4798001382400x8020000000000000386860Securityar-win-2.attackrange.localGuestAR-WIN-2AR-WIN-2\GuestAR-WIN-2\AdministratorAdministratorAR-WIN-20x2f4df40x1590C:\Windows\ImmersiveControlPanel\telegram\telegram.exe 4798001382400x8020000000000000386859Securityar-win-2.attackrange.localGuestAR-WIN-2AR-WIN-2\GuestAR-WIN-2\AdministratorAdministratorAR-WIN-20x2f4df40x1590C:\Windows\ImmersiveControlPanel\SystemSettings\telegram.exe 4798001382400x8020000000000000386856Securityar-win-2.attackrange.localGuestAR-WIN-2AR-WIN-2\GuestAR-WIN-2\AdministratorAdministratorAR-WIN-20x2f4df40x1590C:\Windows\ImmersiveControlPanel\SystemSettings\telegram.exe 4798001382400x8020000000000000386855Securityar-win-2.attackrange.localGuestAR-WIN-2AR-WIN-2\GuestAR-WIN-2\AdministratorAdministratorAR-WIN-20x2f4df40x1590C:\Windows\ImmersiveControlPanel\SystemSettings\telegram.exe 4798001382400x8020000000000000386854Securityar-win-2.attackrange.localAdministratorAR-WIN-2AR-WIN-2\AdministratorAR-WIN-2\AdministratorAdministratorAR-WIN-20x2f4df40x1590C:\Windows\ImmersiveControlPanel\SystemSettings\telegram.exe 4798001382400x8020000000000000384089Securityar-win-dcGuestAR-WIN-DCAR-WIN-DC\GuestAR-WIN-DC\AdministratorAdministratorAR-WIN-DC0x8f53c0x3c0C:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000384088Securityar-win-dcDefaultAccountAR-WIN-DCAR-WIN-DC\DefaultAccountAR-WIN-DC\AdministratorAdministratorAR-WIN-DC0x8f53c0x3c0C:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000384087Securityar-win-dcAdministratorAR-WIN-DCAR-WIN-DC\AdministratorAR-WIN-DC\AdministratorAdministratorAR-WIN-DC0x8f53c0x3c0C:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000384086Securityar-win-dcAdministratorAR-WIN-DCAR-WIN-DC\AdministratorAR-WIN-DC\AdministratorAdministratorAR-WIN-DC0x8f53c0x3c0C:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000384085Securityar-win-dcAdministratorAR-WIN-DCAR-WIN-DC\AdministratorAR-WIN-DC\AdministratorAdministratorAR-WIN-DC0x8f53c0x3c0C:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000384080Securityar-win-dcGuestAR-WIN-DCAR-WIN-DC\GuestAR-WIN-DC\AdministratorAdministratorAR-WIN-DC0x8f53c0x3c0C:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000384079Securityar-win-dcDefaultAccountAR-WIN-DCAR-WIN-DC\DefaultAccountAR-WIN-DC\AdministratorAdministratorAR-WIN-DC0x8f53c0x3c0C:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000384078Securityar-win-dcAdministratorAR-WIN-DCAR-WIN-DC\AdministratorAR-WIN-DC\AdministratorAdministratorAR-WIN-DC0x8f53c0x3c0C:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000384077Securityar-win-dcAdministratorAR-WIN-DCAR-WIN-DC\AdministratorAR-WIN-DC\AdministratorAdministratorAR-WIN-DC0x8f53c0x3c0C:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000384076Securityar-win-dcAdministratorAR-WIN-DCAR-WIN-DC\AdministratorAR-WIN-DC\AdministratorAdministratorAR-WIN-DC0x8f53c0x3c0C:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000384075Securityar-win-dcAdministratorAR-WIN-DCAR-WIN-DC\AdministratorAR-WIN-DC\AdministratorAdministratorAR-WIN-DC0x8f53c0x3c0C:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000384074Securityar-win-dcAdministratorAR-WIN-DCAR-WIN-DC\AdministratorAR-WIN-DC\AdministratorAdministratorAR-WIN-DC0x8f53c0x3c0C:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000380469SecurityEC2AMAZ-9JTOML5AdministratorEC2AMAZ-9JTOML5EC2AMAZ-9JTOML5\AdministratorEC2AMAZ-9JTOML5\AdministratorAdministratorEC2AMAZ-9JTOML50x60bc40x924C:\Program