Technical Information
- <SYSTEM32>\tasks\nafifas
- %WINDIR%\syswow64\cmd.exe
- %APPDATA%\window defender\window defender.exe
- '37.#.14.197':1997
- '%WINDIR%\syswow64\cmd.exe' /C schtasks /create /sc minute /mo 1 /tn "Nafifas" /tr "'%APPDATA%\window defender\window defender.exe'" /f
- '%WINDIR%\syswow64\schtasks.exe' /create /sc minute /mo 1 /tn "Nafifas" /tr "'%APPDATA%\window defender\window defender.exe'" /f
- '%WINDIR%\syswow64\cmd.exe' /C copy "<Full path to file>" "%APPDATA%\window defender\window defender.exe"
- '%WINDIR%\syswow64\cmd.exe'