Technical Information
- <SYSTEM32>\tasks\asfafsa
- <SYSTEM32>\tasks\dfsdf
- <SYSTEM32>\conhost.exe
- %TEMP%\121212.exe
- %TEMP%\thn.exe
- '%TEMP%\121212.exe'
- '%TEMP%\thn.exe'
- '%WINDIR%\syswow64\cmd.exe' /c start "" "%TEMP%\121212.exe"
- '%WINDIR%\syswow64\cmd.exe' /c start "" "%TEMP%\thn.exe"