11241100x80000000000000007656Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2025-07-17 09:07:41.241{E4B49A97-BD3B-6878-B401-00000000EE03}5208C:\Windows\system32\mstsc.exeC:\Users\Administrator\AppData\Local\Microsoft\Terminal Server Client\Cache\bcache24.bmc2025-07-17 09:07:41.241ATTACKRANGE\Administrator