Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\polinas yangin habercisi.lnk
- C:\polprog\firewatch\firealarm.exe
- %TEMP%\aut8c58.tmp
- C:\polprog\firewatch\alarm.a3x
- %TEMP%\aut8c69.tmp
- C:\polprog\firewatch\firealarm.ini
- %TEMP%\aut8c58.tmp
- %TEMP%\aut8c69.tmp
- '<LOCALNET>.66.25':65532
- 'C:\polprog\firewatch\firealarm.exe'
- '%WINDIR%\syswow64\cmd.exe' /c ping 127.0.0.1 -n 3 & start C:\POLPROG\FIREWATCH\FireAlarm.exe' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c ping 127.0.0.1 -n 3 & start C:\POLPROG\FIREWATCH\FireAlarm.exe
- '%WINDIR%\syswow64\ping.exe' 127.0.0.1 -n 3