Exfiltration/RW-20260504_135445.txt

2026:05:04 13:54:51 | Hi adsa, next time I will also encrypt your Active Directory backup files.
 
    Directory: \\CH01-DC19-01\AD-Backup\adsa
 
Mode LastWriteTime Length Name
---- ------------- ------ ----
-a--- 2022-12-01 12:02 AM 4217 AS2Go-admin.jpg
-a--- 2022-12-01 12:02 AM 4582 AS2Go-helpdesk.jpg
-a--- 2022-12-01 12:02 AM 4698 AS2Go-victim.jpg
-a--- 2026-02-05 10:24 AM 128 my-passwords.txt
-a--- 2025-10-29 9:45 AM 29080 New-AS2GoUsers.ps1.log
-a--- 2026-02-26 10:47 AM 22886 ntds.dit
-a--- 2026-05-04 12:07 PM 103 RW-20260504_120738.txt
-a--- 2026-05-04 12:35 PM 1773 RW-20260504_123446.txt
-a--- 2026-05-04 12:39 PM 1847 RW-20260504_123921.txt
-a--- 2026-05-04 12:41 PM 1921 RW-20260504_124142.txt
-a--- 2026-05-04 12:42 PM 1995 RW-20260504_124253.txt
-a--- 2026-05-04 1:20 PM 2069 RW-20260504_132031.txt
-a--- 2026-05-04 1:21 PM 2143 RW-20260504_132148.txt
-a--- 2026-05-04 1:28 PM 2217 RW-20260504_132814.txt
-a--- 2026-05-04 1:33 PM 2291 RW-20260504_133313.txt