Technical Information
- %TEMP%\is-o07nm.tmp\<File name>.tmp
- %TEMP%\is-uhsv9.tmp\_isetup\_setup64.tmp
- %TEMP%\is-uhsv9.tmp\ngldclbwhsxc.exe
- 'ki###ome.live':80
- http://ki###ome.live/v2/events
- DNS ASK ki###ome.live
- '%TEMP%\is-o07nm.tmp\<File name>.tmp' /SL5="$70240,2787171,721408,<Full path to file>"
- '%TEMP%\is-uhsv9.tmp\ngldclbwhsxc.exe' b2a0be5e89f53dc3aabccf0e5a91f949