Technical Information
- %APPDATA%\kb00948362.exe
- %TEMP%\expc0ee.tmp.bat
- '%APPDATA%\kb00948362.exe'
- '%WINDIR%\syswow64\cmd.exe' /c "%TEMP%\expC0EE.tmp.bat"
- '%WINDIR%\syswow64\cmd.exe' /c "%TEMP%\expC0EE.tmp.bat"' (with hidden window)
- '%APPDATA%\kb00948362.exe' ' (with hidden window)