Technical Information
- %TEMP%\ºì髾¯½ä2ðþ¸ä´óê¦2.90õýê½°æ.exe
- DNS ASK 12##.ip138.com
- DNS ASK ip.#q.com
- '%TEMP%\ºì髾¯½ä2ðþ¸ä´óê¦2.90õýê½°æ.exe'
- '%TEMP%\ºì髾¯½ä2ðþ¸ä´óê¦2.90õýê½°æ.exe' ' (with hidden window)
- '%WINDIR%\syswow64\explorer.exe' /n,%TEMP%\ºìÉ«¾¯½ä2Ð޸Ĵóʦ2.90Õýʽ°æ.exe