Technical Information
- '%HOMEPATH%\My Documents\iSafePlusSetupV2.21302.exe'
- '%HOMEPATH%\My Documents\iSafePlusSetupV2.21302.exe' (downloaded from the Internet)
- '<SYSTEM32>\cmd.exe' /c <Current directory>\00.bat
- <Current directory>\00.bat
- %HOMEPATH%\My Documents\iSafePlusSetupV2.21302.exe
- 'fr##gu.kr':80
- 'is###plus.net':80
- fr##gu.kr/file/install_count.php?pi######
- is###plus.net/ver2/install/iSafePlusSetupV2.21302.exe
- DNS ASK fr##gu.kr
- DNS ASK is###plus.net