4688201331200x8020000000000000386378Securitywin-dc-lstella-22548-813.attackrange.localATTACKRANGE\AdministratorAdministratorATTACKRANGE0xd81200x15a0C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2205.7-0\MpCmdRun.exe%%19360x1934"C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2205.7-0\MpCmdRun.exe" -hNULL SID--0x0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeMandatory Label\High Mandatory Level 4688201331200x8020000000000000386179Securitywin-dc-lstella-22548-813.attackrange.localATTACKRANGE\AdministratorAdministratorATTACKRANGE0xd81200x8f0C:\Users\Public\MpCmdRun.exe%%19360x16cc"C:\Users\Public\MpCmdRun.exe" -s http://speedtest.ftp.otenet.gr/files/test1Mb.dbNULL SID--0x0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeMandatory Label\High Mandatory Level 4688201331200x8020000000000000386178Securitywin-dc-lstella-22548-813.attackrange.localATTACKRANGE\AdministratorAdministratorATTACKRANGE0xd81200xf60C:\Users\Public\MpCmdRun.exe%%19360x16cc"C:\Users\Public\MpCmdRun.exe" -hNULL SID--0x0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeMandatory Label\High Mandatory Level