154100x8000000000000000251884Microsoft-Windows-Sysmon/Operationalar-win.nas.domain-2024-12-05 16:20:29.727{38b9f94a-d2cd-6751-4230-000000002f03}120C:\Users\Administrator\Documents\subinacl\subinacl.exe5.2.3790.1180SubInAclMicrosoft® Windows® Operating SystemMicrosoft CorporationSubInAcl.exesubinacl.exe /helpC:\Users\Administrator\Documents\subinacl\NAS\Administrator{38b9f94a-211d-6750-1a05-060000000000}0x6051a2HighMD5=53CDBB093B0AEE9FD6CF1CBD25A95077,SHA256=01A2E49F9EED2367545966A0DC0F1D466FF32BD0F2844864CE356B518C49085C,IMPHASH=2EAF7681CF60327CFF49F2244E0AA8B4{38b9f94a-60e1-6750-1a08-000000002f03}4632C:\Windows\System32\cmd.exe"C:\Windows\system32\cmd.exe" NAS\Administrator