Technical Information
- <SYSTEM32>\cmd.bat
- <SYSTEM32>\SysMonitor.exe
- <SYSTEM32>\cmd.bat
- <SYSTEM32>\SysMonitor.exe
- '<SYSTEM32>\SysMonitor.exe'
- '<SYSTEM32>\cmd.exe' /c ""<SYSTEM32>\cmd.bat" "
- '<SYSTEM32>\schtasks.exe' /f /create /sc minute /rl highest /mo 120 /tn "File Services" /tr "cmd.bat"
- '<SYSTEM32>\attrib.exe' <SYSTEM32>\SysMonitor.exe +r +s +h
- '<SYSTEM32>\attrib.exe' <SYSTEM32>\cmd.bat +r +s +h