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 50, 5
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 23296d68e61d0ae0b66f11b82f11a511e736b5a9
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_dimensions_js-node_modules_github_jtml_lib_index_js-b1947a1d4855.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_primer_behaviors_dist_esm_dimensions_js-node_modules_github_jtml_lib_index_js-b1947a1d4855.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3172
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 16:01:10 GMT
ETag: 0x8DC6F7814321362
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:35 GMT
Age: 1204387
X-Served-By: cache-iad-kiad7000164-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 51, 62
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: aecd464596b3211bce999f9ac1732bc21019a78e
GET

https://github.githubassets.com/assets/vendors-node_modules_github_quote-selection_dist_index_js-node_modules_github_textarea-autosi-9e0349-704599a61056.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_github_quote-selection_dist_index_js-node_modules_github_textarea-autosi-9e0349-704599a61056.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 10047
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 16:01:09 GMT
ETag: 0x8DC6F7813DDC289
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 1204388
Date: Mon, 27 May 2024 17:35:35 GMT
X-Served-By: cache-iad-kjyo7100050-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 51, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 83ea11bb6ffcc063420b8b41bccef2f2ddb6a37b
GET

https://github.githubassets.com/assets/app_assets_modules_github_sticky-scroll-into-view_ts-72d6e7bfb28f.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/app_assets_modules_github_sticky-scroll-into-view_ts-72d6e7bfb28f.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3474
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 15 May 2024 14:23:39 GMT
ETag: 0x8DC74EA9D7B743E
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 980324
Date: Mon, 27 May 2024 17:35:35 GMT
X-Served-By: cache-iad-kjyo7100102-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 12, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 8dd82bf2621798e1a563120ca6b05e50ed3cceeb
GET

https://github.githubassets.com/assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-5276a3faf037.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-5276a3faf037.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3320
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Fri, 10 May 2024 20:29:01 GMT
ETag: 0x8DC712FD44B22DD
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 1204387
Date: Mon, 27 May 2024 17:35:35 GMT
X-Served-By: cache-iad-kjyo7100179-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 52, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 93a60231bd840fc13cc212d4164ae86f1db2b40f
GET

https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-2ea61fcc9a71.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-2ea61fcc9a71.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4305
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Tue, 06 Feb 2024 08:35:48 GMT
ETag: 0x8DC26EE9E556F64
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:36 GMT
Age: 3461654
X-Served-By: cache-iad-kiad7000150-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 50, 608
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 8b09fe0ea63c6463c9bfcaf1afe63c0f79c8962e
GET

https://github.githubassets.com/assets/notifications-global-0409f6303340.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/notifications-global-0409f6303340.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3302
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Thu, 23 May 2024 09:12:44 GMT
ETag: 0x8DC7B088172AD45
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:36 GMT
Age: 11354
X-Served-By: cache-iad-kjyo7100071-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 43, 2
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 323aa7fcd50c68cb4c9acd75fd4166d4493ab999
GET

https://github.githubassets.com/assets/marketing-3743ee096195.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/marketing-3743ee096195.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 8830
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Fri, 24 May 2024 20:51:33 GMT
ETag: 0x8DC7C334BB82191
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 235017
Date: Mon, 27 May 2024 17:35:36 GMT
X-Served-By: cache-iad-kiad7000099-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 39, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: e862ca426a8bc3036b353859e6a72efad6d46ff4
GET

https://github.githubassets.com/assets/vendors-node_modules_github_webgl-globe_dist_js_main_js-29e1228a273e.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_github_webgl-globe_dist_js_main_js-29e1228a273e.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 150545
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 16:01:10 GMT
ETag: 0x8DC6F78144B7246
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 1204222
Date: Mon, 27 May 2024 17:35:36 GMT
X-Served-By: cache-iad-kjyo7100107-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 18, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 3635b0ebf21f054f6f3292aa681cc824defe8416
GET

https://github.githubassets.com/assets/react-lib-dc88c1a68b28.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/react-lib-dc88c1a68b28.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 68391
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 16:01:06 GMT
ETag: 0x8DC6F7811E7D0C5
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:36 GMT
Age: 1204388
X-Served-By: cache-iad-kcgs7200105-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 52, 2
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 06ab07ce97b265997182af0e5d6edf0d0e185d7f
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Box_Box_js-8f8c5e2a2cbf.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_primer_react_lib-esm_Box_Box_js-8f8c5e2a2cbf.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4739
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Thu, 08 Feb 2024 11:06:17 GMT
ETag: 0x8DC2895F91375BB
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:36 GMT
Age: 1742478
X-Served-By: cache-iad-kjyo7100097-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 87802, 636
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: b00d36a486a6c3cd8784ec8f091819bff2ecfde9
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_FeatureFlags_FeatureFlags_js-node_modules_github_ca-9009bd-47065f21e9ac.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_primer_react_lib-esm_FeatureFlags_FeatureFlags_js-node_modules_github_ca-9009bd-47065f21e9ac.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 2724
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 15 May 2024 11:46:03 GMT
ETag: 0x8DC74D4995B4FF7
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:36 GMT
Age: 1050102
X-Served-By: cache-iad-kcgs7200119-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 10, 381
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 860eee8bc74062cbd5c160c1b2d2bd160ab15ad7
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-334106258bdb.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-334106258bdb.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 6463
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 22 May 2024 22:19:06 GMT
ETag: 0x8DC7AAD31CB566F
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 335878
Date: Mon, 27 May 2024 17:35:36 GMT
X-Served-By: cache-iad-kjyo7100072-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 46, 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: e97490b9b5b4121df3ff50c4811e2ece7cf0ceb1
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js-9e50e37cd494.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js-9e50e37cd494.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 6545
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Tue, 14 May 2024 17:01:39 GMT
ETag: 0x8DC743785B20E62
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:36 GMT
Age: 1121308
X-Served-By: cache-iad-kiad7000060-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 32, 22
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 9fd226b214014704697641b83dee2676ff37645f
GET

https://github.githubassets.com/assets/ui_packages_react-core_create-browser-history_ts-ui_packages_safe-storage_safe-storage_ts-ui_-682c2c-44ed51a2083d.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/ui_packages_react-core_create-browser-history_ts-ui_packages_safe-storage_safe-storage_ts-ui_-682c2c-44ed51a2083d.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 4479
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Sat, 18 May 2024 00:23:55 GMT
ETag: 0x8DC76D0CD61B10C
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:37 GMT
Age: 834349
X-Served-By: cache-iad-kiad7000109-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 23, 4
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 7c21364b4f8942b5b314e7629983d5105c8c0736
GET

https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-94fd67-8743f7dc256e.js

