Technical Information
- %TEMP%\ih0k4euh.0.cs
- %TEMP%\ih0k4euh.cmdline
- %ProgramFiles%\GoogleCore\GoogleCoreUpdate.exe:ZONE.identifier
- %ProgramFiles%\GoogleCore\GoogleCoreUpdate.exe.config
- %TEMP%\RES4.tmp
- %TEMP%\ih0k4euh.dll
- %TEMP%\ih0k4euh.out
- %TEMP%\CSC3.tmp
- %TEMP%\ljlizvaf.cmdline
- %TEMP%\ljlizvaf.out
- <Full path to file>:ZONE.identifier
- %TEMP%\ljlizvaf.0.cs
- %TEMP%\ljlizvaf.dll
- %ProgramFiles%\GoogleCore\GoogleCoreUpdate.exe
- %TEMP%\CSC1.tmp
- %TEMP%\RES2.tmp
- %ProgramFiles%\GoogleCore\GoogleCoreUpdate.exe
- %TEMP%\ljlizvaf.out
- %TEMP%\ljlizvaf.0.cs
- %TEMP%\CSC3.tmp
- %TEMP%\RES4.tmp
- %TEMP%\CSC1.tmp
- %TEMP%\RES2.tmp
- %TEMP%\ljlizvaf.dll
- %TEMP%\ljlizvaf.cmdline
- '%ProgramFiles%\GoogleCore\GoogleCoreUpdate.exe'
- '<SYSTEM32>\cmd.exe' /c echo [zoneTransfer]ZoneID = 2 > "%ProgramFiles%\GoogleCore\GoogleCoreUpdate.exe":ZONE.identifier & exit
- '%WINDIR%\Microsoft.NET\Framework\v4.0.30319\csc.exe' /noconfig /fullpaths @"%TEMP%\ih0k4euh.cmdline"
- '%WINDIR%\Microsoft.NET\Framework\v4.0.30319\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4.tmp" "%TEMP%\CSC3.tmp"
- '<SYSTEM32>\cmd.exe' /c echo [zoneTransfer]ZoneID = 2 > "<Full path to file>":ZONE.identifier & exit
- '%WINDIR%\Microsoft.NET\Framework\v4.0.30319\csc.exe' /noconfig /fullpaths @"%TEMP%\ljlizvaf.cmdline"
- '%WINDIR%\Microsoft.NET\Framework\v4.0.30319\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2.tmp" "%TEMP%\CSC1.tmp"