154100x800000000000000057710604Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2025-12-08 00:04:17.652{5aa13a44-1601-6936-5c76-030000004102}9432C:\Windows\System32\calc.exe10.0.20348.1 (WinBuild.160101.0800)Windows CalculatorMicrosoft® Windows® Operating SystemMicrosoft CorporationCALC.EXEcalc.exeC:\Users\Administrator\react123\ATTACKRANGE\Administrator{5aa13a44-b54f-68fe-e547-0c0000000000}0xc47e52HighSHA1=80865A5563EB92B8653A5AF3DB371D7BC1674B2D,MD5=1FD4DD58C75D6F2EDCDB337EE686231E,SHA256=4208893C871D2499F184E3F0F2554DA89F451FA9E98D95FC9516C5AE8F2B3BBD,IMPHASH=8EEAA9499666119D13B3F44ECD77A729{5aa13a44-15f4-6936-5a76-030000004102}9908C:\Program Files\nodejs\node.exenode .\node_modules\next\dist\bin\next startATTACKRANGE\Administrator 154100x800000000000000057708461Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2025-12-08 00:02:06.248{5aa13a44-157e-6936-4776-030000004102}6332C:\Windows\System32\calc.exe10.0.20348.1 (WinBuild.160101.0800)Windows CalculatorMicrosoft® Windows® Operating SystemMicrosoft CorporationCALC.EXEcalc.exeC:\Users\Administrator\react123\ATTACKRANGE\Administrator{5aa13a44-b54f-68fe-e547-0c0000000000}0xc47e52HighSHA1=80865A5563EB92B8653A5AF3DB371D7BC1674B2D,MD5=1FD4DD58C75D6F2EDCDB337EE686231E,SHA256=4208893C871D2499F184E3F0F2554DA89F451FA9E98D95FC9516C5AE8F2B3BBD,IMPHASH=8EEAA9499666119D13B3F44ECD77A729{5aa13a44-150b-6936-2e76-030000004102}8784C:\Program Files\nodejs\node.exe"C:\Program Files\nodejs\node.exe" C:\Users\Administrator\react123\node_modules\next\dist\server\lib\start-server.jsATTACKRANGE\Administrator 154100x800000000000000057703471Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2025-12-07 23:57:06.920{5aa13a44-1452-6936-1076-030000004102}7440C:\Windows\System32\calc.exe10.0.20348.1 (WinBuild.160101.0800)Windows CalculatorMicrosoft® Windows® Operating SystemMicrosoft CorporationCALC.EXEcalc.exeC:\Users\Administrator\react123\ATTACKRANGE\Administrator{5aa13a44-b54f-68fe-e547-0c0000000000}0xc47e52HighSHA1=80865A5563EB92B8653A5AF3DB371D7BC1674B2D,MD5=1FD4DD58C75D6F2EDCDB337EE686231E,SHA256=4208893C871D2499F184E3F0F2554DA89F451FA9E98D95FC9516C5AE8F2B3BBD,IMPHASH=8EEAA9499666119D13B3F44ECD77A729{5aa13a44-143a-6936-fd75-030000004102}8820C:\Program Files\nodejs\node.exe"C:\Program Files\nodejs\node.exe" C:\Users\Administrator\react123\node_modules\next\dist\server\lib\start-server.jsATTACKRANGE\Administrator 154100x800000000000000057698188Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2025-12-07 23:49:47.827{5aa13a44-129b-6936-da75-030000004102}3516C:\Windows\System32\ipconfig.exe10.0.20348.3451 (WinBuild.160101.0800)IP Configuration UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationipconfig.exeipconfig.exeC:\Users\Administrator\react456\ATTACKRANGE\Administrator{5aa13a44-b54f-68fe-e547-0c0000000000}0xc47e52HighSHA1=72FE255B4D1F6F774F1A021AA8D383AB719BA874,MD5=44EF7ED749B54413795F1E7894C70D50,SHA256=1BDCC390896EF5E642CFDEB2CFAB71C386A1D58290B27EC9E3C761E8718A8A27,IMPHASH=3C4BF3CD6C64B24B9534F30802178D06{5aa13a44-123e-6936-cd75-030000004102}4300C:\Program Files\nodejs\node.exe"node" "C:\Users\Administrator\react456\node_modules\.bin\\..