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-94fd67-8743f7dc256e.js HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5445
Cache-Control: public, max-age=31536000, immutable
Content-Type: application/javascript
Last-Modified: Wed, 08 May 2024 16:01:09 GMT
ETag: 0x8DC6F7813D8BF1F
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:37 GMT
Age: 464917
X-Served-By: cache-iad-kjyo7100143-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 79, 1
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: eb58ec1623a70c8b6a9b61d049b0cdf366a4fd4c
GET

https://github.githubassets.com/assets/hero-mobile-7163f4f5de41.webp

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/hero-mobile-7163f4f5de41.webp HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 25912
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/webp
Last-Modified: Fri, 03 Nov 2023 16:44:34 GMT
ETag: 0x8DBDC8C28E47862
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:37 GMT
Age: 2983967
X-Served-By: cache-iad-kcgs7200155-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 43, 3689
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 1c0469b9b15eb2128fcd31caa4b6594568f76d5a
GET

https://github.githubassets.com/assets/kpmg-c249f20c5173.svg

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/kpmg-c249f20c5173.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 2777
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 19 Oct 2023 22:56:26 GMT
ETag: 0x8DBD0F69FDA2986
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:37 GMT
Age: 2356576
X-Served-By: cache-iad-kcgs7200032-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 44, 3701
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 1be242ef6e25733fd38d60ff2510e04833ab5d78
GET

https://github.githubassets.com/assets/mercedes-fcf97d2d6ec4.svg

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/mercedes-fcf97d2d6ec4.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 7133
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 19 Oct 2023 22:56:27 GMT
ETag: 0x8DBD0F6A095C86B
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:37 GMT
Age: 4349589
X-Served-By: cache-iad-kjyo7100021-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 1743, 3700
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 59ce6a228e1ea58b1c4a54ff0b42cabefcd0dcbc
GET

https://github.githubassets.com/assets/pg-f1f19955c4e4.svg

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/pg-f1f19955c4e4.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 2848
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 19 Oct 2023 22:56:29 GMT
ETag: 0x8DBD0F6A1A7D89E
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:38 GMT
Age: 4365308
X-Served-By: cache-iad-kiad7000129-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 6, 3658
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: ac2c5443fc715b8af554d137572461c3c1c3e022
GET

https://github.githubassets.com/assets/shape-0-df97fa6b0c27.svg

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/shape-0-df97fa6b0c27.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 480
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 02 Nov 2023 15:40:07 GMT
ETag: 0x8DBDBB9FDDDA076
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:38 GMT
Age: 1766153
X-Served-By: cache-iad-kiad7000097-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 20, 3308
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: bcb7b0c0a8f650892a8eaaf5cdbf41e0124b291d
GET

https://github.githubassets.com/assets/shape-1-c219318e479a.svg

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/shape-1-c219318e479a.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 978
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 02 Nov 2023 15:40:07 GMT
ETag: 0x8DBDBB9FDDE62ED
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:38 GMT
Age: 4406529
X-Served-By: cache-iad-kjyo7100069-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 17, 1213
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: db5c8ea20e35ce5bf3b5c49ad84424711a4e0895
GET

https://github.githubassets.com/assets/illu-copilot-sidebar-3d2efb504577.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/illu-copilot-sidebar-3d2efb504577.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 53004
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Wed, 25 Oct 2023 16:17:38 GMT
ETag: 0x8DBD575E827EDAC
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:38 GMT
Age: 2017547
X-Served-By: cache-iad-kjyo7100096-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 40, 3363
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: aacd393df1d61141af087541e6dd7118aa3a8b1d
GET

https://github.githubassets.com/assets/illu-actions-2-c5178134f381.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/illu-actions-2-c5178134f381.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 88773
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Tue, 31 Oct 2023 15:56:17 GMT
ETag: 0x8DBDA29EAE3C96B
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:38 GMT
Age: 2946757
X-Served-By: cache-iad-kjyo7100087-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 25, 107
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 45fd42d9bd8ecc4dd6822d2d169e25bc0b75ba63
GET

https://github.githubassets.com/assets/illu-mobile-chat-dc2418cc6775.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/illu-mobile-chat-dc2418cc6775.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 157575
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Mon, 06 May 2024 16:37:35 GMT
ETag: 0x8DC6DEAD5D071B0
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 1730523
Date: Mon, 27 May 2024 17:35:38 GMT
X-Served-By: cache-iad-kjyo7100042-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 18, 0
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 1186b466eb67fb7b38c45d7a28e14dabe5429aa2
GET

https://github.githubassets.com/assets/shape-2-f30dcc9bd35c.svg

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/shape-2-f30dcc9bd35c.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 1107
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 02 Nov 2023 15:40:07 GMT
ETag: 0x8DBDBB9FDDE62ED
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:38 GMT
Age: 1834537
X-Served-By: cache-iad-kjyo7100133-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 29170, 444
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 425f3ebaf6bf0ca02cd6470ce2771ff4cd3ba4de
GET

https://github.githubassets.com/assets/git-branch-security-2-f6a799957581.svg

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/git-branch-security-2-f6a799957581.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3404
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 02 Nov 2023 20:14:54 GMT
ETag: 0x8DBDBE060A4DF71
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 4359698
Date: Mon, 27 May 2024 17:35:38 GMT
X-Served-By: cache-iad-kjyo7100149-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 55929, 0
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: c4667540504610b0388f60da917add6a47f85ff2
GET

https://github.githubassets.com/assets/illu-ghas-list-84af1f1ce2b8.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/illu-ghas-list-84af1f1ce2b8.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 30587
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Thu, 26 Oct 2023 15:51:00 GMT
ETag: 0x8DBD63B59C0AD5E
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:38 GMT
Age: 3573698
X-Served-By: cache-iad-kjyo7100038-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 1, 450
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 1cc51c157ccbe8d6c95f896d814eee0cccd7861a
GET

https://github.githubassets.com/assets/bg-glow-blue-036b8dc2d1ce.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/bg-glow-blue-036b8dc2d1ce.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 1025
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Fri, 03 Nov 2023 16:32:00 GMT
ETag: 0x8DBDC8A6790DEF5
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:39 GMT
Age: 1828597
X-Served-By: cache-iad-kcgs7200097-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 81987, 427
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 0778ba7247696bc74f964007fd74911cd1bd87a1
GET

https://github.githubassets.com/assets/illu-dependabot-d98c73cc6724.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/illu-dependabot-d98c73cc6724.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 60260
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Thu, 19 Oct 2023 22:56:25 GMT
ETag: 0x8DBD0F69F216D77
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:39 GMT
Age: 2623123
X-Served-By: cache-iad-kiad7000143-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 7, 119
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 71db23c4ff7f2b8fd11c19bef2ebe5bfa4f469c3
GET

https://github.githubassets.com/assets/shape-3-9e542b5c31b8.svg

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/shape-3-9e542b5c31b8.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 1594
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 02 Nov 2023 15:40:07 GMT
ETag: 0x8DBDBB9FDDEB0B1
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:39 GMT
Age: 1822451
X-Served-By: cache-iad-kcgs7200101-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 7962, 377
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 75a83a692f4f62d8bec6dedabaedaf843c3dc305
GET

https://github.githubassets.com/assets/git-branch-collaboration-2-e46b1fb1d363.svg

