11 2 4 11 0 0x8000000000000000 13624 Microsoft-Windows-Sysmon/Operational DC01.snapattack.labs - 2026-08-20 15:46:35.136 A5CDDB11-65B1-663A-8800-000000000800 6212 C:\Program Files\Microsoft Configuration Manager\bin\x64\CMRestProvider\SCCMProviderGraph.exe C:\Program Files\Microsoft Configuration Manager\bin\X64\adsource.dll 2026-08-20 15:46:35.136 NT AUTHORITY\SYSTEM 11 2 4 11 0 0x8000000000000000 13623 Microsoft-Windows-Sysmon/Operational DC01.snapattack.labs - 2026-08-20 15:46:35.041 A5CDDB11-65B1-663A-8800-000000000800 6212 C:\Program Files\Microsoft Configuration Manager\bin\x64\CMRestProvider\SCCMProviderGraph.exe C:\Program Files\Microsoft Configuration Manager\bin\X64\adsource_original.dll 2026-08-20 15:46:35.035 NT AUTHORITY\SYSTEM 1 5 4 1 0 0x8000000000000000 13992 Microsoft-Windows-Sysmon/Operational DC01.snapattack.labs - 2026-08-20 15:46:53.136 A5CDDB11-216D-6A87-4F15-000000000800 13380 C:\Windows\System32\cmd.exe Microsoft® Windows® Operating System Microsoft Corporation CMD.EXE "C:\Windows\System32\cmd.exe" C:\Windows\system32\ NT AUTHORITY\SYSTEM A5CDDB11-216D-6A87-9350-7F0100000000 0x17f5093 0 System MD5=1FD4DD58C75D6F2EDCDB337EE686231E,SHA256=4208893C871D2499F184E3F0F2554DA89F451FA9E98D95FC9516C5AE8F2B3BBD,IMPHASH=8EEAA9499666119D13B3F44ECD77A729 A5CDDB11-6593-663A-5E00-000000000800 3288 C:\Program Files\Microsoft Configuration Manager\bin\X64\smsexec.exe "C:\Program Files\Microsoft Configuration Manager\bin\x64\smsexec.exe" NT AUTHORITY\SYSTEM