Technical Information
- [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '666999666' = 'C:\Users\Public\Documents\<File name>.exe'
- C:\users\public\documents\<File name>.exe
- '%WINDIR%\syswow64\cmd.exe' /c timeout /t 1 && DEL /f <File name>.exe
- '%WINDIR%\syswow64\timeout.exe' /t 1