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/git-branch-collaboration-2-e46b1fb1d363.svg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3388
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/svg+xml
Last-Modified: Thu, 02 Nov 2023 20:14:54 GMT
ETag: 0x8DBDBE060A6FFE4
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:39 GMT
Age: 434922
X-Served-By: cache-iad-kiad7000095-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 1, 13
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 7e2c47d9aa75fd04e9017b2baf405df1b77aec81
GET

https://github.githubassets.com/assets/illu-discussions-2-b915a6dd867e.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/illu-discussions-2-b915a6dd867e.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 81599
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Mon, 30 Oct 2023 13:22:10 GMT
ETag: 0x8DBD94B38DAE1CF
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 3389025
Date: Mon, 27 May 2024 17:35:39 GMT
X-Served-By: cache-iad-kiad7000110-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 9, 0
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: ffa9a81e062619d45a8f5d92d83fb23a46bb645f
GET

https://github.githubassets.com/assets/directus-4da9e46da0ac.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/directus-4da9e46da0ac.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 8268
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Thu, 19 Oct 2023 22:56:21 GMT
ETag: 0x8DBD0F69CF7FBEB
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:39 GMT
Age: 2246314
X-Served-By: cache-iad-kcgs7200072-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 9275, 297
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: fd901cd4dc97a936562e22c761d5aec9c0e0be4e
GET

https://github.githubassets.com/assets/imolorhe-9d771b1d4332.jpeg

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/imolorhe-9d771b1d4332.jpeg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3785
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/jpeg
Last-Modified: Thu, 19 Oct 2023 22:56:25 GMT
ETag: 0x8DBD0F69F1D7A4A
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:39 GMT
Age: 2428480
X-Served-By: cache-iad-kjyo7100048-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 8, 273
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 4a9cc1f750ec1ae7010c5d1cb78f66aee4d9e5b9
GET

https://github.githubassets.com/assets/prophen-da9b089d8a25.jpeg

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/prophen-da9b089d8a25.jpeg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 6448
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/jpeg
Last-Modified: Thu, 19 Oct 2023 22:56:30 GMT
ETag: 0x8DBD0F6A21E0A25
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:39 GMT
Age: 1910319
X-Served-By: cache-iad-kcgs7200133-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 67324, 276
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: c0df6c3e9503e1ca459ff6f3e16ff0b891e66284
GET

https://github.githubassets.com/assets/eslint-33bd6140c37f.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/eslint-33bd6140c37f.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3413
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Thu, 19 Oct 2023 22:56:22 GMT
ETag: 0x8DBD0F69D76D64B
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 1748679
Date: Mon, 27 May 2024 17:35:39 GMT
X-Served-By: cache-iad-kjyo7100041-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 32070, 0
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: c15a9aa9dc2616ebd269853964aeabf4b667bc76
GET

https://github.githubassets.com/assets/sindresorhus-d3224f241a4d.jpeg

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/sindresorhus-d3224f241a4d.jpeg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 5708
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/jpeg
Last-Modified: Thu, 19 Oct 2023 22:56:31 GMT
ETag: 0x8DBD0F6A3076376
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:39 GMT
Age: 1795359
X-Served-By: cache-iad-kiad7000052-IAD, cache-lcy-eglc8600093-LCY
X-Cache: MISS, HIT
X-Cache-Hits: 0, 279
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 01436770c55e4421ea394c6d26378de8b8be4fd6
GET

https://github.githubassets.com/assets/globe-d6f3f4ee645a.jpg

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/globe-d6f3f4ee645a.jpg HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 121231
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/jpeg
Last-Modified: Thu, 19 Oct 2023 22:56:24 GMT
ETag: 0x8DBD0F69E5A42C7
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:39 GMT
Age: 2093679
X-Served-By: cache-iad-kiad7000095-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 37, 151
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: d09aeabf03bdb86e3aadd84f6fbaf2ee6150f1d0
GET

https://github.githubassets.com/assets/footer-mona-d1c861cd8018.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/footer-mona-d1c861cd8018.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 24094
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Fri, 03 Nov 2023 14:46:32 GMT
ETag: 0x8DBDC7BABCFF60E
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:40 GMT
Age: 2683297
X-Served-By: cache-iad-kjyo7100020-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 14140, 359
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 08df08536942c5dc8ebf93dbb1761d94f404248c
GET

https://github.githubassets.com/assets/footer-diamond-ed642fc95144.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/footer-diamond-ed642fc95144.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 3987
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Fri, 03 Nov 2023 14:46:32 GMT
ETag: 0x8DBDC7BABCDAEAC
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:40 GMT
Age: 3480759
X-Served-By: cache-iad-kiad7000066-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 1054, 359
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 761be2a790e0ffb1e2717a62a93f3c2186ba870b
GET

https://github.githubassets.com/assets/footer-blur-8bc8e1f23df6.png

powershell.exe

Remote address:

185.199.109.154:443

Request

GET /assets/footer-blur-8bc8e1f23df6.png HTTP/1.1
Accept: */*
Accept-Language: en-US
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: github.githubassets.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 6601
Cache-Control: public, max-age=31536000, immutable
Content-Type: image/png
Last-Modified: Fri, 03 Nov 2023 14:46:32 GMT
ETag: 0x8DBDC7BABCF5A85
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 27 May 2024 17:35:40 GMT
Age: 1766079
X-Served-By: cache-iad-kiad7000097-IAD, cache-lcy-eglc8600093-LCY
X-Cache: HIT, HIT
X-Cache-Hits: 14928, 336
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
X-Fastly-Request-ID: 53088acaf1c4890c2518dc2c3167915a86cb7874
DNS

154.109.199.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

154.109.199.185.in-addr.arpa

IN PTR

Response

154.109.199.185.in-addr.arpa

IN PTR

cdn-185-199-109-154githubcom
DNS

26.165.165.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

26.165.165.52.in-addr.arpa

IN PTR

Response
DNS

171.39.242.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

171.39.242.20.in-addr.arpa

IN PTR

Response
DNS

133.211.185.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

133.211.185.52.in-addr.arpa

IN PTR

Response
DNS

240.221.184.93.in-addr.arpa

Remote address:

