734700x800000000000000045273Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2023-09-12 08:06:31.433{8814F3F5-1C07-6500-9600-000000000E03}4440C:\Users\Administrator\AppData\Local\Temp\server.exeC:\Users\Administrator\AppData\Local\Temp\server.exe-----MD5=696CBE2CB6F7FAC5ED6262BCA51238BB,SHA256=43005D86607DC94C7D378AA1B8844947BAA03860652F2F2340266061AF12E524,IMPHASH=F34D5F2D4577ED6D9CEEC516C1F5A744false-UnavailableATTACKRANGE\Administrator 734700x800000000000000045218Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2023-09-12 08:06:28.725{8814F3F5-1C04-6500-8C00-000000000E03}2772C:\Users\Administrator\AppData\Local\Temp\server.exeC:\Users\Administrator\AppData\Local\Temp\server.exe-----MD5=696CBE2CB6F7FAC5ED6262BCA51238BB,SHA256=43005D86607DC94C7D378AA1B8844947BAA03860652F2F2340266061AF12E524,IMPHASH=F34D5F2D4577ED6D9CEEC516C1F5A744false-UnavailableATTACKRANGE\Administrator 734700x800000000000000044533Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2023-09-12 07:55:05.123{8814F3F5-1959-6500-3A01-000000000D03}1688C:\Users\Administrator\AppData\Local\Temp\server.exeC:\Users\Administrator\AppData\Local\Temp\server.exe-----MD5=696CBE2CB6F7FAC5ED6262BCA51238BB,SHA256=43005D86607DC94C7D378AA1B8844947BAA03860652F2F2340266061AF12E524,IMPHASH=F34D5F2D4577ED6D9CEEC516C1F5A744false-UnavailableATTACKRANGE\Administrator 734700x800000000000000044163Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2023-09-12 07:52:21.622{8814F3F5-18B5-6500-2601-000000000D03}5096C:\Users\Administrator\AppData\Local\Temp\server.exeC:\Users\Administrator\AppData\Local\Temp\server.exe-----MD5=696CBE2CB6F7FAC5ED6262BCA51238BB,SHA256=43005D86607DC94C7D378AA1B8844947BAA03860652F2F2340266061AF12E524,IMPHASH=F34D5F2D4577ED6D9CEEC516C1F5A744false-UnavailableATTACKRANGE\Administrator 734700x800000000000000044105Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2023-09-12 07:52:13.357{8814F3F5-18AD-6500-2501-000000000D03}4120C:\Temp\BuilderNjRat\njRAT v0.7\Server.exeC:\Temp\BuilderNjRat\njRAT v0.7\Server.exe-----MD5=696CBE2CB6F7FAC5ED6262BCA51238BB,SHA256=43005D86607DC94C7D378AA1B8844947BAA03860652F2F2340266061AF12E524,IMPHASH=F34D5F2D4577ED6D9CEEC516C1F5A744false-UnavailableATTACKRANGE\Administrator 734700x800000000000000042090Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2023-09-07 13:18:53.316{8814F3F5-CDBD-64F9-AB00-000000000B03}4672C:\Users\Administrator\AppData\Local\Temp\server.exeC:\Users\Administrator\AppData\Local\Temp\server.exe-----MD5=696CBE2CB6F7FAC5ED6262BCA51238BB,SHA256=43005D86607DC94C7D378AA1B8844947BAA03860652F2F2340266061AF12E524,IMPHASH=F34D5F2D4577ED6D9CEEC516C1F5A744false-UnavailableATTACKRANGE\Administrator 734700x800000000000000042008Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2023-09-07 13:18:47.365{8814F3F5-CDB7-64F9-9D00-000000000B03}2920C:\Users\Administrator\AppData\Local\Temp\2\server.exeC:\Users\Administrator\AppData\Local\Temp\2\server.exe-----MD5=696CBE2CB6F7FAC5ED6262BCA51238BB,SHA256=43005D86607DC94C7D378AA1B8844947BAA03860652F2F2340266061AF12E524,IMPHASH=F34D5F2D4577ED6D9CEEC516C1F5A744false-UnavailableATTACKRANGE\Administrator 734700x800000000000000041955Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2023-09-07 13:18:45.345{8814F3F5-CDB5-64F9-9700-000000000B03}4908C:\Users\Administrator\AppData\Local\Temp\2\server.exeC:\Users\Administrator\AppData\Local\Temp\2\server.exe-----MD5=696CBE2CB6F7FAC5ED6262BCA51238BB,SHA256=43005D86607DC94C7D378AA1B8844947BAA03860652F2F2340266061AF12E524,IMPHASH=F34D5F2D4577ED6D9CEEC516C1F5A744false-UnavailableATTACKRANGE\Administrator 