Technical Information
- <SYSTEM32>\svchost.exe
- %APPDATA%\host\Screenshots\02-28-2018\7.38 PM
- %ProgramFiles%\window\Window.exe
- '18#.#6.80.157':9978
- '<SYSTEM32>\schtasks.exe' /create /sc onlogon /tn "windowhost" /rl highest /tr "'%ProgramFiles%\window\Window.exe' /startup" /f