Technical Information
- <Drive name for removable media>:\utorrent.exe
- '%WINDIR%\syswow64\cmd.exe' /C type nul > "<Full path to file>:Zone.Identifier"' (with hidden window)
- '<SYSTEM32>\cmd.exe' ' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /C type nul > "<Full path to file>:Zone.Identifier"
- '%WINDIR%\syswow64\svchost.exe'
- '<SYSTEM32>\cmd.exe'