IBM's pcsnp.exe triggers SYSTEM cmd.exe

2024-10-13 by 59e5aaf4

IBM's pcsnp.exe just...what

IBM's pcsnp.exe calls cmd.exe /c mkdir C:\Temp from processes such as mpnotify.exe and lsass.exe. Read the writeup for this; it's amazing.

Documentation