Technical Information
- '%ALLUSERSPROFILE%\Application Data\League.exe'
- '%TEMP%\is-80LMR.tmp\Setup.tmp' /SL5="$40092,3223773,168448,%ALLUSERSPROFILE%\Application Data\Setup.exe"
- '%ALLUSERSPROFILE%\Application Data\Setup.exe'
- '%ALLUSERSPROFILE%\Application Data\League.exe' (downloaded from the Internet)
- %TEMP%\is-HGJL9.tmp\bp.dll
- %TEMP%\is-HGJL9.tmp\BASS.dll
- %TEMP%\is-HGJL9.tmp\ISMD5.dll
- %ALLUSERSPROFILE%\Application Data\League.exe
- %TEMP%\is-HGJL9.tmp\ISCRC32c.dll
- %TEMP%\is-HGJL9.tmp\ISDone.dll
- %TEMP%\is-80LMR.tmp\Setup.tmp
- %ALLUSERSPROFILE%\Application Data\Setup.exe
- %TEMP%\is-HGJL9.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-HGJL9.tmp\VclStylesInno.dll
- %TEMP%\is-HGJL9.tmp\_isetup\_isdecmp.dll
- 'ij##ite.com':80
- 'wp#d':80
- http://ij##ite.com/white/League.exe
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK ij##ite.com
- DNS ASK wp#d