\next\dist\bin\next" startATTACKRANGE\Administrator 154100x800000000000000057692720Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2025-12-07 23:45:40.993{5aa13a44-11a4-6936-9275-030000004102}10956C:\Windows\System32\calc.exe10.0.20348.1 (WinBuild.160101.0800)Windows CalculatorMicrosoft® Windows® Operating SystemMicrosoft CorporationCALC.EXEcalcC:\Users\Administrator\react456\ATTACKRANGE\Administrator{5aa13a44-b54f-68fe-e547-0c0000000000}0xc47e52HighSHA1=80865A5563EB92B8653A5AF3DB371D7BC1674B2D,MD5=1FD4DD58C75D6F2EDCDB337EE686231E,SHA256=4208893C871D2499F184E3F0F2554DA89F451FA9E98D95FC9516C5AE8F2B3BBD,IMPHASH=8EEAA9499666119D13B3F44ECD77A729{5aa13a44-1199-6936-8c75-030000004102}852C:\Program Files\nodejs\node.exe"C:\Program Files\nodejs\node.exe" C:\Users\Administrator\react456\node_modules\next\dist\server\lib\start-server.jsATTACKRANGE\Administrator 154100x800000000000000057678919Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2025-12-07 23:42:49.576{5aa13a44-10f9-6936-4a75-030000004102}2980C:\Windows\System32\calc.exe10.0.20348.1 (WinBuild.160101.0800)Windows CalculatorMicrosoft® Windows® Operating SystemMicrosoft CorporationCALC.EXEcalcC:\Users\Administrator\react123\ATTACKRANGE\Administrator{5aa13a44-b54f-68fe-e547-0c0000000000}0xc47e52HighSHA1=80865A5563EB92B8653A5AF3DB371D7BC1674B2D,MD5=1FD4DD58C75D6F2EDCDB337EE686231E,SHA256=4208893C871D2499F184E3F0F2554DA89F451FA9E98D95FC9516C5AE8F2B3BBD,IMPHASH=8EEAA9499666119D13B3F44ECD77A729{5aa13a44-10ea-6936-4375-030000004102}9604C:\Program Files\nodejs\node.exe"node" "C:\Users\Administrator\react123\node_modules\.bin\\..\next\dist\bin\next" startATTACKRANGE\Administrator 154100x800000000000000057677251Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2025-12-07 23:41:35.408{5aa13a44-10af-6936-3575-030000004102}10292C:\Windows\System32\calc.exe10.0.20348.1 (WinBuild.160101.0800)Windows CalculatorMicrosoft® Windows® Operating SystemMicrosoft CorporationCALC.EXEcalcC:\Users\Administrator\react123\ATTACKRANGE\Administrator{5aa13a44-b54f-68fe-e547-0c0000000000}0xc47e52HighSHA1=80865A5563EB92B8653A5AF3DB371D7BC1674B2D,MD5=1FD4DD58C75D6F2EDCDB337EE686231E,SHA256=4208893C871D2499F184E3F0F2554DA89F451FA9E98D95FC9516C5AE8F2B3BBD,IMPHASH=8EEAA9499666119D13B3F44ECD77A729{5aa13a44-10a6-6936-2e75-030000004102}6568C:\Program Files\nodejs\node.exe"C:\Program Files\nodejs\node.exe" C:\Users\Administrator\react123\node_modules\next\dist\server\lib\start-server.jsATTACKRANGE\Administrator 154100x800000000000000057661842Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2025-12-07 23:21:28.170{5aa13a44-0bf8-6936-8974-030000004102}9712C:\Windows\System32\calc.exe10.0.20348.1 (WinBuild.160101.0800)Windows CalculatorMicrosoft® Windows® Operating SystemMicrosoft