Technical Information
- <SYSTEM32>\tasks\dxdiag.exe
- %APPDATA%\dxdiag.exe
- 'pr####-sparkasse.de':6839
- DNS ASK pr####-sparkasse.de
- '%APPDATA%\dxdiag.exe'
- '<SYSTEM32>\schtasks.exe' /create /sc onlogon /rl highest /tn Dxdiag.exe /tr "%APPDATA%\Dxdiag.exe"' (with hidden window)
- '<SYSTEM32>\schtasks.exe' /create /sc onlogon /rl highest /tn Dxdiag.exe /tr "%APPDATA%\Dxdiag.exe"