Technical Information
- %APPDATA%\okle\gratspho
- %ALLUSERSPROFILE%\okle\gratspho
- %ProgramFiles(x86)%\maxillariafrozennifinstall\maxillariaqfrozen.exe
- %TEMP%\nsw90bb.tmp
- %TEMP%\nsm911a.tmp\langdll.dll
- %APPDATA%\okle\gratspho
- %ALLUSERSPROFILE%\okle\gratspho
- 'gl####calcapps.com':443
- DNS ASK gl####calcapps.com
- '%ProgramFiles(x86)%\maxillariafrozennifinstall\maxillariaqfrozen.exe' 05409748870717 9qvoVBSS787pYZ6omk7bq5c2KEzstYem4+i+XWnyOPiDKQXtI8WiNq73GdoDfsw37FP6emPJ3s6bYOeU2DPU4BbAP0PNKmjvN0Mx/y95vGI= 13Xsomdo0SmQXuUwh1MKUoZ53dyxUfrL2PtqmqSPQ87sJaweJm0rGw8mWiuLlboXGc/P1...
- '%WINDIR%\syswow64\cmd.exe' /d /c timeout 5 & cmd /d /c del /f /q "<Full path to file>"' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /d /c timeout 5 & cmd /d /c del /f /q "<Full path to file>"
- '%WINDIR%\syswow64\timeout.exe' 5
- '%WINDIR%\syswow64\cmd.exe' /d /c del /f /q "<Full path to file>"