4688 2 0 13312 0 0x8020000000000000 661971 Security SLABS-DC.snapattack.labs S-1-5-18 SLABS-DC$ SNAPATTACK 0x3e7 0xec8 C:\Windows\System32\reg.exe %%1936 0x398 reg add "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\AppCertDlls" /v appcert /t REG_EXPAND_SZ /d "C:\Users\Public\Documents\appcert.dll" /f S-1-0-0 - - 0x0 C:\Windows\System32\cmd.exe S-1-16-16384