154100x80000000000000001562Microsoft-Windows-Sysmon/OperationalEC2AMAZ-UGL8NO0 -2025-08-01 13:55:10.0622835B818-C73E-688C-8905-0000000043036752C:\Users\user\gdrive.exe-----"C:\Users\user\gdrive.exe" --refresh-token ya29.a0AS3H6Ny6yuygqojpUEhNLHUB8a-329kpDOA9fQTE6fahR5NJ8juL0G0rRAgmxCJOo5nLWdJspAEmax7vrDoJF2sFSFIlq1mSeZtNjYWLMk34CwhSDWJzh8yjwkDrGGrNgz4gndH5klG27NTCSIrcCFwHxSagu-HqmncKBzikaCgYKAW8SARASFQHGX2MiUWLxyjDAI8K_R8u3ppewg0175 download --path c:\Windows\Temp -f 1ul4OnmiIPNHWTQMAtUcIhfav6cMqi1PAC:\Users\user\EC2AMAZ-UGL8NO0\user2835B818-C595-688C-2BE5-0300000000000x3e52b2MediumMD5=3C1E607DE1AB44B97ACD19578F0D9289,SHA256=3CD28B0B5DA00838005E87AE2DA6BFDDBEBA652C3CE1265CDE03BE32A44C40BE,IMPHASH=F0070935B15A909B9DC00BE7997E61122835B818-C697-688C-0001-0000000043034388C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"EC2AMAZ-UGL8NO0\user 154100x80000000000000001276Microsoft-Windows-Sysmon/OperationalEC2AMAZ-UGL8NO0 -2025-08-01 13:54:50.0422835B818-C72A-688C-8705-0000000043031100C:\Users\user\gdrive.exe-----"C:\Users\user\gdrive.exe" --refresh-token ya29.a0AS3H6Ny6yuygqojpUEhNLHUB8a-329kpDOA9fQTE6fahR5NJ8juL0G0rRAgmxCJOo5nLWdJspAEmax7vrDoJF2sFSFIlq1mSeZtNjYWLMk34CwhSDWJzh8yjwkDrGGrNgz4gndH5klG27NTCSIrcCFwHxSagu-HqmncKBzikaCgYKAW8SARASFQHGX2MiUWLxyjDAI8K_R8u3ppewg0175 listC:\Users\user\EC2AMAZ-UGL8NO0\user2835B818-C595-688C-2BE5-0300000000000x3e52b2MediumMD5=3C1E607DE1AB44B97ACD19578F0D9289,SHA256=3CD28B0B5DA00838005E87AE2DA6BFDDBEBA652C3CE1265CDE03BE32A44C40BE,IMPHASH=F0070935B15A909B9DC00BE7997E61122835B818-C697-688C-0001-0000000043034388C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"EC2AMAZ-UGL8NO0\user 154100x80000000000000001562Microsoft-Windows-Sysmon/OperationalEC2AMAZ-UGL8NO0 -2025-08-01 13:56:12.0632835B818-C73E-688C-8905-0000000043038722C:\Users\user\gdrive.exe-----"C:\Users\user\gdrive.exe" --refresh-token ya29.a0AS3H6Ny6yuygqojpUEhNLHUB8a-329kpDOA9fQTE6fahR5NJ8juL0G0rRAgmxCJOo5nLWdJspAEmax7vrDoJF2sFSFIlq1mSeZtNjYWLMk34CwhSDWJzh8yjwkDrGGrNgz4gndH5klG27NTCSIrcCFwHxSagu-HqmncKBzikaCgYKAW8SARASFQHGX2MiUWLxyjDAI8K_R8u3ppewg0175 upload --name c:\Windows\Temp\update2801792.tmp.enC:\Users\user\EC2AMAZ-UGL8NO0\user2835B818-C595-688C-2BE5-0300000000000x3e52b2MediumMD5=3C1E607DE1AB44B97ACD19578F0D9289,SHA256=3CD28B0B5DA00838005E87AE2DA6BFDDBEBA652C3CE1265CDE03BE32A44C40BE,IMPHASH=F0070935B15A909B9DC00BE7997E61122835B818-C697-688C-0001-0000000043034388C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"EC2AMAZ-UGL8NO0\user