Technical Information
- '%WINDIR%\syswow64\taskkill.exe' /im "<File name>.exe" /f
- '%WINDIR%\syswow64\taskkill.exe' /im "0NNXndss52=.exe" /f
- <Current directory>\0nnxndss52=.exe
- <Current directory>\0nnxndss52=.exe
- DNS ASK yz###lean.hk
- ClassName: '' WindowName: ''
- '<Current directory>\0nnxndss52=.exe'
- '%WINDIR%\syswow64\cmd.exe' /c start /I "" "<Current directory>\0NNXndss52=.exe"' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /im "<File name>.exe" /f & erase "<Full path to file>" & exit' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /im "0NNXndss52=.exe" /f & erase "<Current directory>\0NNXndss52=.exe" & exit' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c start /I "" "<Current directory>\0NNXndss52=.exe"
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /im "<File name>.exe" /f & erase "<Full path to file>" & exit
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /im "0NNXndss52=.exe" /f & erase "<Current directory>\0NNXndss52=.exe" & exit