Technical Information
- '%WINDIR%\syswow64\taskkill.exe' /F /PID 2588
- %TEMP%\appssodexo.exe
- from %TEMP%\appssodexo.exe to %TEMP%\appssodexo.exe
- 'ap##.#s.sodexo.com':443
- DNS ASK ap##.#s.sodexo.com
- ClassName: '' WindowName: ''
- '%TEMP%\appssodexo.exe'
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /F /PID 2588' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /F /PID 2588