Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] 'usnscv.exe' = '"<LS_APPDATA>\usnscv.exe" /background'
- <LS_APPDATA>\usnscv.exe
- <LS_APPDATA>\AudioConverter.exe
- <LS_APPDATA>\usnscv.exe
- <LS_APPDATA>\AudioConverter.exe
- 'se#####takan.no-ip.org':1234
- DNS ASK se#####takan.no-ip.org
- ClassName: 'Shell_TrayWnd' WindowName: ''