Technical Information
- <Full path to file>{ebb6a3d6-5bf9-4143-8ec3-0f3f2b7cf7a1}
- <Current directory>\rcxec6b.tmp
- %APPDATA%\microsoft\windows\cookies\user@163[1].txt
- <Full path to file>{ebb6a3d6-5bf9-4143-8ec3-0f3f2b7cf7a1}
- from <Current directory>\rcxec6b.tmp to <Full path to file>{ebb6a3d6-5bf9-4143-8ec3-0f3f2b7cf7a1}
- <Full path to file>
- from <Full path to file> to %TEMP%\_@ec6a.tmp
- http://cf#####i.blog.163.com/blog/static/21795512620156505533625/
- http://bl##.163.com/login.do?er#####
- DNS ASK cf#####i.blog.163.com
- DNS ASK bl##.163.com