Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'fud' = '"<Current directory>\test.exe"'
- <Current directory>\test.exe
- '18#.#42.104.98':80
- '<Current directory>\test.exe'
- '%WINDIR%\syswow64\cmd.exe' /c test.exe
- '%WINDIR%\microsoft.net\framework\v2.0.50727\dw20.exe' -x -s 900