Technical Information
- <SYSTEM32>\tasks\update\skypelnk
- <Current directory>\bursa.jpg
- %TEMP%\1821009302.xml
- %TEMP%\pnxuu-d7.0.cs
- %TEMP%\pnxuu-d7.cmdline
- %TEMP%\pnxuu-d7.out
- %TEMP%\cscba2a.tmp
- %TEMP%\resba3b.tmp
- %TEMP%\pnxuu-d7.dll
- %TEMP%\1821009302.xml
- %TEMP%\resba3b.tmp
- %TEMP%\cscba2a.tmp
- %TEMP%\pnxuu-d7.0.cs
- %TEMP%\pnxuu-d7.cmdline
- %TEMP%\pnxuu-d7.out
- %TEMP%\pnxuu-d7.dll
- 'ja####6.duckdns.org':7777
- DNS ASK ja####6.duckdns.org
- '%WINDIR%\syswow64\schtasks.exe' /Create /TN "Update\skypelnk" /XML "%TEMP%\1821009302.xml"' (with hidden window)
- '%WINDIR%\microsoft.net\framework\v2.0.50727\csc.exe' /noconfig /fullpaths @"%TEMP%\pnxuu-d7.cmdline"' (with hidden window)
- '%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESBA3B.tmp" "%TEMP%\CSCBA2A.tmp"' (with hidden window)
- '%WINDIR%\syswow64\schtasks.exe' /Create /TN "Update\skypelnk" /XML "%TEMP%\1821009302.xml"
- '%WINDIR%\microsoft.net\framework\v2.0.50727\csc.exe' /noconfig /fullpaths @"%TEMP%\pnxuu-d7.cmdline"
- '%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESBA3B.tmp" "%TEMP%\CSCBA2A.tmp"