Technical Information
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'dwnxcr' = '<SYSTEM32>\DWNXCR.EXE'
- %WINDIR%\syswow64\dwnxcr.exe
- %WINDIR%\syswow64\dwnxcr.exe
- '%WINDIR%\syswow64\dwnxcr.exe' <Full path to file>
- '%WINDIR%\syswow64\dwnxcr.exe' %WINDIR%\SYSWOW64\DWNXCR.EXE
- '%WINDIR%\syswow64\dwnxcr.exe' <Full path to file>' (with hidden window)
- '%WINDIR%\syswow64\dwnxcr.exe' %WINDIR%\SYSWOW64\DWNXCR.EXE' (with hidden window)