Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\conged.vbs
- %WINDIR%\syswow64\svchost.exe
- %TEMP%\aut5b94.tmp
- %TEMP%\buncal
- %LOCALAPPDATA%\gammexane\conged.exe
- %TEMP%\aut6817.tmp
- '%LOCALAPPDATA%\gammexane\conged.exe'
- '%WINDIR%\syswow64\svchost.exe'