Technical Information
- %APPDATA%\okle\gratspho
- %ALLUSERSPROFILE%\okle\gratspho
- %ProgramFiles(x86)%\maxillariafrozenghninstall\maxillariaofrozen.exe
- %TEMP%\nsme91.tmp
- %TEMP%\nsxf1f.tmp\langdll.dll
- %APPDATA%\okle\gratspho
- %ALLUSERSPROFILE%\okle\gratspho
- 'gl####calcapps.com':443
- DNS ASK gl####calcapps.com
- '%ProgramFiles(x86)%\maxillariafrozenghninstall\maxillariaofrozen.exe' 75920928891818 xb3tUX25yQGgqT1UU22YFBsQHVqSyB9zXLlme16i8yccAeYSjCVW/mjsZL7Z2g+nNR5nU+IRNysm8vMi14Z0lTDBSlx96BE1kx3o30TVTfs= XD0m+YTbTXIAB2R3lIP3ldPBGcjTvAwJaletumSfB5J/XygzkFVUXUPMOECLHRwQqwL9p...
- '%WINDIR%\syswow64\cmd.exe' /d /c timeout 5 & cmd /d /c del /f /q "<Full path to file>"' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /d /c timeout 5 & cmd /d /c del /f /q "<Full path to file>"
- '%WINDIR%\syswow64\timeout.exe' 5
- '%WINDIR%\syswow64\cmd.exe' /d /c del /f /q "<Full path to file>"