Technical Information
- '' (downloaded from the Internet)
- C:\route.bat
- <Current directory>\route.exe
- <Current directory>\NvUpdate.exe
- <Current directory>\ultravnc.ini
- <Current directory>\SecureVNCPlugin32.dsm
- C:\route.bat
- 'localhost':1039
- 'si####view.works':80
- http://si####view.works/download/route.exe
- http://si####view.works/download/NtBot/NvUpdate.exe
- http://si####view.works/download/NtBot/ultravnc.ini
- http://si####view.works/download/NtBot//SecureVNCPlugin32.dsm
- http://si####view.works/api/get_idx_proc.html
- DNS ASK google.com
- DNS ASK si####view.works
- '<Current directory>\NvUpdate.exe' -multi -id:01 -autoreconnect id:01 -connect :80 -run
- '<Current directory>\NvUpdate.exe' -multi -id:02 -autoreconnect id:02 -connect :80 -run
- '<Current directory>\route.exe'