Technical Information
- %WINDIR%\microsoft.net\framework\v4.0.30319\applaunch.exe
- %TEMP%\rarsfx0\1.bat
- %TEMP%\rarsfx0\bin.exe
- %TEMP%\rarsfx1\login.exe
- %TEMP%\rarsfx0\1.bat
- %TEMP%\rarsfx0\bin.exe
- ClassName: 'EDIT' WindowName: ''
- '%TEMP%\rarsfx0\bin.exe' -pDeadWareHack1337
- '%TEMP%\rarsfx1\login.exe'
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\RarSFX0\1.bat" "
- '%WINDIR%\microsoft.net\framework\v4.0.30319\applaunch.exe'