11241100x800000000000000010273Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.localDLL2024-03-20 16:30:17.402{11a99e1f-0f19-65fb-0008-000000008d02}1204C:\Program Files\Microsoft Office\Root\Office16\outlook.exeC:\Users\Administrator\AppData\Local\Microsoft\FORMS\IPM.Note.Hello\hello.dll2024-03-20 16:30:17.402ATTACKRANGE\Administrator 154100x800000000000000010272Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2024-03-20 16:30:17.299{11a99e1f-0f19-65fb-0008-000000008d02}1204C:\Program Files\Microsoft Office\Root\Office16\outlook.exe-----"C:\Program Files\Microsoft Office\Root\Office16\outlook.exe" C:\Program Files\Microsoft Office\Root\Office16\ATTACKRANGE\Administrator{11a99e1f-094a-65fb-38d7-3c0000000000}0x3cd7382HighMD5=7658D18BB57C0F2BC69753763AAB401C,SHA256=848C9E012F97D894BC29F6C8FB83AFD942820FBBBB9A59FD5E2FA07F8B018AFD,IMPHASH=8C4A1B91093C7A7F8CE445AEC3478AC9{11a99e1f-094c-65fb-8806-000000008d02}1008C:\Windows\explorer.exe"C:\Windows\Explorer.EXE" /NOUACCHECKATTACKRANGE\Administrator 154100x800000000000000010264Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2024-03-20 16:29:43.466{11a99e1f-0ef7-65fb-f907-000000008d02}1460C:\Program Files\Microsoft Office\Root\Office16\outlook.exe-----"C:\Program Files\Microsoft Office\Root\Office16\outlook.exe" C:\Program Files\Microsoft Office\Root\Office16\ATTACKRANGE\Administrator{11a99e1f-094a-65fb-38d7-3c0000000000}0x3cd7382HighMD5=7658D18BB57C0F2BC69753763AAB401C,SHA256=848C9E012F97D894BC29F6C8FB83AFD942820FBBBB9A59FD5E2FA07F8B018AFD,IMPHASH=8C4A1B91093C7A7F8CE445AEC3478AC9{11a99e1f-094c-65fb-8806-000000008d02}1008C:\Windows\explorer.exe"C:\Windows\Explorer.EXE" /NOUACCHECKATTACKRANGE\Administrator 154100x800000000000000010262Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2024-03-20 16:29:35.399{11a99e1f-0eef-65fb-f707-000000008d02}6584C:\Program Files\Microsoft Office\Root\Office16\outlook.exe-----"C:\Program Files\Microsoft Office\Root\Office16\outlook.exe" C:\Program Files\Microsoft Office\Root\Office16\ATTACKRANGE\Administrator{11a99e1f-094a-65fb-38d7-3c0000000000}0x3cd7382HighMD5=7658D18BB57C0F2BC69753763AAB401C,SHA256=848C9E012F97D894BC29F6C8FB83AFD942820FBBBB9A59FD5E2FA07F8B018AFD,IMPHASH=8C4A1B91093C7A7F8CE445AEC3478AC9{11a99e1f-094c-65fb-8806-000000008d02}1008C:\Windows\explorer.exe"C:\Windows\Explorer.EXE" /NOUACCHECKATTACKRANGE\Administrator 154100x800000000000000010254Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2024-03-20 16:29:11.661{11a99e1f-0ed7-65fb-f407-000000008d02}5736C:\Program Files\Microsoft Office\Root\Office16\outlook.exe-----"C:\Program Files\Microsoft Office\Root\Office16\outlook.exe" C:\Program Files\Microsoft Office\Root\Office16\ATTACKRANGE\Administrator{11a99e1f-094a-65fb-38d7-3c0000000000}0x3cd7382HighMD5=7658D18BB57C0F2BC69753763AAB401C,SHA256=848C9E012F97D894BC29F6C8FB83AFD942820FBBBB9A59FD5E2FA07F8B018AFD,IMPHASH=8C4A1B91093C7A7F8CE445AEC3478AC9{11a99e1f-094c-65fb-8806-000000008d02}1008C:\Windows\explorer.exe"C:\Windows\Explorer.EXE" /NOUACCHECKATTACKRANGE\Administrator 11241100x800000000000000010181Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.localDLL2024-03-20 16:18:01.571{11a99e1f-0c39-65fb-ae07-000000008d02}1284C:\Temp\outlook\target\debug\outlook.exeC:\Users\Administrator\AppData\Local\Microsoft\FORMS\IPM.Note.Hello\hello.dll2024-03-20 16:18:01.571ATTACKRANGE\Administrator 154100x800000000000000010179Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2024-03-20 16:18:01.359{11a99e1f-0c39-65fb-ae07-000000008d02}1284C:\Temp\outlook\target\debug\outlook.exe-----"C:\Temp\outlook\target\debug\outlook.exe" C:\Temp\outlook\target\debug\ATTACKRANGE\Administrator{11a99e1f-094a-65fb-38d7-3c0000000000}0x3cd7382HighMD5=7658D18BB57C0F2BC69753763AAB401C,SHA256=848C9E012F97D894BC29F6C8FB83AFD942820FBBBB9A59FD5E2FA07F8B018AFD,IMPHASH=8C4A1B91093C7A7F8CE445AEC3478AC9{11a99e1f-094c-65fb-8806-000000008d02}1008C:\Windows\explorer.exe"C:\Windows\Explorer.EXE" /NOUACCHECKATTACKRANGE\Administrator