8.8.8.8:53

Request

240.221.184.93.in-addr.arpa

IN PTR

Response
DNS

213.143.182.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

213.143.182.52.in-addr.arpa

IN PTR

Response

3.120.98.217:8080

04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe

260 B
5
185.199.108.133:443

https://raw.githubusercontent.com/

tls, http

powershell.exe

979 B
6.0kB
11
13

HTTP Request

GET https://raw.githubusercontent.com/

HTTP Response

301
20.26.156.215:443

https://github.com/

tls, http

powershell.exe

5.0kB
250.3kB
99
185

HTTP Request

GET https://github.com/

HTTP Response

200
185.199.109.154:443

https://github.githubassets.com/assets/footer-orb-a0438104a7a2.png

tls, http

powershell.exe

70.7kB
1.3MB
1043
1042

HTTP Request

GET https://github.githubassets.com/assets/light-f552bab6ce72.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/primer-primitives-4cbeaa0795ef.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/github-151c896d0930.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/dashboard-a6d30410cd03.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/site-f8e2af77e017.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/wp-runtime-cc613172fd3f.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-4ac41d0a76fd.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/environment-2168885ea2b8.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_selector-observer_dist_index_esm_js-9f960d9b217c.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_combobox-nav_dist_index_js-node_modules_github_markdown-toolbar-e-820fc0-1176135e4d90.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_text-expander-element_dist_index_js-b2135edb5ced.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_stacktrace-parser_dist_stack-8585c6-b62c48e55af5.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-3959a9-8b35cf73f178.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/element-registry-0909f749db2e.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_lit-html_lit-html_js-cc7cb714ead5.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-880ac2bbb719.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_color-convert_index_js-94fdbf91204e.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_session-resume_dist_index_js-node_modules_primer_behaviors_dist_e-da6ec6-77ce2f267f4e.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_updatable-content_ts-4d91e80fb877.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_onfocus_ts-app_ass-421cec-d3af2356fb47.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_modules_github_behaviors_include-467754-25aa4f5b0d26.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/behaviors-b75fc2506ff4.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_stacktrace-parser_dist_stack-8189f0-31cd693b2264.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/home-5523b374aaa9.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/webgl-globe-d3e3295f0ac2.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_octicons-react_dist_index_esm_js-node_modules_primer_react_lib-es-541a38-c63b7a3484dd.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-97ed51d4f278.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_node_modules_primer_octicons-react_dist_index_esm_mjs-dc98a76c65d6.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_IconButton_js-node_modules_primer_react_lib--1cd808-6070bc6b2c67.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/keyboard-shortcuts-dialog-52a107eb77ae.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/sessions-458fee042571.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/hero-desktop-a38b0fd77b6c.webp

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/3m-0151c2fda0ce.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/sap-96248a56d312.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/telus-df0c2109df99.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-copilot-editor-6474457a5b19.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/git-branch-productivity-c304b83d09c7.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/bg-glow-purple-6e9a6a96cb04.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-codespaces-1d2d17e8b2b7.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-code-scanning-fc9dfb212aa3.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-secret-scanning-2-88fb429376d6.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/issues-plan-2-46d1ce1d4519.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-projects-2-26077f1dd188.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-pull-requests-2-280cc958fc05.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/commandpost-18d45fffda67.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/yyx990803-e11c7b140b17.jpeg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/curl-24ff778d1afc.jpeg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/kazupon-d7aeb7b8df20.jpeg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/footer-copilot-54114bfd1d20.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/footer-star-36e5b5724973.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/footer-orb-a0438104a7a2.png

HTTP Response

200
185.199.109.154:443

https://github.githubassets.com/assets/footer-blur-8bc8e1f23df6.png

tls, http

powershell.exe

72.3kB
1.3MB
1019
1018

HTTP Request

GET https://github.githubassets.com/assets/dark-4589f64a2275.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/primer-fa3434a1ba0a.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/global-31defe89cafd.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/discussions-14bed0f2ace1.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/home-f57bcc4383d0.css

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_dompurify_dist_purify_js-810e4b1b9abd.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_smoothscroll-polyfill_dist_smoothscroll_js-node_modules_stacktrace-parse-a448e4-f17a27f30529.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-c7679f99a1f3.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_relative-time-element_dist_index_js-c76945c5961a.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_auto-complete-element_dist_index_js-node_modules_github_catalyst_-392fe4-1327b94f3269.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-b7d8f4-6e6f83bcc978.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_onfocus_ts-ui_packages_trusted-types-policies_policy_ts-ui_packages-6fe316-ae5060590d17.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/github-elements-524aae40a1ff.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_githu-fd5530-141bf1a3abfb.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_morphdom_dist_morphdom-esm_js-node_modules_github_memoize_dist_esm_index_js-8d7117d67c36.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-1cea0f5eff45.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_github_hotkey-1a1d91-1bb71f3f93c2.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_dimensions_js-node_modules_github_jtml_lib_index_js-b1947a1d4855.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_quote-selection_dist_index_js-node_modules_github_textarea-autosi-9e0349-704599a61056.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_sticky-scroll-into-view_ts-72d6e7bfb28f.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-5276a3faf037.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-2ea61fcc9a71.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/notifications-global-0409f6303340.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/marketing-3743ee096195.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_webgl-globe_dist_js_main_js-29e1228a273e.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/react-lib-dc88c1a68b28.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Box_Box_js-8f8c5e2a2cbf.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_FeatureFlags_FeatureFlags_js-node_modules_github_ca-9009bd-47065f21e9ac.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-334106258bdb.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js-9e50e37cd494.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/ui_packages_react-core_create-browser-history_ts-ui_packages_safe-storage_safe-storage_ts-ui_-682c2c-44ed51a2083d.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-94fd67-8743f7dc256e.js

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/hero-mobile-7163f4f5de41.webp

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/kpmg-c249f20c5173.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/mercedes-fcf97d2d6ec4.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/pg-f1f19955c4e4.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/shape-0-df97fa6b0c27.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/shape-1-c219318e479a.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-copilot-sidebar-3d2efb504577.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-actions-2-c5178134f381.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-mobile-chat-dc2418cc6775.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/shape-2-f30dcc9bd35c.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/git-branch-security-2-f6a799957581.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-ghas-list-84af1f1ce2b8.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/bg-glow-blue-036b8dc2d1ce.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-dependabot-d98c73cc6724.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/shape-3-9e542b5c31b8.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/git-branch-collaboration-2-e46b1fb1d363.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/illu-discussions-2-b915a6dd867e.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/directus-4da9e46da0ac.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/imolorhe-9d771b1d4332.jpeg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/prophen-da9b089d8a25.jpeg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/eslint-33bd6140c37f.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/sindresorhus-d3224f241a4d.jpeg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/globe-d6f3f4ee645a.jpg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/footer-mona-d1c861cd8018.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/footer-diamond-ed642fc95144.png

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/footer-blur-8bc8e1f23df6.png

