Technical Information
- %TEMP%\nsce8c9.tmp
- %TEMP%\nsse8da.tmp\settings.reg
- %TEMP%\nsse8da.tmp\nsexec.dll
- %ALLUSERSPROFILE%\corel\bin\540227267\540111180\x-force.bin
- %TEMP%\nsse8da.tmp\nsexec.dll
- %TEMP%\nsse8da.tmp\settings.reg
- ClassName: '#32770' WindowName: ''
- ClassName: 'SysListView32' WindowName: ''
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- '%WINDIR%\syswow64\ipconfig.exe' /flushdns' (with hidden window)
- '%WINDIR%\syswow64\regedit.exe' /s "%TEMP%\nssE8DA.tmp\Settings.reg"' (with hidden window)
- '%WINDIR%\syswow64\ipconfig.exe' /flushdns
- '%WINDIR%\syswow64\regedit.exe' /s "%TEMP%\nssE8DA.tmp\Settings.reg"