MHaggis · July 20, 2021 17:48
diff --git a/Cobalt_Spawnto.csv b/Cobalt_Spawnto.csv
	x64_config_spawn_to_x64	count
	%windir%\sysnative\RuntimeBroker.exe	2
	%windir%\sysnative\WUAUCLT.exe	3
	%windir%\sysnative\WerFault.exe	7
	%windir%\sysnative\adobe64.exe	1
	%windir%\sysnative\cmstp.exe	1
	%windir%\sysnative\dllhost.exe	14
	%windir%\sysnative\dllhost.exe -o enable	1
	%windir%\sysnative\eventvwr.exe	1
	%windir%\sysnative\gpresult.exe	2
	%windir%\sysnative\gpupdate.exe	15
	%windir%\sysnative\helloworld.exe	1
	%windir%\sysnative\iexplore.exe	1
	%windir%\sysnative\logman.exe	1
	%windir%\sysnative\lsass.exe	2
	%windir%\sysnative\msdt.exe	1
	%windir%\sysnative\mstsc.exe	20
	%windir%\sysnative\net.exe	1
	%windir%\sysnative\prevhost.exe	3
	%windir%\sysnative\regsvr32.exe	5
	%windir%\sysnative\rundll32.exe	517
	%windir%\sysnative\set-a-binary.exe	1
	%windir%\sysnative\spoolsv.exe	3
	%windir%\sysnative\svchost.exe	14
	%windir%\sysnative\svchost.exe -k LocalService	1
	%windir%\sysnative\svchost.exe -k NetworkService	1
	%windir%\sysnative\svchost.exe -k netsvc	1
	%windir%\sysnative\svchost.exe -k netsvcs	9
	%windir%\sysnative\userinit.exe	1
	%windir%\sysnative\w32tm.exe	3
	%windir%\sysnative\wusa.exe	9
	%windir%\system32\rundll32.exe	1
	C:\Program Files\Internet Explorer\iexplore.exe	1