HTTP Response

200
3.120.98.217:8080

04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe

260 B
5
3.120.98.217:8080

04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe

260 B
5
3.120.98.217:8080

04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe

260 B
5
3.120.98.217:8080

04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe

260 B
5
3.120.98.217:8080

04485595732a1c9af08b695417b8fa50_NeikiAnalytics.exe

260 B
5

8.8.8.8:53

raw.githubusercontent.com

dns

powershell.exe

71 B
135 B
1
1

DNS Request

raw.githubusercontent.com

DNS Response

185.199.108.133

185.199.109.133

185.199.110.133

185.199.111.133
8.8.8.8:53

github.com

dns

powershell.exe

56 B
72 B
1
1

DNS Request

github.com

DNS Response

20.26.156.215
8.8.8.8:53

133.108.199.185.in-addr.arpa

dns

74 B
118 B
1
1

DNS Request

133.108.199.185.in-addr.arpa
8.8.8.8:53

215.156.26.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

215.156.26.20.in-addr.arpa
8.8.8.8:53

104.219.191.52.in-addr.arpa

dns

73 B
147 B
1
1

DNS Request

104.219.191.52.in-addr.arpa
8.8.8.8:53

172.210.232.199.in-addr.arpa

dns

74 B
128 B
1
1

DNS Request

172.210.232.199.in-addr.arpa
8.8.8.8:53

github.githubassets.com

dns

powershell.exe

69 B
133 B
1
1

DNS Request

github.githubassets.com

DNS Response

185.199.109.154

185.199.110.154

185.199.108.154

185.199.111.154
8.8.8.8:53

154.109.199.185.in-addr.arpa

dns

74 B
118 B
1
1

DNS Request

154.109.199.185.in-addr.arpa
8.8.8.8:53

26.165.165.52.in-addr.arpa

dns

72 B
146 B
1
1

DNS Request

26.165.165.52.in-addr.arpa
8.8.8.8:53

171.39.242.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

171.39.242.20.in-addr.arpa
8.8.8.8:53

133.211.185.52.in-addr.arpa

dns

73 B
147 B
1
1

DNS Request

133.211.185.52.in-addr.arpa
8.8.8.8:53

240.221.184.93.in-addr.arpa

dns

73 B
144 B
1
1

DNS Request

240.221.184.93.in-addr.arpa
8.8.8.8:53

213.143.182.52.in-addr.arpa

dns

73 B
147 B
1
1

DNS Request

213.143.182.52.in-addr.arpa

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_huksxdli.11r.ps1

Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
C:\Windows\System\CeSNOcq.exe

Filesize
2.6MB

MD5
0677bad69a951dc10c60a4685a8d51a3

SHA1
3540b00e5b48b8a2c7c99ab4c53bd6e12d5c6a47

SHA256
31a79c83ce8651012946ee6492d3fb96cbe9a3db8f972e0f48ca552cc2bda18c

SHA512
a2ef33994c59e836188e30643ac731b9a7bb155460305046cff49e851f2d2439883528333aafec47682a4144eaf7408c3489df00b0a269bdb582291d888e876e

Download Submit
C:\Windows\System\FnXLtcL.exe

Filesize
2.6MB

MD5
273d17c3c6ade1639a58e87e5b1fb377

SHA1
b68450ec1d673604baf5bebd1011646f9293c7a5

SHA256
6dd922536fde8f92c6b12839ee3b14bfbe39b74b9f29eae12a767ed2fb395023

SHA512
3633fc4c1292e8a6ad01e589d56cc321a51fec04a82d076744043a7f414efbf0f55cc54b95812b44f6ec86eb82d296de4d15dcec0635b7e7b16c548a8485f2a8

Download Submit
C:\Windows\System\GerXeBC.exe

Filesize
2.6MB

MD5
6262638b56735c0c4fdffbf8b3eef748

SHA1
dc196fb07844c8a6570e37253871a9d6c109bea3

SHA256
25a8ff7fe7ae1ff270280aa8391c895a8e8313763c40352b479971cab04bdbb9

SHA512
9b67a671c1fc3d8de1771a1ef294067eca64498071d18cf832c913b49a98bb198e6f39954bd259738a372510aa918715e92eb97f0c13b671ad7f5969ecac76b0

Download Submit
C:\Windows\System\KEmGGrN.exe

Filesize
2.6MB

MD5
6aef6c0fe6b000ef40c2dfc63ffc29c7

SHA1
b30ea08e909ca0893165ec0dd55b7996b8edc80f

SHA256
7882eb846c2514eaffb3d394e05d026bf50d23e78a0d7240847a043885304769

SHA512
942c9d564eb4ac6d93cbf02e393ccafcb274df2100a2112506f486e85d8121617d69177c917c0a01a8fc1968fbc3f322a44bfe9490e4ef7001239e525146b8e3

Download Submit
C:\Windows\System\LKTIFsd.exe

Filesize
2.6MB

MD5
dce11a249d552c385e3a6721d4c53988

SHA1
4a406fd9c48d2d9cbaafde5595f3254c2736bcb8

SHA256
a59a92524bc5832a4e17d23b3639a8412f931961ec21cad6eeff75939b699966

SHA512
75609c881ed730f7c44d88f48e5a8acb561e1e068aa210f48d583f130416b0cb24b31b8c6f5953a12edc1fd03c98d6e6ef2966d55791bf75727036bbbdae4c3a

Download Submit
C:\Windows\System\LqdmUMW.exe

Filesize
2.6MB

MD5
19a799eb24b7305bd680b18f944c4aa2

SHA1
115c744cf2b180c48e41f17d02e55ce53dd37dfc

SHA256
6da4a28bd2525530772762536843d9194898996039c94e1a9fddb8559f4b9aa9

SHA512
dcb171497469674216b8d709372ab3d48b86b635d4bbb27e161fd3e5e23cb395a7c8481a90dbdc98ad4550b9d3e531c032aa5c14ae685230f428dfa858d6214c

Download Submit
C:\Windows\System\NDKCPmj.exe

Filesize
2.6MB

MD5
9a6dfd042d1608cc69a36f5954959a26

SHA1
e4c8240a21ce3f6984d8de0a77332795bc583c7f

SHA256
0e309217d27638067eb71b8456c9237f973beb6b7331f84b32940425e0fb9cc4

SHA512
b173063f87993f6959cfb8a1c5af57a6d37e48dbb6910adadf373e36bd241ca8c180ba9e7ce1ec7f32fb6ebdb0a33f0328b212eb48c1309d9a06795104942bf8

Download Submit
C:\Windows\System\NaMNDnC.exe

Filesize
2.6MB

MD5
880ec22cad4ff6833c45c0a0f6cd4023

SHA1
5586712e9c87c8c12820ac9359fe59d6bc506840

SHA256
c7b1c354c31edc5a8150a8a2dd4feb95cb2d8afefa3ae10d90c221aed43b9a68

SHA512
9da145b4e4a559bdf30e8aa25800090f3a39ff2ea72fcb2010e2492c3f6cb16623ecea1014be77b000caeb8e4637f98776c9c880570d503033d6a23862af3a6a

Download Submit
C:\Windows\System\NqGPQYU.exe

Filesize
2.6MB

MD5
700233b0eb7dcd5b738a571aaa191afb

SHA1
36ce2ec8223ffdebcc42a35f30291b5f2c02033a

SHA256
02b46511c671f6222dd283f64de2db2c6c78340eb8edf8136324cbb100f8e9ba

SHA512
d027908426e57e584ba58b9ee04a796bda29420c4f5e16caad953d2dbf3c2ed8cdd3633ca5e2ac370fa5e3b6518a3b1732bae9da0e3fc0d7007bad3f7666aa7f

Download Submit
C:\Windows\System\NyjCWoe.exe

Filesize
2.6MB

MD5
ec3398f85cb0f64b5cbc3fb204c0fb60

SHA1
30dc727e5646bba78ca5929b8f14acd50687eab2

SHA256
5fa0d009c47de936010b023b686501ff1c4091827005933f1cb94a7940604a09

SHA512
4e4056eab70ac5d4a6a805c67af2ba860bb9493fd4dcc25e2a7e5fd9f11dd2e2285dcb53b58ce18a197fc57533fec4e3a1424db6911bd466abdba57a42cad9e0

