Technical Information
- <SYSTEM32>\runtimebroker.exe
- %TEMP%\gh6f2c.tmp
- '<SYSTEM32>\runtimebroker.exe'
- '%ProgramFiles%\windowsapps\microsoft.windowscalculator_10.1906.55.0_x64__8wekyb3d8bbwe\calculator.exe' -ServerName:App.AppXsm3pg4n7er43kdh1qp4e79f1j7am68r8.mca