Technical Information
- <SYSTEM32>\shmediat.exe
- <SYSTEM32>\ipconfig.exe /flushdns
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\drivetable.txt
- %TEMP%\~unins1234.bat
- <SYSTEM32>\shmediat.exe
- <SYSTEM32>\shmediat.exe
- <SYSTEM32>\Restore\MachineGuid.txt
- 'ch####ebspeed.net':80
- DNS ASK ch####ebspeed.net