Technical Information
- mstools.exe
- %TEMP%\7EBA.vbs
- %TEMP%\7EBA502D.ps1
- %APPDATA%\Windows SDK Services\mstools.exe
- '<Full path to file>'
- '<SYSTEM32>\wscript.exe' %TEMP%\7EBA.vbs
- '%APPDATA%\Windows SDK Services\mstools.exe' <Full path to file>
- '<SYSTEM32>\schtasks.exe' /create /tn "Windows SDK Tool" /tr "wscript.exe %TEMP%\7EBA.vbs" /st 04:41 /du 9999:59 /sc daily /ri 1 /f