Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\yskawynkemyvdmiecnlvljgei.lnk
- %WINDIR%\syswow64\ping.exe
- %LOCALAPPDATA%\d092a2fyuuxuumm=.lock
- '%WINDIR%\syswow64\ping.exe' -t 127.0.0.1
- '%WINDIR%\syswow64\ping.exe' -t 127.0.0.1' (with hidden window)