Technical Information
- %TEMP%\5krvlsge.0.cs
- %TEMP%\5krvlsge.cmdline
- %TEMP%\5krvlsge.out
- %TEMP%\csc972e0c2967654f07a8126947254a42e2.tmp
- %TEMP%\resba88.tmp
- %TEMP%\5krvlsge.dll
- %TEMP%\resba88.tmp
- %TEMP%\csc972e0c2967654f07a8126947254a42e2.tmp
- %TEMP%\5krvlsge.out
- %TEMP%\5krvlsge.0.cs
- %TEMP%\5krvlsge.cmdline
- %TEMP%\5krvlsge.dll
- '%WINDIR%\microsoft.net\framework64\v4.0.30319\csc.exe' /noconfig /fullpaths @"%TEMP%\5krvlsge.cmdline"' (with hidden window)
- '%WINDIR%\microsoft.net\framework64\v4.0.30319\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESBA88.tmp" "%TEMP%\CSC972E0C2967654F07A8126947254A42E2.TMP"' (with hidden window)
- '%WINDIR%\microsoft.net\framework64\v4.0.30319\csc.exe' /noconfig /fullpaths @"%TEMP%\5krvlsge.cmdline"
- '%WINDIR%\microsoft.net\framework64\v4.0.30319\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESBA88.tmp" "%TEMP%\CSC972E0C2967654F07A8126947254A42E2.TMP"
- '<SYSTEM32>\cmd.exe' /C choice /C Y /N /D Y /T 10 & Del "<Full path to file>"
- '<SYSTEM32>\choice.exe' /C Y /N /D Y /T 10