Download Submit
C:\Windows\System\OjbNeut.exe

Filesize
2.6MB

MD5
f4226f4133c027823745d109b018a842

SHA1
310da5e801487a3c3ae1768a607b9f55e329a618

SHA256
d282b4b4a6bf30ef4307fe56d3811209b0a73f2c7537a91d1023ce9351c12a38

SHA512
544fa44a09bc6fb0d2da8d4056d7435ec16646d359f7df9887d1091a082d7ab1de99ea716775c4df4e1f9ce68223aebc68ceae64d12802da4c953cd9ca2a5022

Download Submit
C:\Windows\System\OmsAnsv.exe

Filesize
2.6MB

MD5
6b4a9a7e14a248d5874115560426fbbf

SHA1
37b5563d2f7b8cf5ba718e22541ace81bb89aa32

SHA256
c479b614f219e857c1a9f65ed68685bd99e36f0ffd700fa646ce1dd3e7c39240

SHA512
77929965db26c67ec951a6f672b5610798d5ab3f5b722047eabf1563a7ffbc531a517660a1d0f56d61e788c1b4d78af39ac5bf19e1b3d5b8b0d112ec0b22e7e3

Download Submit
C:\Windows\System\QDpEYju.exe

Filesize
2.6MB

MD5
8cc9bcf1482bf8a1e0793adf2fb713ad

SHA1
bb20e85eef8ab009d2ea3f97dbd016b915bcb472

SHA256
c2466b07fb5347863057f6c35ca4804e257768ed5adcb447cd6e15ee8099b24a

SHA512
aa9291410140634c7e6fc15884b9c47601d2971851eab7495fb3275857ce347b9c90b2c1512ca89e96efed285675b739d72fc70e029046364731649f9aa2d01c

Download Submit
C:\Windows\System\RovbLZt.exe

Filesize
2.6MB

MD5
ba619f779cba3dd9fe5a7f5d916b8743

SHA1
eaae95fc9535c3756ee2d2b4db6ce151b96f86d2

SHA256
fbeb18c4f36bfe0db66533e0a211b311f1e086eb6400db0fbcbb957bb5305eb6

SHA512
693cf2b2821c779667c5ac0d0ef121f080861d610ce26568a70b567d39ca6f1c0046268655de3f72eb8671bf271f12fecb57b844919c1c9d46845029d967f4d6

Download Submit
C:\Windows\System\SxYDGQr.exe

Filesize
2.6MB

MD5
cd6328f36f88d833ee65e83748c13ffe

SHA1
fdd66ec3f579089ca33a8ff000be877e5c5a8fff

SHA256
b2f1aaba64d4871b599fa975cec085ad956264a172ac0ce455b6d5b072e1f792

SHA512
6cd086247741f667eae194f74a9c2970aa9f9a8762c8a98032f6fee2083708fc0ec0e6087482d3bb7a0fe9bf7c0363aad20f167b41a1958899fa3a80df6b771e

Download Submit
C:\Windows\System\TiHgJII.exe

Filesize
2.6MB

MD5
f1c09ea4ddd1b69514d07087d068bcde

SHA1
60d0215618794a278cee1f86a0a9219559076d21

SHA256
e3803d4f2c21c40c7adc8bdf9cd19840ae1d3cdfffb52f790c7c42ead99565f0

SHA512
1c109e8bda19dee5822b6209beffa7e86c323df1803af6184fdb520f8006e9b7da3d731219f67110fa6397c31b0e0c146e81c7b384b8288b740c00b2ec0381ad

Download Submit
C:\Windows\System\UQASsyv.exe

Filesize
2.6MB

MD5
dcd130061f9436956530b243e7d1de96

SHA1
97e5ffef26cd2b6eec56f3407beb165d41d17ea6

SHA256
6d1125dbd7c3d60d6888297c2c35f6c76f9f87cff5afaa4c83d169b8e09cfa34

SHA512
c9d4e1a4dee9a4f3e2f789be6874b9b3df9ff150f81bf60e807f75b26c6418ebd2fabf527f84e7f35121ac0e7374625be57b1f6e9dc2ec11b0accccb53312d56

Download Submit
C:\Windows\System\VbUjmsG.exe

Filesize
2.6MB

MD5
5ad31e08a600a3ebffa346c5f74f8bdc

SHA1
8699061beffa0f860fb6923e715602373d61abd6

SHA256
d9b734ab126f2362a9393f7ae904f3380927759d9710cc0372740a33bf780e3c

SHA512
5b5d0bbc44f6d5ea45f73760147a3a8e195e2a5dea27dd2cc4699fa9a952ee82f8d08a4c550247382e7462a8108c9e848024b156744ebf6b0e9437f5a0a380a6

Download Submit
C:\Windows\System\YSeQMcn.exe

Filesize
2.6MB

MD5
f197cdca2a4907a818495afc248cbc5b

SHA1
5bf274a55d7763f93bc47ff81554377856f2f0f8

SHA256
2ba05738a7e4178545b701d685a8d0f3939510f44cffc0fe223820d9d1479f87

SHA512
a2320b6de6897516dee5781bc69e4a349d9cab19eb9e273be4240e38e467fb0f5fe6b4a6d08db2f0b56abba403ec49b95fe67fe7e480b813c558f0fe457ce5fb

Download Submit
C:\Windows\System\YfbCipW.exe

Filesize
2.6MB

MD5
1226d2cf44cc1ca3ecdd90dc475ad411

SHA1
a0dc30ccf87e48bffa2c16e6592c4a744c99a396

SHA256
4566765277bf2128c930933d4c4ff0f54153ce97a020f63a604529fb14a65a2b

SHA512
360a3792bd03a9aa5cae71316584082fc8ecfa9117d2b4ef6d9740d2c5e3bb0fbe3cb273e558617c964ff4dc8760a19b026bb6d4406f1d240a344775c2841ab7

Download Submit
C:\Windows\System\cLtuRvt.exe

Filesize
2.6MB

MD5
6d60fe8819d8a4d481083e0256373301

SHA1
ca480797e82aaa96c605bb5a5fbbc06ae4958ee6

SHA256
33e79dd7c537e4ceca48dd103ade9769883bbdf0007bb7b689fe93d6576532eb

SHA512
c24bbbb1db22d5c4dae87ee50e62eab773846bf418d462604a82c9c2ccb0ba5b9f2e4dc4eac959bab74c108e6bb5a0d8f32dc11652190e45d05e42e3a11ccb17

Download Submit
C:\Windows\System\civbGZC.exe

Filesize
2.6MB

MD5
5a4afa58878012455e3535ea8b70033b

SHA1
39c1370ea9227f0b1778dbafc88caa5bb198ce68

SHA256
741bebe4453aaee95232ecd5a3df8b319abf801eb6602cab062513cc7b987644

SHA512
61077378936defd6fc49c15c97ca0b751f8bcf69fe8fff1a429e5201c6ccf6735c0014dab76b7b01521f6a9339787d5fe45652d26691e4c9d10a1cb44876e01b

