Technical Information
- %TEMP%\4585.tmp\ceras.bat
- <Current directory>\dustin.jpg
- <Current directory>\ceras.exe
- from <Current directory>\ceras.exe to C:\temp\ceras.exe
- from <Current directory>\dustin.jpg to C:\temp\dustin.jpg
- ClassName: 'OleMainThreadWndClass' WindowName: ''
- 'C:\temp\ceras.exe'
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\4585.tmp\ceras.bat" "<Full path to file>""' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\4585.tmp\ceras.bat" "<Full path to file>""