CorporationCALC.EXEcalcC:\Users\Administrator\react123\ATTACKRANGE\Administrator{5aa13a44-b54f-68fe-e547-0c0000000000}0xc47e52HighSHA1=80865A5563EB92B8653A5AF3DB371D7BC1674B2D,MD5=1FD4DD58C75D6F2EDCDB337EE686231E,SHA256=4208893C871D2499F184E3F0F2554DA89F451FA9E98D95FC9516C5AE8F2B3BBD,IMPHASH=8EEAA9499666119D13B3F44ECD77A729{5aa13a44-0bed-6936-8774-030000004102}2512C:\Program Files\nodejs\node.exe"node" "C:\Users\Administrator\react123\node_modules\.bin\\..\next\dist\bin\next" startATTACKRANGE\Administrator 154100x800000000000000057659851Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2025-12-07 23:19:16.848{5aa13a44-0b74-6936-7374-030000004102}6116C:\Windows\System32\wbem\WMIC.exe10.0.20348.2849 (WinBuild.160101.0800)WMI Commandline UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwmic.exewmicC:\Users\Administrator\react123\ATTACKRANGE\Administrator{5aa13a44-b54f-68fe-e547-0c0000000000}0xc47e52HighSHA1=2BAF5D9D6A59E27AF6CD8DF52AB2329A4F15D4C0,MD5=2F0740DFF1F664DBCB3C0D4025FD1BE5,SHA256=24BF26349E8947F05AAF6A7FAC826C98084876CC17F369FA9B95861A361D4A97,IMPHASH=16A48C3CABF98A9DC1BF02C07FE1EA00{5aa13a44-09f1-6936-3774-030000004102}6788C:\Program Files\nodejs\node.exe"C:\Program Files\nodejs\node.exe" C:\Users\Administrator\react123\node_modules\next\dist\server\lib\start-server.jsATTACKRANGE\Administrator 154100x800000000000000056471620Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2025-12-06 12:07:35.512{5aa13a44-1c87-6934-6346-030000004102}9812C:\Windows\System32\calc.exe10.0.20348.1 (WinBuild.160101.0800)Windows CalculatorMicrosoft® Windows® Operating SystemMicrosoft CorporationCALC.EXEcalcC:\Users\Administrator\react123\ATTACKRANGE\Administrator{5aa13a44-b54f-68fe-e547-0c0000000000}0xc47e52HighSHA1=80865A5563EB92B8653A5AF3DB371D7BC1674B2D,MD5=1FD4DD58C75D6F2EDCDB337EE686231E,SHA256=4208893C871D2499F184E3F0F2554DA89F451FA9E98D95FC9516C5AE8F2B3BBD,IMPHASH=8EEAA9499666119D13B3F44ECD77A729{5aa13a44-30bc-6933-562d-030000004102}8260C:\Program Files\nodejs\node.exe"C:\Program Files\nodejs\node.exe" C:\Users\Administrator\react123\node_modules\next\dist\server\lib\start-server.jsATTACKRANGE\Administrator 154100x800000000000000056458929Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2025-12-06 11:47:18.492{5aa13a44-17c6-6934-e945-030000004102}10564C:\Windows\System32\calc.exe10.0.20348.1 (WinBuild.160101.0800)Windows CalculatorMicrosoft® Windows® Operating SystemMicrosoft CorporationCALC.EXEcalcC:\Users\Administrator\react123\ATTACKRANGE\Administrator{5aa13a44-b54f-68fe-e547-0c0000000000}0xc47e52HighSHA1=80865A5563EB92B8653A5AF3DB371D7BC1674B2D,MD5=1FD4DD58C75D6F2EDCDB337EE686231E,SHA256=4208893C871D2499F184E3F0F2554DA89F451FA9E98D95FC9516C5AE8F2B3BBD,IMPHASH=8EEAA9499666119D13B3F44ECD77A729{5aa13a44-30bc-6933-562d-030000004102}8260C:\Program Files\nodejs\node.exe"C:\Program Files\nodejs\node.exe" C:\Users\Administrator\react123\node_modules\next\dist\server\lib\start-server.jsATTACKRANGE\Administrator