I worked for an organization that was pawned by ransomware. That administered around 1500 Windows PCs. All and every one of them had an admin account that was “adminarea” and the password was “areaadmin”