Technical Information
- %WINDIR%\explorer.exe
- <Full path to file>
- 'ho####kfiles.com':80
- http://www.ho####kfiles.com/files/791355_ipzx8/CamCodec.exe
- DNS ASK ho####kfiles.com
- '%WINDIR%\syswow64\cmd.exe' /c ping localhost&del <Full path to file> /F >> NUL' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c ping localhost&del <Full path to file> /F >> NUL
- '%WINDIR%\syswow64\ping.exe' localhost