Assertion: ransom's file | /r/HasProperty | a variant of kill.bat
Facets:
Source sentences:
text: The file in question was a variant of kill.bat that contained commands previously only observed executed by Ryuk calling ShellExecute .