Technical Information
- '<LS_APPDATA>\systems\systems.exe' (downloaded from the Internet)
- '<LS_APPDATA>\systems\systems.exe'
- <LS_APPDATA>\systems\systems.exe
- <LS_APPDATA>\systems\system.cgb-4171
- 'xm######e.bsqlserver.com':80
- 'wp#d':80
- http://xm######e.bsqlserver.com/system.cgb-4171
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK xm######e.bsqlserver.com
- DNS ASK wp#d
- ClassName: 'Shell_TrayWnd' WindowName: ''