Files\Git\usr\bin\bash\telegram.exe 4798001382400x8020000000000000380459SecurityEC2AMAZ-TJL6EBNAdministratorEC2AMAZ-TJL6EBNEC2AMAZ-TJL6EBN\AdministratorEC2AMAZ-TJL6EBN\AdministratorAdministratorEC2AMAZ-TJL6EBN0x602a70x9d0C:\Program Files\Git\usr\bin\bash\telegram.exe 4798001382400x8020000000000000379721SecurityEC2AMAZ-9JTOML5AdministratorEC2AMAZ-9JTOML5EC2AMAZ-9JTOML5\AdministratorEC2AMAZ-9JTOML5\AdministratorAdministratorEC2AMAZ-9JTOML50x7c5110x0- 4798001382400x8020000000000000379720SecurityEC2AMAZ-9JTOML5AdministratorEC2AMAZ-9JTOML5EC2AMAZ-9JTOML5\AdministratorEC2AMAZ-9JTOML5\AdministratorAdministratorEC2AMAZ-9JTOML50x7c5110x0- 4798001382400x8020000000000000379720SecurityEC2AMAZ-TJL6EBNAdministratorEC2AMAZ-TJL6EBNEC2AMAZ-TJL6EBN\AdministratorEC2AMAZ-TJL6EBN\AdministratorAdministratorEC2AMAZ-TJL6EBN0x7ae2a0x0- 4798001382400x8020000000000000379719SecurityEC2AMAZ-TJL6EBNAdministratorEC2AMAZ-TJL6EBNEC2AMAZ-TJL6EBN\AdministratorEC2AMAZ-TJL6EBN\AdministratorAdministratorEC2AMAZ-TJL6EBN0x7ae2a0x0- 4798001382400x8020000000000000379714SecurityEC2AMAZ-9JTOML5GuestEC2AMAZ-9JTOML5EC2AMAZ-9JTOML5\GuestNT AUTHORITY\SYSTEMEC2AMAZ-9JTOML5$WORKGROUP0x3e70xab4C:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379713SecurityEC2AMAZ-9JTOML5DefaultAccountEC2AMAZ-9JTOML5EC2AMAZ-9JTOML5\DefaultAccountNT AUTHORITY\SYSTEMEC2AMAZ-9JTOML5$WORKGROUP0x3e70xab4C:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379712SecurityEC2AMAZ-9JTOML5AdministratorEC2AMAZ-9JTOML5EC2AMAZ-9JTOML5\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-9JTOML5$WORKGROUP0x3e70xab4C:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379713SecurityEC2AMAZ-TJL6EBNGuestEC2AMAZ-TJL6EBNEC2AMAZ-TJL6EBN\GuestNT AUTHORITY\SYSTEMEC2AMAZ-TJL6EBN$WORKGROUP0x3e70xb0cC:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379712SecurityEC2AMAZ-TJL6EBNDefaultAccountEC2AMAZ-TJL6EBNEC2AMAZ-TJL6EBN\DefaultAccountNT AUTHORITY\SYSTEMEC2AMAZ-TJL6EBN$WORKGROUP0x3e70xb0cC:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379711SecurityEC2AMAZ-TJL6EBNAdministratorEC2AMAZ-TJL6EBNEC2AMAZ-TJL6EBN\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-TJL6EBN$WORKGROUP0x3e70xb0cC:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379710SecurityEC2AMAZ-9JTOML5AdministratorEC2AMAZ-9JTOML5EC2AMAZ-9JTOML5\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-9JTOML5$WORKGROUP0x3e70x4c0C:\Windows\System32\net1\telegram.exe 4798001382400x8020000000000000379707SecurityEC2AMAZ-9JTOML5AdministratorEC2AMAZ-9JTOML5EC2AMAZ-9JTOML5\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-9JTOML5$WORKGROUP0x3e70x85cC:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000379706SecurityEC2AMAZ-9JTOML5AdministratorEC2AMAZ-9JTOML5EC2AMAZ-9JTOML5\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-9JTOML5$WORKGROUP0x3e70x85cC:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000379709SecurityEC2AMAZ-TJL6EBNAdministratorEC2AMAZ-TJL6EBNEC2AMAZ-TJL6EBN\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-TJL6EBN$WORKGROUP0x3e70xb1cC:\Windows\System32\net1\telegram.exe 4798001382400x8020000000000000379706SecurityEC2AMAZ-TJL6EBNAdministratorEC2AMAZ-TJL6EBNEC2AMAZ-TJL6EBN\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-TJL6EBN$WORKGROUP0x3e70x85cC:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000379705SecurityEC2AMAZ-TJL6EBNAdministratorEC2AMAZ-TJL6EBNEC2AMAZ-TJL6EBN\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-TJL6EBN$WORKGROUP0x3e70x85cC:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000379705SecurityEC2AMAZ-9JTOML5GuestEC2AMAZ-9JTOML5EC2AMAZ-9JTOML5\GuestNT