11241100x80000000000000007652Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-2025-07-17 09:07:08.053{E4B49A97-BD3B-6878-B401-00000000EE03}5208C:\Windows\system32\mstsc.exeC:\Users\Administrator\Documents\Default.rdp2025-07-17 09:07:08.053ATTACKRANGE\Administrator