Technical Information
- '<Current directory>\·вЙс±дМ¬єП»ч(AN).exe'
- '<SYSTEM32>\sc.exe' STOP MpsSvc
- <Current directory>\·вЙс±дМ¬єП»ч(AN).exe
- <Current directory>\·вЙс±дМ¬єП»ч(AN).exe
- '59.##.97.138':61227
- '18#.#31.49.79':61227
- '18#.#31.212.218':61227
- '59.#6.97.62':8000
- 'www.kb##8.com':80
- '12#.#99.84.11':61227
- http://www.kb##8.com/LoginTool/Upgrade/List.txt
- DNS ASK www.kb##8.com
- ClassName: '515721704' WindowName: '·ЦІјКЅЅЪµг·АУщПµНі'
- ClassName: '' WindowName: '·ЦІјКЅЅЪµг·АУщПµНі'
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: '??????????????????'
- ClassName: '' WindowName: 'їмїм¶ЬЧФ¶ЇёьРВіМРт'
- ClassName: '515721704' WindowName: '??????????????????'