Technical Information
- %TEMP%\<File name>.exepack.tmp
- %TEMP%\731ba0b2e06817e1188bdf837b50f00ca.ini
- %TEMP%\731ba0b2e06817e1188bdf837b50f00c.ini
- %TEMP%\eaab4b.txt
- %TEMP%\²¹¶¡.zip
- <Current directory>\data\esp-b.dat
- <Current directory>\sl2023\data\52esp.pak
- <Current directory>\wav\sound.lst
- <Current directory>\data\newopui.pak
- %TEMP%\731ba0b2e06817e1188bdf837b50f00c.ini
- %TEMP%\²¹¶¡.zip
- 'ht##q.com':80
- 'a.##sf.com':7000
- '43.##0.73.233':15555
- http://www.ht##q.com/bmd.txt
- 'a.##sf.com':7000
- '43.##0.73.233':15555
- DNS ASK ht##q.com
- DNS ASK a.##sf.com
- '%WINDIR%\syswow64\cmd.exe' /c del "<Current directory>\*jmhp.exe"' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del "<Current directory>\*.dll"' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del "<Current directory>\*jmhp.exe"
- '%WINDIR%\syswow64\cmd.exe' /c del "<Current directory>\*.dll"