154100x80000000000000008165994Microsoft-Windows-Sysmon/Operationalar-win-1-2026-02-03 11:34:18.367{F64A3391-DD3A-6981-4004-000000001204}3060C:\Windows\System32\mmc.exe10.0.14393.8592 (rs1_release.251022-1740)Microsoft Management ConsoleMicrosoft® Windows® Operating SystemMicrosoft Corporationmmc.exe"C:\Windows\system32\mmc.exe" "C:\Temp\FakeExtension\Wia_User_Guide\AI_Prompts.msc" C:\Temp\FakeExtension\Wia_User_Guide\AR-WIN-1\Administrator{F64A3391-D1A0-6981-7A95-1D0000000000}0x1d957a2HighMD5=9435F156B4893B7ED7FB5857ADFB8429,SHA256=7954EFF7AA512597C2F653D7267C093332C84C808B91C8D3E47418163049F4E3,IMPHASH=ED5A55DAB5A02F29D6EE7E0015F91A9F{F64A3391-D1A2-6981-DA02-000000001204}2196C:\Windows\explorer.exeC:\Windows\Explorer.EXEAR-WIN-1\Administrator 154100x80000000000000008155190Microsoft-Windows-Sysmon/Operationalar-win-1-2026-02-03 11:01:08.108{F64A3391-D574-6981-6103-000000001204}2580C:\Windows\System32\mmc.exe10.0.14393.8592 (rs1_release.251022-1740)Microsoft Management ConsoleMicrosoft® Windows® Operating SystemMicrosoft Corporationmmc.exe"C:\Windows\system32\mmc.exe" "C:\Temp\FakeExtension\Wia_User_Guide\AI_Prompts.msc" C:\Temp\FakeExtension\Wia_User_Guide\AR-WIN-1\Administrator{F64A3391-D1A0-6981-7A95-1D0000000000}0x1d957a2HighMD5=9435F156B4893B7ED7FB5857ADFB8429,SHA256=7954EFF7AA512597C2F653D7267C093332C84C808B91C8D3E47418163049F4E3,IMPHASH=ED5A55DAB5A02F29D6EE7E0015F91A9F{F64A3391-D1A2-6981-DA02-000000001204}2196C:\Windows\explorer.exeC:\Windows\Explorer.EXEAR-WIN-1\Administrator 154100x80000000000000008152073Microsoft-Windows-Sysmon/Operationalar-win-1-2026-02-03 10:51:15.905{F64A3391-D323-6981-2203-000000001204}1884C:\Windows\System32\mmc.exe10.0.14393.8592 (rs1_release.251022-1740)Microsoft Management ConsoleMicrosoft® Windows® Operating SystemMicrosoft Corporationmmc.exe"C:\Windows\system32\mmc.exe" "C:\Temp\FakeExtension\Wia_User_Guide\AI_Prompts.msc" C:\Temp\FakeExtension\Wia_User_Guide\AR-WIN-1\Administrator{F64A3391-D1A0-6981-7A95-1D0000000000}0x1d957a2HighMD5=9435F156B4893B7ED7FB5857ADFB8429,SHA256=7954EFF7AA512597C2F653D7267C093332C84C808B91C8D3E47418163049F4E3,IMPHASH=ED5A55DAB5A02F29D6EE7E0015F91A9F{F64A3391-D1A2-6981-DA02-000000001204}2196C:\Windows\explorer.exeC:\Windows\Explorer.EXEAR-WIN-1\Administrator 154100x80000000000000008149749Microsoft-Windows-Sysmon/Operationalar-win-1-2026-02-03 10:45:25.777{F64A3391-D1C5-6981-F202-000000001204}1268C:\Windows\System32\mmc.exe10.0.14393.8592 (rs1_release.251022-1740)Microsoft Management ConsoleMicrosoft® Windows® Operating SystemMicrosoft Corporationmmc.exe"C:\Windows\system32\mmc.exe" "C:\Temp\Console2.msc" C:\Temp\AR-WIN-1\Administrator{F64A3391-D1A0-6981-7A95-1D0000000000}0x1d957a2HighMD5=9435F156B4893B7ED7FB5857ADFB8429,SHA256=7954EFF7AA512597C2F653D7267C093332C84C808B91C8D3E47418163049F4E3,IMPHASH=ED5A55DAB5A02F29D6EE7E0015F91A9F{F64A3391-D1A2-6981-DA02-000000001204}2196C:\Windows\explorer.exeC:\Windows\Explorer.EXEAR-WIN-1\Administrator