Technical Information
- %WINDIR%\microsoft.net\framework\v2.0.50727\installutil.exe
- %TEMP%\zrtnhuiggj.txt
- 'localhost':333
- '85.##7.94.142':1337
- '%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\zzdlez0u.cmdline"' (with hidden window)
- '%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESFC1C.tmp" "%TEMP%\vbcFC0B.tmp"' (with hidden window)
- '%WINDIR%\microsoft.net\framework\v2.0.50727\installutil.exe'
- '%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\zzdlez0u.cmdline"
- '%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESFC1C.tmp" "%TEMP%\vbcFC0B.tmp"