154100x80000000000000003767Microsoft-Windows-Sysmon/Operationalar-win-dc-2-2025-08-25 14:57:41.430{2cb189ff-79e5-68ac-8b0b-000000006303}5368C:\Windows\System32\net1.exe10.0.17763.1 (WinBuild.160101.0800)Net CommandMicrosoft® Windows® Operating SystemMicrosoft Corporationnet1.exenet startC:\Temp\1\AR-WIN-DC-2\Administrator{2cb189ff-4fa4-68ac-4626-180000000000}0x1826462HighMD5=AE61D8F04BCDE8158304067913160B31,SHA256=25C8266D2BC1D5626DCDF72419838B397D28D44D00AC09F02FF4E421B43EC369,IMPHASH=57F0C47AE2A1A2C06C8B987372AB0B07{2cb189ff-552a-68ac-6804-000000006303}2268C:\Windows\System32\cmd.exe"C:\Windows\system32\cmd.exe" AR-WIN-DC-2\Administrator 154100x80000000000000003609Microsoft-Windows-Sysmon/Operationalar-win-dc-2-2025-08-25 14:36:11.177{2cb189ff-74db-68ac-f80a-000000006303}2096C:\Windows\System32\net1.exe10.0.17763.1 (WinBuild.160101.0800)Net CommandMicrosoft® Windows® Operating SystemMicrosoft Corporationnet1.exenet startC:\Temp\1\AR-WIN-DC-2\Administrator{2cb189ff-4fa4-68ac-4626-180000000000}0x1826462HighMD5=AE61D8F04BCDE8158304067913160B31,SHA256=25C8266D2BC1D5626DCDF72419838B397D28D44D00AC09F02FF4E421B43EC369,IMPHASH=57F0C47AE2A1A2C06C8B987372AB0B07{2cb189ff-552a-68ac-6804-000000006303}2268C:\Windows\System32\cmd.exe"C:\Windows\system32\cmd.exe" AR-WIN-DC-2\Administrator 154100x80000000000000002943Microsoft-Windows-Sysmon/Operationalar-win-dc-2-2025-08-25 13:14:35.412{2cb189ff-61bb-68ac-a108-000000006303}2904C:\Windows\System32\net1.exe10.0.17763.1 (WinBuild.160101.0800)Net CommandMicrosoft® Windows® Operating SystemMicrosoft Corporationnet1.exenet startC:\Temp\1\AR-WIN-DC-2\Administrator{2cb189ff-4fa4-68ac-4626-180000000000}0x1826462HighMD5=AE61D8F04BCDE8158304067913160B31,SHA256=25C8266D2BC1D5626DCDF72419838B397D28D44D00AC09F02FF4E421B43EC369,IMPHASH=57F0C47AE2A1A2C06C8B987372AB0B07{2cb189ff-552a-68ac-6804-000000006303}2268C:\Windows\System32\cmd.exe"C:\Windows\system32\cmd.exe" AR-WIN-DC-2\Administrator