154100x800000000000000011756Microsoft-Windows-Sysmon/OperationalEC2AMAZ-DIK7EQM-2026-10-22 11:12:28.757{33cb0af8-ef9c-6ad9-482a-000000007b00}8016C:\xampp\php\php.exe8.0.30CLIPHPThe PHP Groupphp.exe"C:\xampp\php\php.exe" -r "echo "php cli""C:\xampp\php\EC2AMAZ-DIK7EQM\Administrator{33cb0af8-d37a-6ad8-fc94-130000000000}0x1394fc2HighMD5=DB7D70C49A74158269CAD49605E43B91,SHA256=F4C398301C0F6381620AEA6B6671F61FF2027735C30CF496FC972B3644B8EB5B,IMPHASH=22EA3F59E740CE83805DB391E1946471{33cb0af8-33b1-6ad9-ae14-000000007b00}4612C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeEC2AMAZ-DIK7EQM\Administrator 154100x800000000000000011753Microsoft-Windows-Sysmon/OperationalEC2AMAZ-DIK7EQM-2026-10-22 11:12:20.847{33cb0af8-ef94-6ad9-452a-000000007b00}11120C:\xampp\php\php.exe8.0.30CLIPHPThe PHP Groupphp.exe"C:\xampp\php\php.exe" -r "echo "php cli, PHP_EOL;""C:\xampp\php\EC2AMAZ-DIK7EQM\Administrator{33cb0af8-d37a-6ad8-fc94-130000000000}0x1394fc2HighMD5=DB7D70C49A74158269CAD49605E43B91,SHA256=F4C398301C0F6381620AEA6B6671F61FF2027735C30CF496FC972B3644B8EB5B,IMPHASH=22EA3F59E740CE83805DB391E1946471{33cb0af8-33b1-6ad9-ae14-000000007b00}4612C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeEC2AMAZ-DIK7EQM\Administrator 154100x800000000000000011748Microsoft-Windows-Sysmon/OperationalEC2AMAZ-DIK7EQM-2026-10-22 11:12:06.118{33cb0af8-ef86-6ad9-402a-000000007b00}5660C:\xampp\php\php.exe8.0.30CLIPHPThe PHP Groupphp.exe"C:\xampp\php\php.exe" -r "echo "php cli", PHP_EOL;"C:\xampp\php\EC2AMAZ-DIK7EQM\Administrator{33cb0af8-d37a-6ad8-fc94-130000000000}0x1394fc2HighMD5=DB7D70C49A74158269CAD49605E43B91,SHA256=F4C398301C0F6381620AEA6B6671F61FF2027735C30CF496FC972B3644B8EB5B,IMPHASH=22EA3F59E740CE83805DB391E1946471{33cb0af8-33b1-6ad9-ae14-000000007b00}4612C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeEC2AMAZ-DIK7EQM\Administrator 154100x800000000000000011746Microsoft-Windows-Sysmon/OperationalEC2AMAZ-DIK7EQM-2026-10-22 11:12:03.477{33cb0af8-ef83-6ad9-3e2a-000000007b00}3032C:\xampp\php\php.exe8.0.30CLIPHPThe PHP Groupphp.exe"C:\xampp\php\php.exe" -r "echo "php cli", PHP_EOL;" :C:\xampp\php\EC2AMAZ-DIK7EQM\Administrator{33cb0af8-d37a-6ad8-fc94-130000000000}0x1394fc2HighMD5=DB7D70C49A74158269CAD49605E43B91,SHA256=F4C398301C0F6381620AEA6B6671F61FF2027735C30CF496FC972B3644B8EB5B,IMPHASH=22EA3F59E740CE83805DB391E1946471{33cb0af8-33b1-6ad9-ae14-000000007b00}4612C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeEC2AMAZ-DIK7EQM\Administrator 154100x800000000000000011745Microsoft-Windows-Sysmon/OperationalEC2AMAZ-DIK7EQM-2026-10-22 11:11:47.599{33cb0af8-ef73-6ad9-3d2a-000000007b00}10720C:\xampp\php\php.exe8.0.30CLIPHPThe PHP Groupphp.exe"C:\xampp\php\php.exe" -r "echo "php cli", PHP_EOL;"C:\xampp\php\EC2AMAZ-DIK7EQM\Administrator{33cb0af8-d37a-6ad8-fc94-130000000000}0x1394fc2HighMD5=DB7D70C49A74158269CAD49605E43B91,SHA256=F4C398301C0F6381620AEA6B6671F61FF2027735C30CF496FC972B3644B8EB5B,IMPHASH=22EA3F59E740CE83805DB391E1946471{33cb0af8-33b1-6ad9-ae14-000000007b00}4612C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeEC2AMAZ-DIK7EQM\Administrator