The second Element welches a batch script that contained the commands to execute the first. The combo resulted in the exfiltration of credentials saved on machines connected to the network, and because the two scripts were contained hinein a logon GPO, they were able to execute on every client when it logged rein. Drive-by downloads Hackers can