Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'diskmgmt' = '<SYSTEM32>\diskmgmt.exe'
- <SYSTEM32>\diskmgmt.exe
- '21#.#.246.77':5050
- '<SYSTEM32>\diskmgmt.exe'
- '<SYSTEM32>\schtasks.exe' /create /sc minute /mo 1 /tn "diskmgmt" /tr "<SYSTEM32>\diskmgmt.exe"