Technical Information
- '%TEMP%\nsn6.tmp' (downloaded from the Internet)
- '%TEMP%\nsn6.tmp'
- %TEMP%\nse7.tmp
- %TEMP%\nsn6.tmp
- %TEMP%\nsp8.tmp
- %TEMP%\nswA.tmp
- %TEMP%\nsg9.tmp
- %TEMP%\nse3.tmp\WmiInspector.dll
- %TEMP%\nso2.tmp
- %TEMP%\nse3.tmp\inetc.dll
- %TEMP%\nsh5.tmp
- %TEMP%\nst4.tmp
- %TEMP%\nswA.tmp
- %TEMP%\nsg9.tmp
- %TEMP%\nse3.tmp\WmiInspector.dll
- %TEMP%\nse3.tmp\inetc.dll
- %TEMP%\nsn6.tmp
- %TEMP%\nsh5.tmp
- %TEMP%\nst4.tmp
- %TEMP%\nsp8.tmp
- %TEMP%\nse7.tmp
- 'li#####tscounter.com':80
- 'cm#.##onbeast.io':80
- http://li#####tscounter.com/Generic/dlc.php?si######################################
- http://cm#.##onbeast.io/
- DNS ASK li#####tscounter.com
- DNS ASK cm#.##onbeast.io
- ClassName: 'Shell_TrayWnd' WindowName: ''