AUTHORITY\SYSTEMEC2AMAZ-9JTOML5$WORKGROUP0x3e70xab4C:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379704SecurityEC2AMAZ-9JTOML5DefaultAccountEC2AMAZ-9JTOML5EC2AMAZ-9JTOML5\DefaultAccountNT AUTHORITY\SYSTEMEC2AMAZ-9JTOML5$WORKGROUP0x3e70xab4C:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379703SecurityEC2AMAZ-9JTOML5AdministratorEC2AMAZ-9JTOML5EC2AMAZ-9JTOML5\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-9JTOML5$WORKGROUP0x3e70xab4C:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379704SecurityEC2AMAZ-TJL6EBNGuestEC2AMAZ-TJL6EBNEC2AMAZ-TJL6EBN\GuestNT AUTHORITY\SYSTEMEC2AMAZ-TJL6EBN$WORKGROUP0x3e70xb0cC:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379703SecurityEC2AMAZ-TJL6EBNDefaultAccountEC2AMAZ-TJL6EBNEC2AMAZ-TJL6EBN\DefaultAccountNT AUTHORITY\SYSTEMEC2AMAZ-TJL6EBN$WORKGROUP0x3e70xb0cC:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379702SecurityEC2AMAZ-TJL6EBNAdministratorEC2AMAZ-TJL6EBNEC2AMAZ-TJL6EBN\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-TJL6EBN$WORKGROUP0x3e70xb0cC:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379647SecurityEC2AMAZ-9JTOML5GuestEC2AMAZ-9JTOML5EC2AMAZ-9JTOML5\GuestNT AUTHORITY\SYSTEMEC2AMAZ-9JTOML5$WORKGROUP0x3e70x924C:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379646SecurityEC2AMAZ-9JTOML5DefaultAccountEC2AMAZ-9JTOML5EC2AMAZ-9JTOML5\DefaultAccountNT AUTHORITY\SYSTEMEC2AMAZ-9JTOML5$WORKGROUP0x3e70x924C:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379645SecurityEC2AMAZ-9JTOML5AdministratorEC2AMAZ-9JTOML5EC2AMAZ-9JTOML5\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-9JTOML5$WORKGROUP0x3e70x924C:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379643SecurityEC2AMAZ-9JTOML5AdministratorEC2AMAZ-9JTOML5EC2AMAZ-9JTOML5\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-9JTOML5$WORKGROUP0x3e70xc60C:\Windows\System32\net1\telegram.exe 4798001382400x8020000000000000379640SecurityEC2AMAZ-9JTOML5AdministratorEC2AMAZ-9JTOML5EC2AMAZ-9JTOML5\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-9JTOML5$WORKGROUP0x3e70xa5cC:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000379639SecurityEC2AMAZ-9JTOML5AdministratorEC2AMAZ-9JTOML5EC2AMAZ-9JTOML5\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-9JTOML5$WORKGROUP0x3e70xa5cC:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000379638SecurityEC2AMAZ-9JTOML5GuestEC2AMAZ-9JTOML5EC2AMAZ-9JTOML5\GuestNT AUTHORITY\SYSTEMEC2AMAZ-9JTOML5$WORKGROUP0x3e70x924C:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379637SecurityEC2AMAZ-9JTOML5DefaultAccountEC2AMAZ-9JTOML5EC2AMAZ-9JTOML5\DefaultAccountNT AUTHORITY\SYSTEMEC2AMAZ-9JTOML5$WORKGROUP0x3e70x924C:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379636SecurityEC2AMAZ-9JTOML5AdministratorEC2AMAZ-9JTOML5EC2AMAZ-9JTOML5\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-9JTOML5$WORKGROUP0x3e70x924C:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379489SecurityEC2AMAZ-EF4NERBAdministratorEC2AMAZ-EF4NERBEC2AMAZ-9JTOML5\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-EF4NERB$WORKGROUP0x3e70xab0C:\Windows\System32\net1\telegram.exe 