Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'TablacusApp2' = '"%APPDATA%\TablacusApp\TablacusApp.exe"'
- '%APPDATA%\TablacusApp\TablacusApp.exe' "write_patch_str_to_reg" "<Full path to file>" "HKCU" "Software\TablacusApp" "badumt"
- '%APPDATA%\TablacusApp\TablacusApp.exe' "first_run" "<Full path to file>"
- %HOMEPATH%\Desktop\TablacusApp.lnk
- %APPDATA%\TablacusApp\uninstaller.exe
- %APPDATA%\TablacusApp\TablacusApp\TablacusApp.exe
- %TEMP%\nsb2.tmp
- %APPDATA%\TablacusApp\TablacusApp.exe
- %TEMP%\nsl3.tmp\nsProcess.dll