Technical Information
- %TEMP%\aut1baa.tmp
- %TEMP%\aut1baa.tmp
- '%WINDIR%\syswow64\cmd.exe' /c ping 127.0.0.1 -n 1&del /q "<Full path to file>"
- '%WINDIR%\syswow64\ping.exe' 127.0.0.1 -n 1
- '%WINDIR%\syswow64\cmd.exe' /c ping 127.0.0.1 -n 1&del /q "<Full path to file>"' (with hidden window)