Technical Information
- %TEMP%\~nsu.tmp\au_.exe
- %TEMP%\nsr81ae.tmp\system.dll
- %TEMP%\nsr81ae.tmp\killprocdll.dll
- %TEMP%\nsr81ae.tmp\killer.dll
- %TEMP%\nsr81ae.tmp\killer.dll
- %TEMP%\nsr81ae.tmp\killprocdll.dll
- %TEMP%\nsr81ae.tmp\system.dll
- ClassName: '#32770' WindowName: ''
- '%TEMP%\~nsu.tmp\au_.exe' _?=<Current directory>\
- '<SYSTEM32>\regsvr32.exe' /s /u "<SYSTEM32>\Microdonesign-HNRCB\npSignMessenger-hnrcb_x64.dll"