Technical Information
- %TEMP%\autf1e8.tmp
- %TEMP%\jblyobh
- %TEMP%\autf350.tmp
- %TEMP%\zqtvupf
- %TEMP%\autf1e8.tmp
- %TEMP%\jblyobh
- %TEMP%\autf350.tmp
- %TEMP%\zqtvupf
- '%WINDIR%\syswow64\cmd.exe' /c ping 127.0.0.1 -n 3&del /q "<Full path to file>"' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cd.. & ping 127.0.0.1 -n 4&rd /q/s "<Current directory>"' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c ping 127.0.0.1 -n 3&del /q "<Full path to file>"
- '%WINDIR%\syswow64\cmd.exe' /c cd.. & ping 127.0.0.1 -n 4&rd /q/s "<Current directory>"
- '%WINDIR%\syswow64\ping.exe' 127.0.0.1 -n 4
- '%WINDIR%\syswow64\ping.exe' 127.0.0.1 -n 3