Technical Information
- '%WINDIR%\syswow64\net.exe' stop "Security Center"
- '%WINDIR%\syswow64\net.exe' stop SharedAccess
- %TEMP%\a88e.tmp\valora~1.bat
- %TEMP%\kill.reg
- %TEMP%\kill.reg
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\A88E.tmp\VALORA~1.BAT""
- '%WINDIR%\syswow64\net1.exe' stop "Security Center"
- '%WINDIR%\syswow64\net1.exe' stop SharedAccess
- '%WINDIR%\syswow64\regedit.exe' /S "%LOCALAPPDATA%\Temp.\kill.reg"