attrib.exe attrib.exe  +h C:\Users\ADMINI~1\AppData\Local\Temp\T1222.001_attrib_2\T1222.001_attrib1.txt attrib.exe  +h C:\Users\ADMINI~1\AppData\Local\Temp\T1222.001_attrib_2\T1222.001_attrib2.txt "cmd.exe" /c "mkdir %temp%\T1222.001_attrib_2 &gt;nul 2&gt;&amp;1 &amp; echo T1222.001_attrib1 &gt;&gt; %temp%\T1222.001_attrib_2\T1222.001_attrib1.txt &amp; echo T1222.001_attrib2 &gt;&gt; %temp%\T1222.001_attrib_2\T1222.001_attrib2.txt &amp; attrib.exe +h %temp%\T1222.001_attrib_2\T1222.001_attrib1.txt &amp; attrib.exe +h %temp%\T1222.001_attrib_2\T1222.001_attrib2.txt" ar-win-dc.attackrange.local Administrator