Technical Information
- '<SYSTEM32>\firewall.exe'
- '<SYSTEM32>\cmd.exe' /c ""<SYSTEM32>\dwhucy.bat" "
- '<SYSTEM32>\cmd.exe' /c ""<Current directory>\vvkibilf.bat" "
- <SYSTEM32>\dwhucy.bat
- <Current directory>\vvkibilf.bat
- <SYSTEM32>\firewall.exe
- <SYSTEM32>\firewall.exe
- <SYSTEM32>\firewall.exe