Technical Information
- %TEMP%\<File name>.exepack.tmp
- %TEMP%\0e69aba1f021a32a78553b2f0dcf29dfa.ini
- %TEMP%\0e69aba1f021a32a78553b2f0dcf29df.ini
- %TEMP%\6518d7.txt
- %TEMP%\²¹¶¡.zip
- <Current directory>\data\esp-b.dat
- <Current directory>\wav\sound.lst
- <Current directory>\zh800com\data\esppm.pak
- <Current directory>\zh800com\data\espsc1.pak
- <Current directory>\zh800com\data\espzs.pak
- %TEMP%\ВІГҐВјГѕ.zip
- <Current directory>\data\newopui.pak
- %TEMP%\0e69aba1f021a32a78553b2f0dcf29df.ini
- %TEMP%\²¹¶¡.zip
- %TEMP%\ВІГҐВјГѕ.zip
- 'ht##q.com':80
- 'a.##sf.com':7000
- '45.##1.10.83':6666
- '45.##1.8.167':6666
- http://www.ht##q.com/bmd.txt
- 'a.##sf.com':7000
- DNS ASK ht##q.com
- DNS ASK a.##sf.com
- '%WINDIR%\syswow64\cmd.exe' /c del "<Current directory>\*ooxk.exe"' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del "<Current directory>\*.dll"' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del "<Current directory>\*ooxk.exe"
- '%WINDIR%\syswow64\cmd.exe' /c del "<Current directory>\*.dll"