154100x800000000000000013084Microsoft-Windows-Sysmon/Operationalar-win-dc2-2025-08-20 12:20:17.563{53FBDF3C-BD81-68A5-AB08-00000000EE03}1916C:\Windows\System32\win32calc.exe10.0.14393.0 (rs1_release.160715-1616)Windows CalculatorMicrosoft® Windows® Operating SystemMicrosoft CorporationWIN32CALC.EXE"C:\Windows\System32\win32calc.exe" C:\Windows\system32\AR-WIN-DC2\Administrator{53FBDF3C-A44D-68A5-1341-5E0000000000}0x5e41132HighMD5=B31A19BA38F110838119299B50517073,SHA256=D7B378A4BC4DEAE748462D216D14A20CCB1BAC1D3FFBC67711DB2CC1D8B182B7,IMPHASH=83A6FF176255FE0F3F902360860DA5F8{53FBDF3C-BD81-68A5-AA08-00000000EE03}4928C:\Windows\WINPROJ.EXEWINPROJ.EXEAR-WIN-DC2\Administrator 154100x800000000000000013083Microsoft-Windows-Sysmon/Operationalar-win-dc2-2025-08-20 12:20:17.417{53FBDF3C-BD81-68A5-AA08-00000000EE03}4928C:\Windows\WINPROJ.EXE10.0.14393.4169 (rs1_release.210107-1130)Windows CalculatorMicrosoft® Windows® Operating SystemMicrosoft CorporationCALC.EXEWINPROJ.EXEC:\Windows\system32\AR-WIN-DC2\Administrator{53FBDF3C-A44D-68A5-1341-5E0000000000}0x5e41132HighMD5=2A5CC198FEFC04C2B6B95207A91D3668,SHA256=04FA16D1FBB5F047E7BF9756E8DDC1365AFEAAB22DD4A2C3F03E067B75BED8EA,IMPHASH=3843C3D4A5A7D1045ABE9A4BFCFAAB28{53FBDF3C-BD80-68A5-A908-00000000EE03}5492C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -EmbeddingAR-WIN-DC2\Administrator 154100x800000000000000013069Microsoft-Windows-Sysmon/Operationalar-win-dc2-2025-08-20 12:19:50.942{53FBDF3C-BD66-68A5-A508-00000000EE03}5712C:\Windows\System32\win32calc.exe10.0.14393.0 (rs1_release.160715-1616)Windows CalculatorMicrosoft® Windows® Operating SystemMicrosoft CorporationWIN32CALC.EXE"C:\Windows\System32\win32calc.exe" C:\Windows\system32\AR-WIN-DC2\Administrator{53FBDF3C-A44D-68A5-1341-5E0000000000}0x5e41132HighMD5=B31A19BA38F110838119299B50517073,SHA256=D7B378A4BC4DEAE748462D216D14A20CCB1BAC1D3FFBC67711DB2CC1D8B182B7,IMPHASH=83A6FF176255FE0F3F902360860DA5F8{53FBDF3C-BD66-68A5-A308-00000000EE03}5536C:\Windows\WINPROJ.EXEWINPROJ.EXEAR-WIN-DC2\Administrator 154100x800000000000000013068Microsoft-Windows-Sysmon/Operationalar-win-dc2-2025-08-20 12:19:50.713{53FBDF3C-BD66-68A5-A308-00000000EE03}5536C:\Windows\WINPROJ.EXE10.0.14393.4169 (rs1_release.210107-1130)Windows CalculatorMicrosoft® Windows® Operating SystemMicrosoft CorporationCALC.EXEWINPROJ.EXEC:\Windows\system32\AR-WIN-DC2\Administrator{53FBDF3C-A44D-68A5-1341-5E0000000000}0x5e41132HighMD5=2A5CC198FEFC04C2B6B95207A91D3668,SHA256=04FA16D1FBB5F047E7BF9756E8DDC1365AFEAAB22DD4A2C3F03E067B75BED8EA,IMPHASH=3843C3D4A5A7D1045ABE9A4BFCFAAB28{53FBDF3C-BD66-68A5-A108-00000000EE03}5488C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -EmbeddingAR-WIN-DC2\Administrator 154100x800000000000000012988Microsoft-Windows-Sysmon/Operationalar-win-dc2-2025-08-20 12:10:47.902{53FBDF3C-BB47-68A5-6508-00000000EE03}4112C:\Windows\System32\win32calc.exe10.0.14393.0 (rs1_release.160715-1616)Windows CalculatorMicrosoft® Windows® Operating SystemMicrosoft CorporationWIN32CALC.EXE"C:\Windows\System32\win32calc.exe" C:\Windows\system32\AR-WIN-DC2\Administrator{53FBDF3C-A44D-68A5-1341-5E0000000000}0x5e41132HighMD5=B31A19BA38F110838119299B50517073,SHA256=D7B378A4BC4DEAE748462D216D14A20CCB1BAC1D3FFBC67711DB2CC1D8B182B7,IMPHASH=83A6FF176255FE0F3F902360860DA5F8{53FBDF3C-BB47-68A5-6408-00000000EE03}5108C:\Windows\WINPROJ.EXEWINPROJ.EXEAR-WIN-DC2\Administrator 154100x800000000000000012987Microsoft-Windows-Sysmon/Operationalar-win-dc2-2025-08-20 12:10:47.701{53FBDF3C-BB47-68A5-6408-00000000EE03}5108C:\Windows\WINPROJ.EXE10.0.14393.4169 (rs1_release.210107-1130)Windows CalculatorMicrosoft® Windows® Operating SystemMicrosoft CorporationCALC.EXEWINPROJ.EXEC:\Windows\system32\AR-WIN-DC2\Administrator{53FBDF3C-A44D-68A5-1341-5E0000000000}0x5e41132HighMD5=2A5CC198FEFC04C2B6B95207A91D3668,SHA256=04FA16D1FBB5F047E7BF9756E8DDC1365AFEAAB22DD4A2C3F03E067B75BED8EA,IMPHASH=3843C3D4A5A7D1045ABE9A4BFCFAAB28{53FBDF3C-BB47-68A5-6308-00000000EE03}4800C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -EmbeddingAR-WIN-DC2\Administrator