Exfiltration/RW-20260504_141954.txt
|
2026:05:04 14:19:54 | Hi adsa, next time I will also encrypt your Active Directory backup files.
Directory: \\CH01-DC19-01\AD-Backup\adsa Mode LastWriteTime Length Name ---- ------------- ------ ---- -a--- 2022-12-01 12:02 AM 4217 AS2Go-admin.jpg -a--- 2022-12-01 12:02 AM 4582 AS2Go-helpdesk.jpg -a--- 2022-12-01 12:02 AM 4698 AS2Go-victim.jpg -a--- 2026-02-05 10:24 AM 128 my-passwords.txt -a--- 2025-10-29 9:45 AM 29080 New-AS2GoUsers.ps1.log -a--- 2026-02-26 10:47 AM 22886 ntds.dit -a--- 2026-05-04 12:07 PM 103 RW-20260504_120738.txt -a--- 2026-05-04 12:35 PM 1773 RW-20260504_123446.txt -a--- 2026-05-04 12:39 PM 1847 RW-20260504_123921.txt -a--- 2026-05-04 12:41 PM 1921 RW-20260504_124142.txt -a--- 2026-05-04 12:42 PM 1995 RW-20260504_124253.txt -a--- 2026-05-04 1:20 PM 2069 RW-20260504_132031.txt -a--- 2026-05-04 1:21 PM 2143 RW-20260504_132148.txt -a--- 2026-05-04 1:28 PM 2217 RW-20260504_132814.txt -a--- 2026-05-04 1:33 PM 2291 RW-20260504_133313.txt -a--- 2026-05-04 1:54 PM 1336 RW-20260504_135445.txt -a--- 2026-05-04 2:06 PM 1410 RW-20260504_140617.txt |