Technical Information
- <SYSTEM32>\tasks\netcloud free disk
- <SYSTEM32>\svchost.exe
- %APPDATA%\netcloud\scmg.exe
- %APPDATA%\netcloud\settings.ini
- '37.##8.117.146':443
- '%APPDATA%\netcloud\scmg.exe'
- '<SYSTEM32>\svchost.exe' ' (with hidden window)
- '<SYSTEM32>\cmd.exe' PowerShell "$f='<Full path to file>';DO{Remove-Item -Force $f;$d=Test-Path $f }While($d)"' (with hidden window)
- '%APPDATA%\netcloud\scmg.exe' ' (with hidden window)
- '<SYSTEM32>\svchost.exe'
- '<SYSTEM32>\cmd.exe' PowerShell "$f='<Full path to file>';DO{Remove-Item -Force $f;$d=Test-Path $f }While($d)"
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' "$f='<Full path to file>';DO{Remove-Item -Force $f;$d=Test-Path $f }While($d)"