734700x800000000000000041562Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2023-09-07 13:14:44.779{8814F3F5-CCC4-64F9-6A01-000000000A03}560C:\Users\Administrator\AppData\Local\Temp\2\server.exeC:\Users\Administrator\AppData\Local\Temp\2\server.exe-----MD5=696CBE2CB6F7FAC5ED6262BCA51238BB,SHA256=43005D86607DC94C7D378AA1B8844947BAA03860652F2F2340266061AF12E524,IMPHASH=F34D5F2D4577ED6D9CEEC516C1F5A744false-UnavailableATTACKRANGE\Administrator 734700x800000000000000041443Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2023-09-07 13:12:59.123{8814F3F5-CC5B-64F9-5C01-000000000A03}4964C:\Temp\BuilderNjRat\njRAT v0.7\Server.exeC:\Temp\BuilderNjRat\njRAT v0.7\Server.exe-----MD5=696CBE2CB6F7FAC5ED6262BCA51238BB,SHA256=43005D86607DC94C7D378AA1B8844947BAA03860652F2F2340266061AF12E524,IMPHASH=F34D5F2D4577ED6D9CEEC516C1F5A744false-UnavailableATTACKRANGE\Administrator 734700x800000000000000040132Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2023-09-07 13:02:59.944{8814F3F5-CA03-64F9-2201-000000000A03}4856C:\Users\Administrator\AppData\Local\Temp\server.exeC:\Users\Administrator\AppData\Local\Temp\server.exe-----MD5=696CBE2CB6F7FAC5ED6262BCA51238BB,SHA256=43005D86607DC94C7D378AA1B8844947BAA03860652F2F2340266061AF12E524,IMPHASH=F34D5F2D4577ED6D9CEEC516C1F5A744false-UnavailableATTACKRANGE\Administrator 734700x800000000000000040051Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2023-09-07 13:02:54.116{8814F3F5-C9FE-64F9-1401-000000000A03}5116C:\Users\Administrator\AppData\Local\Temp\2\server.exeC:\Users\Administrator\AppData\Local\Temp\2\server.exe-----MD5=696CBE2CB6F7FAC5ED6262BCA51238BB,SHA256=43005D86607DC94C7D378AA1B8844947BAA03860652F2F2340266061AF12E524,IMPHASH=F34D5F2D4577ED6D9CEEC516C1F5A744false-UnavailableATTACKRANGE\Administrator 734700x800000000000000039997Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2023-09-07 13:02:52.147{8814F3F5-C9FC-64F9-0E01-000000000A03}4832C:\Users\Administrator\AppData\Local\Temp\2\server.exeC:\Users\Administrator\AppData\Local\Temp\2\server.exe-----MD5=696CBE2CB6F7FAC5ED6262BCA51238BB,SHA256=43005D86607DC94C7D378AA1B8844947BAA03860652F2F2340266061AF12E524,IMPHASH=F34D5F2D4577ED6D9CEEC516C1F5A744false-UnavailableATTACKRANGE\Administrator 734700x800000000000000037591Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2023-09-07 12:41:00.875{8814F3F5-C4DC-64F9-3006-000000000903}3548C:\Users\Administrator\AppData\Local\Temp\2\server.exeC:\Users\Administrator\AppData\Local\Temp\2\server.exe-----MD5=696CBE2CB6F7FAC5ED6262BCA51238BB,SHA256=43005D86607DC94C7D378AA1B8844947BAA03860652F2F2340266061AF12E524,IMPHASH=F34D5F2D4577ED6D9CEEC516C1F5A744false-UnavailableATTACKRANGE\Administrator 734700x800000000000000037383Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2023-09-07 12:38:02.695{8814F3F5-C42A-64F9-1B06-000000000903}4668C:\Users\Administrator\AppData\Local\Temp\2\server.exeC:\Users\Administrator\AppData\Local\Temp\2\server.exe-----MD5=696CBE2CB6F7FAC5ED6262BCA51238BB,SHA256=43005D86607DC94C7D378AA1B8844947BAA03860652F2F2340266061AF12E524,IMPHASH=F34D5F2D4577ED6D9CEEC516C1F5A744false-UnavailableATTACKRANGE\Administrator 734700x800000000000000037325Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2023-09-07 12:37:54.884{8814F3F5-C422-64F9-1A06-000000000903}856C:\Temp\BuilderNjRat\njRAT v0.7\Server.exeC:\Temp\BuilderNjRat\njRAT v0.7\Server.exe-----MD5=696CBE2CB6F7FAC5ED6262BCA51238BB,SHA256=43005D86607DC94C7D378AA1B8844947BAA03860652F2F2340266061AF12E524,IMPHASH=F34D5F2D4577ED6D9CEEC516C1F5A744false-UnavailableATTACKRANGE\Administrator