Technical Information
- [<HKCU>\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN] 'mspaint2' = '<Full path to file>'
- User Account Control (UAC)
- Windows Security Center
- %WINDIR%\syswow64\mspaint.exe
- C:\mspaint32.dll
- ClassName: '' WindowName: 'Aplicativo ItaГє'
- '%WINDIR%\syswow64\mspaint.exe' ' (with hidden window)
- '%WINDIR%\syswow64\mspaint.exe'