Technical Information
- %TEMP%\aut3439.tmp
- %TEMP%\1744mzacmwg
- %TEMP%\ugeksat.bat
- nul
- %TEMP%\aut3439.tmp
- %TEMP%\1744mzacmwg
- '<SYSTEM32>\cmd.exe' /c %TEMP%\uGEKsAt.bat' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c %TEMP%\uGEKsAt.bat
- '<SYSTEM32>\ping.exe' -n 3 127.0.0.1