Technical Information
- tpiyon2.exe
- %TEMP%\nsxb1e2.tmp
- %TEMP%\nla\ioqwel.exe
- %TEMP%\nla\zfngholtp.s
- %TEMP%\nla\jsgwugqwc.ftb
- %TEMP%\nla\tpiyon2.exe
- '%TEMP%\nla\ioqwel.exe' %TEMP%\Nla\zfngholtp.s
- '%TEMP%\nla\tpiyon2.exe' %TEMP%\Nla\zfngholtp.s
- '%WINDIR%\microsoft.net\framework\v2.0.50727\dw20.exe' -x -s 504