Technical Information
- '%WINDIR%\syswow64\taskkill.exe' /im "<File name>.exe" /f
- '%WINDIR%\syswow64\taskkill.exe' /im "XZZ66e2YvY=.exe" /f
- <Current directory>\xzz66e2yvy=.exe
- <Current directory>\xzz66e2yvy=.exe
- DNS ASK yz###lean.hk
- ClassName: '' WindowName: ''
- '<Current directory>\xzz66e2yvy=.exe'
- '%WINDIR%\syswow64\cmd.exe' /c start /I "" "<Current directory>\XZZ66e2YvY=.exe"' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /im "<File name>.exe" /f & erase "<Full path to file>" & exit' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /im "XZZ66e2YvY=.exe" /f & erase "<Current directory>\XZZ66e2YvY=.exe" & exit' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c start /I "" "<Current directory>\XZZ66e2YvY=.exe"
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /im "<File name>.exe" /f & erase "<Full path to file>" & exit
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /im "XZZ66e2YvY=.exe" /f & erase "<Current directory>\XZZ66e2YvY=.exe" & exit