Technical Information
- %ProgramFiles(x86)%\constrainedmeasurejnomanager\constrainedmeasuremanagergzv.exe
- %TEMP%\nswaa05.tmp
- %TEMP%\nswaa54.tmp\langdll.dll
- 'in####lerspace.com':443
- 'microsoft.com':80
- 'in####lerspace.com':443
- DNS ASK in####lerspace.com
- DNS ASK microsoft.com
- '%ProgramFiles(x86)%\constrainedmeasurejnomanager\constrainedmeasuremanagergzv.exe'
- '%WINDIR%\syswow64\cmd.exe' /d /c timeout 5 & cmd /d /c rd /s /q "<Current directory>"' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /d /c timeout 5 & cmd /d /c rd /s /q "<Current directory>"
- '%WINDIR%\syswow64\timeout.exe' 5
- '%WINDIR%\syswow64\cmd.exe' /d /c rd /s /q "<Current directory>"