value:  Following exploitation with LOWBALL malware admin@338 actors created a file containing a list of commands to be executed on the compromised computer. 
name: Command and Scripting Interpreter: Windows Command Shell