Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\windows powershell install runinto.lnk
- C:\bensonman\1.xlsx
- C:\bensonman\~$1.xlsx
- C:\bensonman\7z.dll
- C:\bensonman\a
- C:\bensonman\7z.exe
- C:\bensonman\libcef.dll
- C:\bensonman\bensonman.exe
- C:\bensonman\bensonman.lnk
- C:\bensonman\7.exe
- '49.##3.204.211':6666
- ClassName: 'XLMAIN' WindowName: 'Microsoft Excel (Product Activation Failed) - Book1'
- ClassName: 'XLMAIN' WindowName: ''
- 'C:\bensonman\7.exe' "C:\bensonman" "bensonman.exe"
- 'C:\bensonman\7.exe' "C:\bensonman" "bensonman.lnk"
- 'C:\bensonman\7z.exe' X a -o"%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup" -aoa
- 'C:\bensonman\bensonman.exe'
- 'C:\bensonman\7z.exe' X a -o"%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup" -aoa' (with hidden window)
- 'C:\bensonman\bensonman.exe' ' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\excel.exe' /dde