Technical Information
- crypted.exe
- %TEMP%\ixp000.tmp\idm.exe
- %TEMP%\ixp000.tmp\crypted.exe
- '%TEMP%\ixp000.tmp\crypted.exe'
- '%WINDIR%\syswow64\taskmgr.exe' 412 "%TEMP%\IXP000.TMP\Crypted.exe"
- '%WINDIR%\syswow64\taskmgr.exe' 412 "%TEMP%\IXP000.TMP\Crypted.exe"' (with hidden window)