## sideload-nissrv-iso-lnk

This scenario uses CMD to run NisSrv.exe and decoy PDF..

Double click on HTML file to download **iso** and follow infection chain.

Successful infection will result in spawning a calc from mpclient.dll side-loaded into NisSrv.exe (triggered by LNK).