Technical Information
- %WINDIR%\5125\csrss.exe
- nul
- %WINDIR%\5125\qlqzzn.dll
- %WINDIR%\5125\tzsgkh.dll
- '%WINDIR%\5125\csrss.exe'
- '%WINDIR%\5125\csrss.exe' ' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del <Full path to file> >> NUL' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del <Full path to file> >> NUL