30affe4c-0050-c85a-198b-e7c06002c12cfc3c3ae8-92e1-4523-8b39-c29ab44b47dc 11 2 4 11 0 0x8000000000000000 1588131 Microsoft-Windows-Sysmon/Operational WIN10-21H1.snapattack.labs - 2024-08-01 17:59:13.612 F51F9151-CCF0-66AB-520B-000000000C00 8676 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Users\localuser\AppData\Roaming\Microsoft\Outlook\VbaProject.OTM 2024-08-01 17:59:13.612 WIN10-21H1\localuser