Technical Information
- '<SYSTEM32>\wscript.exe' "%TEMP%\againthenwinvss.vbs" "%TEMP%\aginanotfrshit.bat
- '%TEMP%\File.exe'
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\aginanotfrshit.bat" "
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe'
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\ru3211.bat" "
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
- %TEMP%\againthenwinvss.vbs
- %TEMP%\ru3211.bat
- %TEMP%\~DF2D4B.tmp
- %TEMP%\nsc2.tmp
- %TEMP%\File.exe
- %TEMP%\aginanotfrshit.bat
- %TEMP%\thfdnnnn-.txt
- %TEMP%\againthenwinvss.vbs
- %TEMP%\aginanotfrshit.bat