Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'task' = '%HOMEPATH%\Install\adobe.vbs -VC'
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\] 'task' = '%HOMEPATH%\Install\adobe.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{4DR6JQ5N-2322-BAQM-32G4-8B4AM7200T1I}] 'StubPath' = '"%HOMEPATH%\Install\adobe.exe"'
- adobe.exe
- %TEMP%\p.o. 0174 abb limited.pdf
- %HOMEPATH%\install\adobe.exe
- %HOMEPATH%\install\adobe.vbs
- %HOMEPATH%\install\adobe.exe
- '21#.#07.152.253':3471
- '<SYSTEM32>\wscript.exe' "%HOMEPATH%\Install\adobe.vbs"
- '%HOMEPATH%\install\adobe.exe'
- '<SYSTEM32>\wscript.exe' "%HOMEPATH%\Install\adobe.vbs"' (with hidden window)
- '%HOMEPATH%\install\adobe.exe' ' (with hidden window)
- '%ProgramFiles%\adobe\reader 10.0\reader\acrord32.exe' "%TEMP%\P.O. 0174 ABB Limited.pdf"