4688 2 0 13312 0 0x8020000000000000 605503 Security SLABS-DC.snapattack.labs S-1-5-18 SLABS-DC$ SNAPATTACK 0x3e7 0x1514 C:\Windows\System32\cmd.exe %%1936 0x10c8 "C:\Windows\system32\cmd.exe" /c ftype txtfile=C:\Program Files\Internet Explorer\iexplore.exe %1 S-1-0-0 - - 0x0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe S-1-16-16384