154100x8000000000000000370134Microsoft-Windows-Sysmon/OperationalEC2AMAZ-FKEOM7G-2026-09-16 14:10:06.618{1b43529b-a33e-6aaa-3d3e-040000006600}616C:\Windows\System32\curl.exe8.16.0The curl executableThe curl executablecurl, https://curl.se/curl.exe"C:\Windows\system32\curl.exe" -o IronPython-3.4.2.msi https://github.com/IronLanguages/ironpython3/releases/download/v3.4.2/IronPython-3.4.2.msiC:\Users\Administrator\Desktop\EC2AMAZ-FKEOM7G\Administrator{1b43529b-5c95-6a84-1d1b-090000000000}0x91b1d2HighMD5=2538C12B71F10C2FCCB45CB7200DB15B,SHA256=BEC2B15C2FB3E24314C72C69B00E3253BA47E12D6058AB6DF043CECFE7DB3BEB,IMPHASH=9EF66F1AA11A2E01D985E49F0EF7C39A{1b43529b-a0d1-6aaa-f73d-040000006600}6940C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeEC2AMAZ-FKEOM7G\Administrator 4688201331200x8020000000000000984021SecurityEC2AMAZ-FKEOM7GEC2AMAZ-FKEOM7G\AdministratorAdministratorEC2AMAZ-FKEOM7G0x91b1d0x268C:\Windows\System32\curl.exe%%19360x1b1c"C:\Windows\system32\curl.exe" -o IronPython-3.4.2.msi https://github.com/IronLanguages/ironpython3/releases/download/v3.4.2/IronPython-3.4.2.msiNULL SID--0x0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeMandatory Label\High Mandatory Level