Exfiltration/RW-20260504_124253.txt
|
2026:05:04 12:42:57 | Hi adsa, next time I will also encrypt your Active Directory backup files.
Directory: \\CH01-DC19-01\AD-Backup\adsa Mode LastWriteTime Length Name ---- ------------- ------ ---- -a--- 2026-04-30 6:36 PM 5409 _ChangeLog.md -a--- 2022-12-01 12:02 AM 4217 AS2Go-admin.jpg -a--- 2022-12-01 12:02 AM 4582 AS2Go-helpdesk.jpg -a--- 2022-12-01 12:02 AM 4698 AS2Go-victim.jpg -a--- 2024-10-08 4:50 PM 528 AS2Go.code-workspace -a--- 2026-05-04 12:30 PM 4918 AS2Go.json -a--- 2026-03-19 7:08 AM 512 AS2Go.piskel -a--- 2026-04-30 6:36 PM 1528 AS2Go.psd1 -a--- 2026-04-30 7:53 PM 25468 AS2Go.psm1 -a--- 2026-02-03 1:42 PM 822 launch.json -a--- 2026-02-05 10:24 AM 128 my-passwords.txt -a--- 2025-10-29 9:45 AM 29080 New-AS2GoUsers.ps1.log -a--- 2026-02-26 10:47 AM 22886 ntds.dit -a--- 2026-04-30 6:36 PM 8866 README.md -a--- 2026-04-30 7:56 PM 807 RW-20260430_195534.txt -a--- 2026-04-30 8:22 PM 881 RW-20260430_202234.txt -a--- 2026-04-30 8:23 PM 955 RW-20260430_202336.txt -a--- 2026-04-30 8:23 PM 1029 RW-20260430_202345.txt -a--- 2026-05-04 12:07 PM 103 RW-20260504_120738.txt -a--- 2026-05-04 12:10 PM 1148 RW-20260504_121019.txt -a--- 2026-05-04 12:14 PM 1222 RW-20260504_121407.txt -a--- 2026-05-04 12:19 PM 1292 RW-20260504_121928.txt -a--- 2026-05-04 12:35 PM 1773 RW-20260504_123446.txt -a--- 2026-05-04 12:39 PM 1847 RW-20260504_123921.txt -a--- 2026-05-04 12:41 PM 1921 RW-20260504_124142.txt |