154100x8000000000000000114600Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2023-12-12 09:44:36.812{AE77D3C2-2B84-6578-C906-000000003103}3684C:\Windows\SysWOW64\netsh.exe10.0.14393.0 (rs1_release.160715-1616)Network Command ShellMicrosoft® Windows® Operating SystemMicrosoft Corporationnetsh.exenetsh firewall add allowedprogram "C:\Users\Administrator\AppData\Local\Temp\2\server.exe" "server.exe" ENABLEC:\Users\Administrator\Downloads\Server\ATTACKRANGE\Administrator{AE77D3C2-1C61-6578-8093-040000000000}0x493802HighMD5=C3542EE1B9198274179B797C9B2A4633,SHA256=00B424FCE60E8C3ABB5BC05E2E1C4D86F14B07DB48D08660A5A7BB25FC9E3C23,IMPHASH=458D7E5D4617D66110F9AA49F8F7C3C3{AE77D3C2-2B82-6578-C806-000000003103}3424C:\Users\Administrator\AppData\Local\Temp\2\server.exe"C:\Users\Administrator\AppData\Local\Temp\2\server.exe" ATTACKRANGE\Administrator 154100x8000000000000000114440Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2023-12-12 09:43:24.397{AE77D3C2-2B3C-6578-BF06-000000003103}3792C:\Windows\SysWOW64\netsh.exe10.0.14393.0 (rs1_release.160715-1616)Network Command ShellMicrosoft® Windows® Operating SystemMicrosoft Corporationnetsh.exenetsh firewall add allowedprogram "C:\Users\Administrator\AppData\Local\Temp\2\server.exe" "server.exe" ENABLEC:\Users\ADMINI~1\AppData\Local\Temp\2\ATTACKRANGE\Administrator{AE77D3C2-1C61-6578-8093-040000000000}0x493802HighMD5=C3542EE1B9198274179B797C9B2A4633,SHA256=00B424FCE60E8C3ABB5BC05E2E1C4D86F14B07DB48D08660A5A7BB25FC9E3C23,IMPHASH=458D7E5D4617D66110F9AA49F8F7C3C3{AE77D3C2-2B39-6578-BE06-000000003103}6748C:\Users\Administrator\AppData\Local\Temp\2\server.exe"C:\Users\Administrator\AppData\Local\Temp\2\server.exe"ATTACKRANGE\Administrator 154100x8000000000000000108692Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2023-12-12 09:00:09.600{AE77D3C2-2119-6578-E201-000000003103}6980C:\Windows\SysWOW64\netsh.exe10.0.14393.0 (rs1_release.160715-1616)Network Command ShellMicrosoft® Windows® Operating SystemMicrosoft Corporationnetsh.exenetsh firewall add allowedprogram "C:\Users\Administrator\AppData\Local\Temp\server.exe" "server.exe" ENABLEC:\Users\Administrator\Downloads\Server\ATTACKRANGE\Administrator{AE77D3C2-1C61-6578-8093-040000000000}0x493802HighMD5=C3542EE1B9198274179B797C9B2A4633,SHA256=00B424FCE60E8C3ABB5BC05E2E1C4D86F14B07DB48D08660A5A7BB25FC9E3C23,IMPHASH=458D7E5D4617D66110F9AA49F8F7C3C3{AE77D3C2-2113-6578-E101-000000003103}5100C:\Users\Administrator\AppData\Local\Temp\server.exe"C:\Users\Administrator\AppData\Local\Temp\server.exe" ATTACKRANGE\Administrator