Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\startpa.bat
- %ProgramFiles%\experience\copy.bat
- %ProgramFiles%\experience\startpa.bat
- %ProgramFiles%\experience\likolpashertaniyumalperashena.exe
- %ProgramFiles%\experience\sonis.vbs
- %ProgramFiles%\experience\starano.bat
- ClassName: 'EDIT' WindowName: ''
- '<SYSTEM32>\wscript.exe' "%ProgramFiles%\Experience\sonis.vbs"
- '%ProgramFiles%\experience\likolpashertaniyumalperashena.exe' --print-full --algo progpowz --url stratum+tcp://zano.luckypool.io:8877 --worker Garage30 --user ZxBrQcPeUaKjPtBCEZuHcxFcmMeVpkXUE6DukMcNibmgjdwPjXP8BtmFPZMECGbzMCTTKujG7cehr8ATS7NAH21i2TYGeGcC...
- '<SYSTEM32>\cmd.exe' /c ""%ProgramFiles%\Experience\starano.bat" "' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c ""%ProgramFiles%\Experience\copy.bat" "
- '<SYSTEM32>\xcopy.exe' startpa.bat "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\". /Y
- '<SYSTEM32>\cmd.exe' /c ""%ProgramFiles%\Experience\starano.bat" "
- '<SYSTEM32>\timeout.exe' /t 5