Technical Information
- '<SYSTEM32>\taskkill.exe' /f /im explorer.exe
- %WINDIR%\explorer.exe
- <SYSTEM32>\cmd.exe
- %TEMP%\84a9.tmp\84ba.tmp\84bb.bat
- %TEMP%\84a9.tmp\84ba.tmp\84bb.bat
- ClassName: '' WindowName: ''
- '<SYSTEM32>\cmd.exe' /c "%TEMP%\84A9.tmp\84BA.tmp\84BB.bat <Full path to file>"
- '<SYSTEM32>\control.exe'
- '<SYSTEM32>\notepad.exe'
- '<SYSTEM32>\mspaint.exe'