Technical Information
- %WINDIR%\mui1\cfg.dat
- %WINDIR%\mui1\lsass.exe
- %TEMP%\aut1.tmp
- %TEMP%\pnnlwiv
- %TEMP%\aut2.tmp
- <SYSTEM32>\opt.dll
- <SYSTEM32>\cfg.dat
- <SYSTEM32>\cfg.ini
- %TEMP%\aut1.tmp
- %TEMP%\pnnlwiv
- %TEMP%\aut2.tmp
- <SYSTEM32>\cfg.ini
- ClassName: 'EDIT' WindowName: ''
- '%WINDIR%\mui1\lsass.exe'
- '%WINDIR%\mui1\lsass.exe' /AutoIt3ExecuteScript <SYSTEM32>\opt.dll