Technical Information
- %WINDIR%\microsoft.net\framework\v2.0.50727\installutil.exe
- %TEMP%\a.vbs.bin
- 'wi###.publicvm.com':3055
- DNS ASK wi###.publicvm.com
- '%WINDIR%\syswow64\regsvr32.exe' /I /S "%TEMP%\a.vbs.bin"' (with hidden window)
- '%WINDIR%\syswow64\wscript.exe' //b //e:vbscript "<PATH_SAMPLE>.vbs"
- '%WINDIR%\syswow64\regsvr32.exe' /I /S "%TEMP%\a.vbs.bin"
- '%WINDIR%\microsoft.net\framework\v2.0.50727\installutil.exe'