Technical Information
- '%APPDATA%\windowssecurity.exe'
- '%CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE' -x -s 1480
- %APPDATA%\windowssecurity.zip
- %APPDATA%\windowssecurity.exe
- %TEMP%\1161817.cvr
- %TEMP%\tempfile.txt
- '%APPDATA%\windowssecurity.exe' ' (with hidden window)