Technical Information
- %WINDIR%\syswow64\lqofnthai\smss.exe
- nul
- '2.###f332.com':80
- DNS ASK 2.###f332.com
- '%WINDIR%\syswow64\lqofnthai\smss.exe'
- '%WINDIR%\syswow64\cmd.exe' /c ping 127.0.0.1 -n 5 >nul&del/f/s/q "<Full path to file>"' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c ping 127.0.0.1 -n 5 >nul&del/f/s/q "<Full path to file>"
- '%WINDIR%\syswow64\ping.exe' 127.0.0.1 -n 5