Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\polinas yangin habercisi.lnk
- C:\polprog\firewatch\firealarm.exe
- %TEMP%\aute12f.tmp
- C:\polprog\firewatch\alarm.a3x
- %TEMP%\aute140.tmp
- C:\polprog\firewatch\firealarm.ini
- %TEMP%\aute12f.tmp
- %TEMP%\aute140.tmp
- '<LOCALNET>.28.41':65532
- 'C:\polprog\firewatch\firealarm.exe'
- '<SYSTEM32>\cmd.exe' /c ping 127.0.0.1 -n 3 & start C:\POLPROG\FIREWATCH\FireAlarm.exe' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c ping 127.0.0.1 -n 3 & start C:\POLPROG\FIREWATCH\FireAlarm.exe
- '<SYSTEM32>\ping.exe' 127.0.0.1 -n 3