Technical Information
- <SYSTEM32>\tasks\éý¼¶
- smss.exe
- C:\users\public\pictures\smss.exe
- C:\users\public\pictures\autoip.dll
- C:\users\public\pictures\md5.png
- '20#.#9.173.247':8000
- 'C:\users\public\pictures\smss.exe'
- '%WINDIR%\syswow64\cmd.exe' /c cmd.exe /c SCHTASKS /Create /SC ONSTART /TN "Éý¼¶" /TR "C:\Users\Public\Pictures\smss.exe" /F' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cmd.exe /c SCHTASKS /Create /SC ONSTART /TN "Éý¼¶" /TR "C:\Users\Public\Pictures\smss.exe" /F
- '%WINDIR%\syswow64\cmd.exe' /c SCHTASKS /Create /SC ONSTART /TN "Éý¼¶" /TR "C:\Users\Public\Pictures\smss.exe" /F
- '%WINDIR%\syswow64\schtasks.exe' /Create /SC ONSTART /TN "Éý¼¶" /TR "C:\Users\Public\Pictures\smss.exe" /F