Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'cloudnet' = '"%APPDATA%\EpicNet Inc.\CloudNet\cloudnet.exe" '
- %HOMEPATH%\Start Menu\Programs\Startup\cloudnet.lnk
- %APPDATA%\EpicNet Inc\CloudNet\4ea8b76c9291693d5b12d56b666960d9.exe
- %TEMP%\nsk2.tmp
- from %APPDATA%\EpicNet Inc\CloudNet\4ea8b76c9291693d5b12d56b666960d9.exe to %APPDATA%\EpicNet Inc\CloudNet\cloudnet.exe