Technical Information
- '%WINDIR%\syswow64\taskkill.exe' /im qq.exe /f
- %WINDIR%\syswow64\360cmd.exe
- %WINDIR%\syswow64\1.jpg
- %WINDIR%\web\ftp.exe
- %WINDIR%\syswow64\bat.bat
- ClassName: '' WindowName: ''
- '%WINDIR%\syswow64\360cmd.exe'
- '%WINDIR%\syswow64\360cmd.exe' ' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c <SYSTEM32>\bat.bat' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c <SYSTEM32>\bat.bat