Technical Information
- 'C:\277798277_full.exe'
- '<Current directory>\1.exe'
- 'C:\277798277_full.exe' (downloaded from the Internet)
- '<SYSTEM32>\cmd.exe' /c ""<Current directory>\1.bat" "
- C:\277798277_full.exe
- <Current directory>\1.bat
- <Current directory>\1.exe
- 'fo####fe.eciq.cn':80
- fo####fe.eciq.cn/bb/277798277_full.exe
- DNS ASK fo####fe.eciq.cn
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'