154100x8000000000000000221578Microsoft-Windows-Sysmon/Operationalwin-dc-ctus-attack-range-657.attackrange.local-2022-11-30 14:59:21.732{89C4FCAF-6FC9-6387-E616-000000009402}7004C:\Windows\System32\fsutil.exe10.0.14393.0 (rs1_release.160715-1616)fsutil.exeMicrosoft® Windows® Operating SystemMicrosoft Corporationfsutil.exefsutil fsinfoC:\Users\Public\ATTACKRANGE\Administrator{89C4FCAF-46B7-6387-1220-3C0000000000}0x3c20122HighMD5=F0098B57C5A1C572EDBA78CECECC8155,SHA256=66A36EFFC1CCAC37A95ED1D268C1E5F92F47707F8E0C8039C2BD8C954C5F4100,IMPHASH=8B6CDC215CC5EF9A6E1E5EB858BEBC95{89C4FCAF-57DF-6387-6308-000000009402}5892C:\Windows\System32\cmd.exe"cmd.exe" /s /k pushd "C:\Users\Public"