Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Skype' = '"%APPDATA%\Skype\Phone\Skype.exe" /nosplash /minimized'
- '<SYSTEM32>\systeminfo.exe'
- %APPDATA%\Skype\Phone\Skype.exe
- %APPDATA%\Microsoft\Sze\hqhmp
- ClassName: '94726 ' WindowName: ' 1 '
- ClassName: '9 041564' WindowName: ' 1 '
- ClassName: ' 19 ' WindowName: ' 19 '
- ClassName: '9 041564' WindowName: ' '
- ClassName: '61 ' WindowName: ' 4 3 6 '
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: '2 7' WindowName: '2 7'
- ClassName: '958157' WindowName: '3'
- ClassName: '9 041564' WindowName: '9 041564'
- ClassName: '6 367' WindowName: '5244'
- ClassName: ' 35 37264' WindowName: ' 35 37264'
- ClassName: '8 970188' WindowName: ' 35 37264'
- ClassName: '888228366' WindowName: '888228366'
- ClassName: ' 10' WindowName: ' 10'
- ClassName: '61 ' WindowName: ' '
- ClassName: '6' WindowName: ' 2'
- ClassName: '134 ' WindowName: ' 35 37264'