Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\bandicam.exe
- %APPDATA%\microsoft\windows\start menu\programs\startup\bandicam.exe
- 'id##.ddns.net':333
- DNS ASK id##.ddns.net
- '%APPDATA%\microsoft\windows\start menu\programs\startup\bandicam.exe'
- '%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\1-tfhehi.cmdline"' (with hidden window)
- '%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESFFDA.tmp" "%TEMP%\vbcFFBA.tmp"' (with hidden window)
- '%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\1-tfhehi.cmdline"
- '%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESFFDA.tmp" "%TEMP%\vbcFFBA.tmp"