Stordiag.exe

Storage diagnostic tool

Execute

Possible defence evasion purposes.

stordiag.exe

Once executed, Stordiag.exe will execute schtasks.exe systeminfo.exe and fltmc.exe - if stordiag.exe is copied to a folder and an arbitrary executable is renamed to one of these names, stordiag.exe will execute it. — MITRE: T1218 — Privileges: User

Possible defence evasion purposes.

stordiag.exe

Once executed, Stordiag.exe will execute schtasks.exe and powershell.exe - if stordiag.exe is copied to a folder and an arbitrary executable is renamed to one of these names, stordiag.exe will execute it. — MITRE: T1218 — Privileges: User