Technical Information
- <SYSTEM32>\rkychb.dll
- <SYSTEM32>\RCX1.tmp
- <SYSTEM32>\rkychb.dll
- <SYSTEM32>\config\AppEvent.Evt
- <SYSTEM32>\config\SecEvent.Evt
- <Full path to file>
- <SYSTEM32>\rkychb.dll
- <SYSTEM32>\config\AppEvent.Evt
- '<SYSTEM32>\cmd.exe' /c del "<Full path to file>"