Technical Information
- %TEMP%\6762047b.vbs
- '%WINDIR%\syswow64\wscript.exe' "%TEMP%\6762047b.vbs"
- '%WINDIR%\syswow64\cmd.exe' /c %TEMP%\6762047b.vbs
- '%WINDIR%\syswow64\cmd.exe' /c del <Full path to file> > nul
- '%WINDIR%\syswow64\cmd.exe' /c %TEMP%\6762047b.vbs' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del <Full path to file> > nul' (with hidden window)