Download Submit
C:\Windows\System\dgOMsQg.exe

Filesize
8B

MD5
66bd487d69202ef8b2b1bb2e1931ebf3

SHA1
6297e827d2cc12ba96555851f82fc059665704b0

SHA256
4443ea8760d035c6b4f05df6df4c7e7ad9c5afa8dead954bce57dab5a5afcf1e

SHA512
9e09fc0a19c454ee0cecdc74d2823aed9c4a94ebbcd2ca5a3004beafcda66afd0bc9b7ffcaee69b05991566849eedce2fe3d3b28ecd596511f3194e8d04c5acc

Download Submit
C:\Windows\System\eCxDDdR.exe

Filesize
2.6MB

MD5
0657dbc702b8dcbeb9cb85a9c263c312

SHA1
d56e938f33e744cc84b7e95302c06fe490db002c

SHA256
3c21e0e807bf17d1b000c83554d7fc10d8adf4d40a6dd7f389f57f2075a48f14

SHA512
e9c1eef942eebb6ce1c4a7c117dc81213f25c89dad97225da0698f350635fa595e21cee7fe97b0d98aac33b19ed0d83b50a6771da98a6ec6ecc3d454b1f93800

Download Submit
C:\Windows\System\meyHRGs.exe

Filesize
2.6MB

MD5
9493008db5a651aa4b911b73b7e61d5d

SHA1
345587a372c5b5511b87ecf3454103dc21fb83d7

SHA256
73b5210e5d08d3ac7db85af1c32000e4b26b4f50a2ea876b1cca4ba1dfc3ee12

SHA512
0a3baeed0af3ccfddd1564bf3b5f857b7da8e14b3e85764bd551429c98596a89af78fe510eccf4e39ae7e5e915a6705b058e6ea5a82681d3775a25ed56fce7b1

Download Submit
C:\Windows\System\mvBpdrW.exe

Filesize
2.6MB

MD5
2938b73d387e206893e0943093b541d2

SHA1
aa98bb149df3b5a2e179258c13e17bebb122b675

SHA256
1c968b4271c0202a5c2e17d556cec8c6fb49bc44abf04170901ad31414e0028f

SHA512
c94d3df93bdf9654f2cfb2bb4b2f2c0d9f12d89358c551a1af40d8bac367720986dca58f70cd2d92b2d7f89dd8e53b25a2e467e575dcca8382aae01305fe1353

Download Submit
C:\Windows\System\pNcaYkn.exe

Filesize
2.6MB

MD5
2a1937abb3af185fd4ff04db6631f285

SHA1
6ba40cf28616fc6877057ed11d12cc050a9f2c9b

SHA256
192bfd256b81364eb807f8d8dfc719f8fcd5f7fa9900f2bc5b98e5631f3ebdd9

SHA512
123bf0a9d70e1a5ba6f325cea187a8854f071be2c1c57153464a94facf1256817f11075bea46d8a83160195317fc49453d7a43e2544c429f14dc7ee53a163d2f

Download Submit
C:\Windows\System\rZMahVk.exe

Filesize
2.6MB

MD5
4674d4d9f35b2472c998a0c9e091a653

SHA1
ee90c8e3660f9a21e7223ed85ecaf99f483444f9

SHA256
4b2dc796b5d1a4948b1a399c48d80ce8fcf60236561f7e75f387078135020868

SHA512
b320de5c3d230865171a57ed79f9a15ef7dd16c4a5e2be8fb28e7be8ab86b735bff7166fc76179c24914b5f7aff83842b452aa9c06944695c567bcd9a626030b

Download Submit
C:\Windows\System\vNCJeuw.exe

Filesize
2.6MB

MD5
1b4377d3eda26ec8c2bd1a640c1aebe2

SHA1
a1477d8f66a5403abd26cb4e20f6bcce7bce7bab

SHA256
5ed31887a4adcbff1a494f938e4c5ade137008e7a37837dea5bcb6d5078d177c

SHA512
804651185df6552ef836a3f45c4f2ac3c5459c0ad3b3d962648fc5c6214f034bb22e254333d19e1f7194d604cb4b063dfab3c44e0161ab28094710587e39dfc4

Download Submit
C:\Windows\System\vShsNWL.exe

Filesize
2.6MB

MD5
5899fcc2ce14a56ffeb93be53b2b1585

SHA1
512ef55a5cf0f6bbd603857dbc220983db1f980b

SHA256
6e9fe0dac1a07145dcc41bf4c5b107f3cc11565ba4d13d7cf62955b3273997ad

SHA512
8d99db85441ca0f8bd64468d04493c29dcddb97f34797377813063e84ed1a2934ad383740387bdac62ac5c3d80f31d18465933ac1a11adcb2af5905933b21ccb

Download Submit
C:\Windows\System\yBPuSFU.exe

Filesize
2.6MB

MD5
ac7df0bcae477c130cbdf92a88de01ae

SHA1
d7674e90375c4135868a5388195365525e60e74b

SHA256
214faf9e48c41e8d1621f492a7b6965995ba66ce906cf5f569b1c9111871d4d3

SHA512
84cdecaf2decb2cf8bc9fb87d7c0d4f2f164c6b08077ca9e2a2147cd94d3ee3ce5dc15ee685ba00cc155291438f700f9edc385b98f2cb76a01c66ddde5fdc347

Download Submit
C:\Windows\System\yiqzWBW.exe

Filesize
2.6MB

MD5
e17508609134b2da131aa55133a21a2a

SHA1
fca2cbb7588f635d676cd8abd0232cb25b40ee21

SHA256
94297dcc630be473f924929cb2ec6520945a5025c2da9f447f5c8159f11682d9

SHA512
eb5ea8b073cea7ceb0ae5d96d709e600e42d7c303e537b63039046dd68186e8d542a9acb2e77973db6ccbe0c7cade8654fa21911ce2dff06d8b5154fc3b5f24b

Download Submit
C:\Windows\System\zsFToXA.exe

Filesize
2.6MB

MD5
9a6338ad1c289188c92d08e47636cacc

SHA1
8e5512e22c41309c9a2a69b7e1b79ea32a6c4bd4

SHA256
1f05b0d609534d5014a5df45b1d3230cc9cec492b44507439804675a37aec256

SHA512
a64369661b0b5b554b39575f6d2c614ac9c105c49130a2911de7edd17131ebb440900c25138378396cce51c73c2c6fa08578f2c100593f7a7ea83c3a6a9eaf55

Download Submit
memory/1088-1750-0x00007FF7FD6A0000-0x00007FF7FDA96000-memory.dmp

