Technical Information
- %TEMP%\eff4.tmp\eff5.tmp\eff6.bat
- %TEMP%\eff4.tmp\eff5.tmp\eff6.bat
- '<LOCALNET>.2.4':8080
- '<SYSTEM32>\cmd.exe' /c "%TEMP%\EFF4.tmp\EFF5.tmp\EFF6.bat <Full path to file>"' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c "%TEMP%\EFF4.tmp\EFF5.tmp\EFF6.bat <Full path to file>"
- '<SYSTEM32>\cmd.exe' /c del "<Full path to file>"