Technical Information
- '' (downloaded from the Internet)
- <Current directory>\ZH95tI.exe
- 'bi#####arhearing.top':80
- http://bi#####arhearing.top/YhVaNEAWRlBCJxDWx1QbMAAdVFEHIxFTo1SYxkBR0FXAZBRRZVDR8AFzgzUYplXN1hFOggDGEAErYBFPUyMblUVAEADdgkWrMBGPgEMeNEQfR1XbwhUat1VedQEENRQMlASUpVWPoRTL11QRNhXC4FUehCGUAkJVgAADV...
- DNS ASK bi#####arhearing.top
- '<Current directory>\ZH95tI.exe'