Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\<File name>.exe
- %APPDATA%\ftp
- %APPDATA%\<File name>.il
- %APPDATA%\<File name>.pdb
- %APPDATA%\<File name>.exe
- %APPDATA%\التعميم رقم 24-2012.pdf
- %APPDATA%\<File name>.pdb
- %APPDATA%\<File name>.il
- '66.##5.32.181':21
- '%APPDATA%\<File name>.exe'
- '%WINDIR%\microsoft.net\framework\v2.0.50727\ilasm.exe' "%APPDATA%\<File name>.il"' (with hidden window)
- '%APPDATA%\<File name>.exe' ' (with hidden window)
- '%WINDIR%\microsoft.net\framework\v2.0.50727\ilasm.exe' "%APPDATA%\<File name>.il"
- '%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32.exe' "%APPDATA%\التعميم رقم 24-2012.pdf"