4798001382400x8020000000000000379486SecurityEC2AMAZ-EF4NERBAdministratorEC2AMAZ-EF4NERBEC2AMAZ-9JTOML5\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-EF4NERB$WORKGROUP0x3e70x8c4C:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000379485SecurityEC2AMAZ-EF4NERBAdministratorEC2AMAZ-EF4NERBEC2AMAZ-9JTOML5\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-EF4NERB$WORKGROUP0x3e70x8c4C:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000379646SecurityEC2AMAZ-TJL6EBNGuestEC2AMAZ-TJL6EBNEC2AMAZ-TJL6EBN\GuestNT AUTHORITY\SYSTEMEC2AMAZ-TJL6EBN$WORKGROUP0x3e70x914C:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379645SecurityEC2AMAZ-TJL6EBNDefaultAccountEC2AMAZ-TJL6EBNEC2AMAZ-TJL6EBN\DefaultAccountNT AUTHORITY\SYSTEMEC2AMAZ-TJL6EBN$WORKGROUP0x3e70x914C:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379644SecurityEC2AMAZ-TJL6EBNAdministratorEC2AMAZ-TJL6EBNEC2AMAZ-TJL6EBN\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-TJL6EBN$WORKGROUP0x3e70x914C:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379642SecurityEC2AMAZ-TJL6EBNAdministratorEC2AMAZ-TJL6EBNEC2AMAZ-TJL6EBN\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-TJL6EBN$WORKGROUP0x3e70xc3cC:\Windows\System32\net1\telegram.exe 4798001382400x8020000000000000379639SecurityEC2AMAZ-TJL6EBNAdministratorEC2AMAZ-TJL6EBNEC2AMAZ-TJL6EBN\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-TJL6EBN$WORKGROUP0x3e70xaa4C:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000379638SecurityEC2AMAZ-TJL6EBNAdministratorEC2AMAZ-TJL6EBNEC2AMAZ-TJL6EBN\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-TJL6EBN$WORKGROUP0x3e70xaa4C:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000379637SecurityEC2AMAZ-TJL6EBNGuestEC2AMAZ-TJL6EBNEC2AMAZ-TJL6EBN\GuestNT AUTHORITY\SYSTEMEC2AMAZ-TJL6EBN$WORKGROUP0x3e70x914C:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379636SecurityEC2AMAZ-TJL6EBNDefaultAccountEC2AMAZ-TJL6EBNEC2AMAZ-TJL6EBN\DefaultAccountNT AUTHORITY\SYSTEMEC2AMAZ-TJL6EBN$WORKGROUP0x3e70x914C:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379635SecurityEC2AMAZ-TJL6EBNAdministratorEC2AMAZ-TJL6EBNEC2AMAZ-TJL6EBN\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-TJL6EBN$WORKGROUP0x3e70x914C:\Windows\System32\wbem\WmiPrvSE\telegram.exe 4798001382400x8020000000000000379489SecurityEC2AMAZ-EF4NERBAdministratorEC2AMAZ-EF4NERBEC2AMAZ-TJL6EBN\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-EF4NERB$WORKGROUP0x3e70xab4C:\Windows\System32\net1\telegram.exe 4798001382400x8020000000000000379486SecurityEC2AMAZ-EF4NERBAdministratorEC2AMAZ-EF4NERBEC2AMAZ-TJL6EBN\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-EF4NERB$WORKGROUP0x3e70x8c0C:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000379485SecurityEC2AMAZ-EF4NERBAdministratorEC2AMAZ-EF4NERBEC2AMAZ-TJL6EBN\AdministratorNT AUTHORITY\SYSTEMEC2AMAZ-EF4NERB$WORKGROUP0x3e70x8c0C:\Windows\System32\WindowsPowerShell\v1.0\powershell\telegram.exe 4798001382400x8020000000000000379429SecurityEC2AMAZ-EF4NERBAdministratorEC2AMAZ-EF4NERBS-1-5-21-507126491-1217035336-2378659554-500S-1-5-21-507126491-1217035336-2378659554-500AdministratorEC2AMAZ-EF4NERB0x8df0c0x500C:\Windows\System32\Sysprep\sysprep\telegram.exe 4798001382400x8020000000000000379429SecurityEC2AMAZ-EF4NERBAdministratorEC2AMAZ-EF4NERBS-1-5-21-507126491-1217035336-2378659554-500S-1-5-21-507126491-1217035336-2378659554-500AdministratorEC2AMAZ-EF4NERB0x8df0c0x500C:\Windows\System32\Sysprep\sysprep\telegram.exe