Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'cloudnet' = '"%APPDATA%\EpicNet Inc.\CloudNet\cloudnet.exe" '
- %HOMEPATH%\Start Menu\Programs\Startup\cloudnet.lnk
- %APPDATA%\EpicNet Inc\CloudNet\159dc9e8264c8e74de13ca3151be1175.exe
- %TEMP%\nso2.tmp
- from %APPDATA%\EpicNet Inc\CloudNet\159dc9e8264c8e74de13ca3151be1175.exe to %APPDATA%\EpicNet Inc\CloudNet\cloudnet.exe