Technical Information
- <SYSTEM32>\tasks\dic
- <File name>.exe
- %LOCALAPPDATA%\microsoft\clr_v4.0_32\usagelogs\<File name>.exe.log
- %APPDATA%\xenomanager\<File name>.exe
- %TEMP%\tmp6b48.tmp
- ClassName: 'OleMainThreadWndClass' WindowName: ''
- '%APPDATA%\xenomanager\<File name>.exe'
- '%WINDIR%\syswow64\schtasks.exe' /Create /TN "dic" /XML "%TEMP%\tmp6B48.tmp" /F