Technical Information
- '' (downloaded from the Internet)
- %APPDATA%\Clipboard\Uninstall.exe
- %APPDATA%\Folder\Service.exe
- %APPDATA%\Folder\Service.exe
- 'hy###0118.store':80
- http://hy###0118.store/tir.exe
- DNS ASK hy###0118.store
- ClassName: 'AutoHotkey' WindowName: '<Full path to file>'
- '%APPDATA%\Folder\Service.exe'