Technical Information
- <SYSTEM32>\tasks\nyanp
- <Drive name for removable media>:\owned.exe
- <Drive name for removable media>:\correct.lnk
- <Drive name for removable media>:\delete.lnk
- %ALLUSERSPROFILE%\owned.exe
- <Drive name for removable media>:\owned.exe
- %ALLUSERSPROFILE%\owned.exe
- <SYSTEM32>\tasks\nyanp
- '%ALLUSERSPROFILE%\owned.exe'
- '%WINDIR%\syswow64\schtasks.exe' /Delete /tn NYANP /F' (with hidden window)
- '%WINDIR%\syswow64\schtasks.exe' /create /tn NYANP /tr "<Full path to file>" /sc minute /mo 5' (with hidden window)
- '%WINDIR%\syswow64\schtasks.exe' /create /tn NYANP /tr "%ALLUSERSPROFILE%\Owned.exe" /sc minute /mo 5' (with hidden window)
- '%WINDIR%\syswow64\schtasks.exe' /Delete /tn NYANP /F
- '%WINDIR%\syswow64\schtasks.exe' /create /tn NYANP /tr "<Full path to file>" /sc minute /mo 5
- '%WINDIR%\syswow64\schtasks.exe' /create /tn NYANP /tr "%ALLUSERSPROFILE%\Owned.exe" /sc minute /mo 5