Technical Information
- %TEMP%\aut252c.tmp
- %TEMP%\2816mpriura
- %TEMP%\gprotect.bat
- nul
- %TEMP%\aut252c.tmp
- %TEMP%\2816mpriura
- '<SYSTEM32>\cmd.exe' /c %TEMP%\gprotect.bat' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c %TEMP%\gprotect.bat
- '<SYSTEM32>\ping.exe' -n 0127.0.0.1