Technical Information
Modifies file system
Creates the following files
- <Current directory>\esp.new
- nul
Moves the following files
- from <Current directory>\esp.new to <Current directory>\esp.exe
Deletes itself.
Network activity
UDP
- DNS ASK es#.pe
Miscellaneous
Executes the following
- '%ProgramFiles%\java\jre1.8.0_45\bin\javaw.exe' -Dlaunch4j.exedir="<Current directory>" -Dlaunch4j.exefile="<Full path to file>" -jar "<Full path to file>"
- '<SYSTEM32>\cmd.exe' "/c start "Unpacking updates..." cmd /c "<SYSTEM32>\ping -n 3 127.0.0.1>nul && del /f /q "<Current directory>\ESP.exe" "<Full path to file>" && ren "<Current directory>\ESP.new" "ESP.exe" || pa...
- '<SYSTEM32>\cmd.exe' /c "<SYSTEM32>\ping -n 3 127.0.0.1>nul && del /f /q "<Current directory>\ESP.exe" "<Full path to file>" && ren "<Current directory>\ESP.new" "ESP.exe" || pause""
- '<SYSTEM32>\ping.exe' -n 3 127.0.0.1
