<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Sysmon' Guid='{5770385f-c22a-43e0-bf4c-06f5698ffbd9}'/><EventID>23</EventID><Version>5</Version><Level>4</Level><Task>23</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2020-05-07T08:14:44.489978500Z'/><EventRecordID>612</EventRecordID><Correlation/><Execution ProcessID='664' ThreadID='2360'/><Channel>Microsoft-Windows-Sysmon/Operational</Channel><Computer>vagrant-2012-r2</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='RuleName'>-</Data><Data Name='UtcTime'>2020-05-07 08:14:44.489</Data><Data Name='ProcessGuid'>{42f11c3b-c36f-5eb3-2c07-290000000000}</Data><Data Name='ProcessId'>2184</Data><Data Name='User'>VAGRANT-2012-R2\vagrant</Data><Data Name='Image'>C:\Users\vagrant\.gvm\versions\go1.13.10.windows.amd64\bin\go.exe</Data><Data Name='TargetFilename'>C:\Users\vagrant\AppData\Local\Temp\1\go-build583768550\b001\test.test.exe</Data><Data Name='Hashes'>MD5=199E1CF5B2250BD515ECCCF4CA686301,IMPHASH=D90D8C7812AEC8DA0FA173AFA1293AB2</Data><Data Name='IsExecutable'>true</Data><Data Name='Archived'>true</Data></EventData></Event>
