Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\Windows Update.lnk
- %APPDATA%\senha.bat
- %APPDATA%\cheat.exe
- %APPDATA%\system32.vbs
- C:\Documents\startxmr.bat
- C:\Documents\cheatengine-i386.exe
- C:\Documents\taskhost.exe
- C:\Documents\config.json
- C:\Documents\taskhost.vbs
- C:\Documents\Windows Update.vbs
- C:\Documents\taskhost.exe
- ClassName: 'EDIT' WindowName: ''
- '<SYSTEM32>\wscript.exe' "%APPDATA%\system32.vbs"
- '%APPDATA%\cheat.exe' -p12 -d%APPDATA%
- 'C:\Documents\cheatengine-i386.exe'
- '<SYSTEM32>\wscript.exe' "C:\Documents\taskhost.vbs"
- '<SYSTEM32>\cmd.exe' /k senha.bat