13241300x8000000000000000164199288Microsoft-Windows-Sysmon/Operationalmswin-server.attackrange.local-SetValue2023-05-10 16:04:49.689{EF490992-C0A1-645B-A0A1-00000000CE02}8464C:\Windows\system32\reg.exeHKCR\.wav\OpenWithProgIds\AtomicSnakeBinary DataMSWIN-SERVER\Administrator
13241300x8000000000000000164197657Microsoft-Windows-Sysmon/Operationalmswin-server.attackrange.local-SetValue2023-05-10 16:03:44.463{EF490992-8FFB-645A-7087-00000000CE02}7068C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeHKCR\.wav\OpenWithProgIds\AtomicSnakeBinary DataMSWIN-SERVER\Administrator