Technical Information
- '' (downloaded from the Internet)
- %TEMP%\_uninsep.bat
- %TEMP%\mmmm.exe
- <Full path to file>
- 'ne##ii.com':80
- http://ne##ii.com/CloneFile/apss32.dll0
- DNS ASK ne##ii.com
- '%TEMP%\mmmm.exe'
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\_uninsep.bat" "