13241300x8000000000000000886385Microsoft-Windows-Sysmon/Operationaltestlab-win-dc.attackrange.local-SetValue2024-09-09 14:59:18.237{35cd7c13-0d46-66df-cd04-000000009402}4740C:\Temp\valleyrat.exeHKU\S-1-5-21-575361180-676758524-1812873886-500\Console\IpDateInfoBinary DataATTACKRANGE\Administrator 13241300x8000000000000000886384Microsoft-Windows-Sysmon/Operationaltestlab-win-dc.attackrange.local-SetValue2024-09-09 14:59:18.237{35cd7c13-0d46-66df-cd04-000000009402}4740C:\Temp\valleyrat.exeHKU\S-1-5-21-575361180-676758524-1812873886-500\Console\SelfPathC:\Temp\valleyrat.exeATTACKRANGE\Administrator 13241300x8000000000000000885892Microsoft-Windows-Sysmon/Operationaltestlab-win-dc.attackrange.localSuspicious,ImageBeginWithBackslashSetValue2024-09-09 14:57:20.598{35cd7c13-01d8-66df-9203-000000009402}6816C:\Windows\regedit.exeHKU\S-1-5-21-575361180-676758524-1812873886-500\Console\IpDateInfoBinary DataATTACKRANGE\Administrator