Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\userscontrol.lnk
- %PROGRAMDATA%\system32\crashhandlerservice.exe
- %PROGRAMDATA%\system32\userscontrol.exe
- %PROGRAMDATA%\system32\config.json
- %PROGRAMDATA%\system32\crashhandlerservice.exe
- %PROGRAMDATA%\system32\userscontrol.exe
- %PROGRAMDATA%\system32\config.json
- ClassName: 'EDIT' WindowName: ''
- '%PROGRAMDATA%\system32\userscontrol.exe'