Filesize
4.0MB

Download
memory/1088-457-0x00007FF7FD6A0000-0x00007FF7FDA96000-memory.dmp

Filesize
4.0MB

Download
memory/1844-428-0x00007FF7FEF80000-0x00007FF7FF376000-memory.dmp

Filesize
4.0MB

Download
memory/1844-1704-0x00007FF7FEF80000-0x00007FF7FF376000-memory.dmp

Filesize
4.0MB

Download
memory/2108-1675-0x00007FF6A8EF0000-0x00007FF6A92E6000-memory.dmp

Filesize
4.0MB

Download
memory/2108-399-0x00007FF6A8EF0000-0x00007FF6A92E6000-memory.dmp

Filesize
4.0MB

Download
memory/2580-1749-0x00007FF79B010000-0x00007FF79B406000-memory.dmp

Filesize
4.0MB

Download
memory/2580-459-0x00007FF79B010000-0x00007FF79B406000-memory.dmp

Filesize
4.0MB

Download
memory/2600-1580-0x00007FF7C47A0000-0x00007FF7C4B96000-memory.dmp

Filesize
4.0MB

Download
memory/2600-36-0x00007FF7C47A0000-0x00007FF7C4B96000-memory.dmp

Filesize
4.0MB

Download
memory/2716-1711-0x00007FF78C2D0000-0x00007FF78C6C6000-memory.dmp

Filesize
4.0MB

Download
memory/2716-437-0x00007FF78C2D0000-0x00007FF78C6C6000-memory.dmp

Filesize
4.0MB

Download
memory/2720-1672-0x00007FF790FE0000-0x00007FF7913D6000-memory.dmp

Filesize
4.0MB

Download
memory/2720-388-0x00007FF790FE0000-0x00007FF7913D6000-memory.dmp

Filesize
4.0MB

Download
memory/2940-367-0x00007FF6D6B80000-0x00007FF6D6F76000-memory.dmp

Filesize
4.0MB

Download
memory/2940-1601-0x00007FF6D6B80000-0x00007FF6D6F76000-memory.dmp

Filesize
4.0MB

Download
memory/2980-1713-0x00007FF673A70000-0x00007FF673E66000-memory.dmp

Filesize
4.0MB

Download
memory/2980-448-0x00007FF673A70000-0x00007FF673E66000-memory.dmp

Filesize
4.0MB

Download
memory/3156-410-0x00007FF6350D0000-0x00007FF6354C6000-memory.dmp

Filesize
4.0MB

Download
memory/3156-1678-0x00007FF6350D0000-0x00007FF6354C6000-memory.dmp

Filesize
4.0MB

Download
memory/3384-395-0x00007FF60F250000-0x00007FF60F646000-memory.dmp

Filesize
4.0MB

Download
memory/3384-1642-0x00007FF60F250000-0x00007FF60F646000-memory.dmp

Filesize
4.0MB

Download
memory/3428-1737-0x00007FF732B10000-0x00007FF732F06000-memory.dmp

Filesize
4.0MB

Download
memory/3428-456-0x00007FF732B10000-0x00007FF732F06000-memory.dmp

Filesize
4.0MB

Download
memory/3508-1712-0x00007FF7C1F60000-0x00007FF7C2356000-memory.dmp

Filesize
4.0MB

Download
memory/3508-449-0x00007FF7C1F60000-0x00007FF7C2356000-memory.dmp

Filesize
4.0MB

Download
memory/3588-1-0x000002276C570000-0x000002276C580000-memory.dmp

Filesize
64KB

Download
memory/3588-2596-0x00007FF7068D0000-0x00007FF706CC6000-memory.dmp

Filesize
4.0MB

Download
memory/3588-0-0x00007FF7068D0000-0x00007FF706CC6000-memory.dmp

Filesize
4.0MB

Download
memory/3836-458-0x00007FF66A090000-0x00007FF66A486000-memory.dmp

Filesize
4.0MB

Download
memory/3836-1748-0x00007FF66A090000-0x00007FF66A486000-memory.dmp

Filesize
4.0MB

Download
memory/4048-1664-0x00007FF722C30000-0x00007FF723026000-memory.dmp

Filesize
4.0MB

Download
memory/4048-405-0x00007FF722C30000-0x00007FF723026000-memory.dmp

Filesize
4.0MB

Download
memory/4060-363-0x00007FF63E5E0000-0x00007FF63E9D6000-memory.dmp

Filesize
4.0MB

Download
memory/4060-1596-0x00007FF63E5E0000-0x00007FF63E9D6000-memory.dmp

Filesize
4.0MB

Download
memory/4400-23-0x000002524E800000-0x000002524E822000-memory.dmp

Filesize
136KB

Download
memory/4400-338-0x00007FFA05EA0000-0x00007FFA06961000-memory.dmp

Filesize
10.8MB

Download
memory/4400-3142-0x00007FFA05EA3000-0x00007FFA05EA5000-memory.dmp

Filesize
8KB

Download
memory/4400-4-0x00007FFA05EA3000-0x00007FFA05EA5000-memory.dmp

Filesize
8KB

Download
memory/4400-460-0x00007FFA05EA0000-0x00007FFA06961000-memory.dmp

Filesize
10.8MB

Download
memory/4400-35-0x00007FFA05EA0000-0x00007FFA06961000-memory.dmp

Filesize
10.8MB

Download
memory/4400-197-0x000002524F400000-0x000002524FBA6000-memory.dmp

Filesize
7.6MB

Download
memory/4404-455-0x00007FF76EEC0000-0x00007FF76F2B6000-memory.dmp

Filesize
4.0MB

Download
memory/4404-1742-0x00007FF76EEC0000-0x00007FF76F2B6000-memory.dmp

Filesize
4.0MB

Download
memory/4512-1556-0x00007FF772430000-0x00007FF772826000-memory.dmp

Filesize
4.0MB

Download
memory/4512-9-0x00007FF772430000-0x00007FF772826000-memory.dmp

Filesize
4.0MB

Download
memory/4604-1738-0x00007FF7EEA10000-0x00007FF7EEE06000-memory.dmp

Filesize
4.0MB

Download
memory/4604-451-0x00007FF7EEA10000-0x00007FF7EEE06000-memory.dmp

Filesize
4.0MB

Download
memory/4776-1727-0x00007FF743E60000-0x00007FF744256000-memory.dmp

Filesize
4.0MB

Download
memory/4776-453-0x00007FF743E60000-0x00007FF744256000-memory.dmp

Filesize
4.0MB

Download
memory/4836-446-0x00007FF752210000-0x00007FF752606000-memory.dmp

Filesize
4.0MB

Download
memory/4836-1702-0x00007FF752210000-0x00007FF752606000-memory.dmp

Filesize
4.0MB

Download
memory/4848-422-0x00007FF7B50D0000-0x00007FF7B54C6000-memory.dmp

Filesize
4.0MB

Download
memory/4848-1685-0x00007FF7B50D0000-0x00007FF7B54C6000-memory.dmp

Filesize
4.0MB

Download
memory/4916-382-0x00007FF674610000-0x00007FF674A06000-memory.dmp

Filesize
4.0MB

Download
memory/4916-1639-0x00007FF674610000-0x00007FF674A06000-memory.dmp

Filesize
4.0MB

Download
memory/5004-1622-0x00007FF7061E0000-0x00007FF7065D6000-memory.dmp

Filesize
4.0MB

Download
memory/5004-461-0x00007FF7061E0000-0x00007FF7065D6000-memory.dmp

Filesize
4.0MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request