Technical Information
- '%TEMP%\tmp85MN_\svcsg.exe' svcsg tmp85MN_
- '<SYSTEM32>\cmd.exe' /c <Current directory>\deleteme.bat
- %TEMP%\TextLog.dat
- <Current directory>\deleteme.bat
- %TEMP%\tmp85MN_\svcsg.exe
- %TEMP%\tmp85MN_\svcsg_ICE.tgs
- from %TEMP%\tmp85MN_\svcsg.exe to %TEMP%\tmp85MN_\svcsg_ICE.tgs