4104152150x01071004Microsoft-Windows-PowerShell/Operationalar-win-dc.attackrange.local11Compress-Archive -Path C:\Windows\MEMORY.DMP -DestinationPath C:\Temp\test.zipcabe33eb-48a9-4b9b-815b-4c58d349b8ee 4104152150x01070841Microsoft-Windows-PowerShell/Operationalar-win-dc.attackrange.local11Compress-Archive -Path C:\Program Files\Mozilla Firefox\installation_telemetry.json -DestinationPath C:\Temp\test.zip599534bc-6499-4867-8918-5c7e29427dee 4104152150x01070678Microsoft-Windows-PowerShell/Operationalar-win-dc.attackrange.local11Compress-Archive -Path C:\Program Files\Mozilla Firefox\installation_telemetry.json -DestinationPath C:\Temp\test.zip4ffa90da-6fa1-4536-bcd7-7116b097c649 4104152150x01070514Microsoft-Windows-PowerShell/Operationalar-win-dc.attackrange.local11Compress-Archive -Path C:\Program Files\Mozilla Firefox\installation_telemetry.json -DestinationPath C:\Temp\test.zip7446534e-570a-40c6-8861-2f8a8ba2a644 4104152150x01070350Microsoft-Windows-PowerShell/Operationalar-win-dc.attackrange.local11Compress-Archive -Path C:\Program Files\Mozilla Firefox\installation_telemetry.json -DestinationPath C:\Temp\test.zipaa3de072-a3cd-4890-9054-d458e80716d8