Technical Information
- <SYSTEM32>\tasks\sssssssss
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "<Full path to file>" "<File name>.exe" ENABLE
- %HOMEPATH%\music\nn.exe
- 'localhost':59710
- '%HOMEPATH%\music\nn.exe'
- '%WINDIR%\syswow64\schtasks.exe' /create /sc minute /mo 1 /tn sssssssss /tr %HOMEPATH%\Music\nn.exe' (with hidden window)
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "<Full path to file>" "<File name>.exe" ENABLE' (with hidden window)
- '%HOMEPATH%\music\nn.exe' ' (with hidden window)
- '%WINDIR%\syswow64\schtasks.exe' /create /sc minute /mo 1 /tn sssssssss /tr %HOMEPATH%\Music\nn.exe
- '<SYSTEM32>\taskeng.exe' {E281152A-64B3-4788-9F18-F6288F88EBF9} S-1-5-21-1960123792-2022915161-3775307078-1001:rcklmbf\user:Interactive:[1]