Technical Information
- %WINDIR%\tasks\kfjnr.job
- <SYSTEM32>\tasks\kfjnr
- %ALLUSERSPROFILE%\jscl\kfjnr.exe
- 'de####diakomp.com':4138
- DNS ASK de####diakomp.com
- '%ALLUSERSPROFILE%\jscl\kfjnr.exe' start
- '%ALLUSERSPROFILE%\jscl\kfjnr.exe' start' (with hidden window)