Technical Information
- svchost.exe
- %APPDATA%\svchost.exe
- %TEMP%\molkxbn1.0.cs
- %TEMP%\molkxbn1.cmdline
- %TEMP%\molkxbn1.out
- %TEMP%\cscb5910e962a564395ba76c3798fb5d52.tmp
- %TEMP%\rese159.tmp
- %TEMP%\molkxbn1.dll
- %TEMP%\rese159.tmp
- %TEMP%\cscb5910e962a564395ba76c3798fb5d52.tmp
- %TEMP%\molkxbn1.0.cs
- %TEMP%\molkxbn1.dll
- %TEMP%\molkxbn1.cmdline
- %TEMP%\molkxbn1.out
- '%APPDATA%\svchost.exe'
- '%WINDIR%\microsoft.net\framework\v4.0.30319\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE159.tmp" "%TEMP%\CSCB5910E962A564395BA76C3798FB5D52.TMP"' (with hidden window)
- '%WINDIR%\microsoft.net\framework\v4.0.30319\csc.exe' /noconfig /fullpaths @"%TEMP%\molkxbn1.cmdline"' (with hidden window)
- '%WINDIR%\microsoft.net\framework\v4.0.30319\csc.exe' /noconfig /fullpaths @"%TEMP%\molkxbn1.cmdline"
- '%WINDIR%\microsoft.net\framework\v4.0.30319\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE159.tmp" "%TEMP%\CSCB5910E962A564395BA76C3798FB5D52.TMP"