Interestingly, the attacker has used the >> method to append to the file so there can be multiple outputs written to their single TMP file: "C:\Windows\system32\cmd.exe" /C systeminfo >> "C:\Ahnlab\$$$A24F.TMP"  "C:\WINDOWS\system32\cmd.exe" /C tasklist /v >> "C:\Ahnlab\$$$A24F.TMP"   NavRAT   Capabilities  NavRAT is a remote access trojan (RAT) designed to upload, download and execute files