Technical Information
- %WINDIR%\microsoft.net\framework64\v4.0.30319\regasm.exe
- '<SYSTEM32>\cmd.exe' /c schtasks /create /sc minute /mo 1 /tn "Nafdfnasia" /tr "'%APPDATA%\winrar-x64-609tr.exe'" /f
- '<SYSTEM32>\schtasks.exe' /create /sc minute /mo 1 /tn "Nafdfnasia" /tr "'%APPDATA%\winrar-x64-609tr.exe'" /f
- '<SYSTEM32>\cmd.exe' /c copy "<Full path to file>" "%APPDATA%\winrar-x64-609tr.exe"
- '%WINDIR%\microsoft.net\framework64\v4.0.30319\regasm.exe'