Technical Information
- <SYSTEM32>\dwm.exe
- %WINDIR%\start.dll
- %WINDIR%\start.exe
- %TEMP%\windowex.ini
- %WINDIR%\winpor.exe
- %WINDIR%\start.dll
- %WINDIR%\start.exe
- '%WINDIR%\start.exe'
- '%WINDIR%\winpor.exe'
- '%WINDIR%\start.exe' ' (with hidden window)
- '%WINDIR%\winpor.exe' ' (with hidden window)