30affe4c-0050-c85a-198b-e7c06002c12ce4933ab3-3bf9-41e9-988f-44b2ce9c923a 13 2 4 13 0 0x8000000000000000 1588246 Microsoft-Windows-Sysmon/Operational WIN10-21H1.snapattack.labs - SetValue 2024-08-01 17:59:24.332 F51F9151-CCF0-66AB-510B-000000000C00 9184 c:\ProgramData\Onedrive.exe HKU\S-1-5-21-1538153195-943065003-848949206-1000\SOFTWARE\Microsoft\Office\16.0\Outlook\LoadMacroProviderOnBoot DWORD (0x00000001) WIN10-21H1\localuser