Technical Information
- <SYSTEM32>\notepad.exe
- %ALLUSERSPROFILE%\u.bat
- '23.##5.215.36':8008
- '<SYSTEM32>\notepad.exe' ' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c ""%ALLUSERSPROFILE%\u.bat" "' (with hidden window)
- '<SYSTEM32>\notepad.exe'
- '<SYSTEM32>\cmd.exe' /c ""%ALLUSERSPROFILE%\u.bat" "