GC Generation: 0(C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll)Fields:MT Field Offset Type VT Attr Value Name69040a00 40000b5 4 System.String 0 instance 02ad6920 _className6903fe74 40000b6 8 ...ec...
configcase_sensitive=falsetimeframe=30d |dataset=xdr_data |filterevent_type=ENUM.LOAD_IMAGEand(action_module_pathcontains"C:\ProgramData"oraction_module_pathcontains"\public"oraction_module_pathcontains"appdata")andaction_module_signature_status=3and(actor_process_image_namenotcontains"rundll32.exe"or...