Technical Information
- <SYSTEM32>\tasks\nvida
- <SYSTEM32>\tempor\client.exe
- '51.##.151.206':7777
- '<SYSTEM32>\tempor\client.exe'
- '<SYSTEM32>\schtasks.exe' /create /tn "nVIDA" /sc ONLOGON /tr "<Full path to file>" /rl HIGHEST /f
- '<SYSTEM32>\schtasks.exe' /create /tn "nVIDA" /sc ONLOGON /tr "<SYSTEM32>\tempor\Client.exe" /rl HIGHEST /f