Technical Information
- %LOCALAPPDATA%\google\chrome\user data\default\login data
- %LOCALAPPDATA%\google\chrome\user data\default\cookies
- %LOCALAPPDATA%\google\chrome\user data\default\web data
- %APPDATA%\opera software\opera stable\login data
- %TEMP%\8268.tmp
- %TEMP%\8288.tmp
- %TEMP%\86dd.tmp
- %TEMP%\8268.tmp
- %TEMP%\8288.tmp
- %TEMP%\86dd.tmp
- %TEMP%\8288.tmp
- %TEMP%\86dd.tmp
- DNS ASK mo####hyergen.xyz
- '%WINDIR%\syswow64\cmd.exe' /c ping localhost -n 4 && del "<Full path to file>"' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c ping localhost -n 4 && del "<Full path to file>"
- '%WINDIR%\syswow64\ping.exe' localhost -n 4