Technical Information
- '%WINDIR%\explorer.exe' %PROGRAMDATA%\slmgr.vbs
- %PROGRAMDATA%\slmgr.vbs
- %PROGRAMDATA%\slmgr.vbs
- %PROGRAMDATA%\slmgr.vbs
- '%WINDIR%\explorer.exe' %PROGRAMDATA%\slmgr.vbs' (with hidden window)
- '<SYSTEM32>\wscript.exe' //B <SYSTEM32>\slmgr.vbs' (with hidden window)
- '<SYSTEM32>\wscript.exe' "%PROGRAMDATA%\slmgr.vbs"' (with hidden window)
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -C "iex(Get-Content %PROGRAMDATA%\monkq.txt)"' (with hidden window)
- '<SYSTEM32>\wscript.exe' //B <SYSTEM32>\slmgr.vbs
- '<SYSTEM32>\wscript.exe' "%PROGRAMDATA%\slmgr.vbs"
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -C "iex(Get-Content %PROGRAMDATA%\monkq.txt)"