Technical Information
- <SYSTEM32>\tasks\net rest application
- <SYSTEM32>\svchost.exe
- %PROGRAMDATA%\حمتيصاانل.exe
- %APPDATA%\netrest\حمتيصاانل.exe
- '%PROGRAMDATA%\حمتيصاانل.exe'
- '%PROGRAMDATA%\حمتيصاانل.exe' ' (with hidden window)
- '<SYSTEM32>\svchost.exe' ' (with hidden window)
- '<SYSTEM32>\svchost.exe'