Technical Information
- C:\kyxocoboms.zzibr
- C:\boots.ini
- C:\kyxocoboms.zzibr
- from C:\kyxocoboms.zzibr to %TEMP%\ùôöú×çä´´ïµð¹ô½á¾ùâãwe4lkpr413\....\wyspgaxric
- from <Full path to file> to %TEMP%\1067109\....\temporaryfile
- http://www.yd#.me/chk_api/io.php?a=########################################################
- DNS ASK yd#.me
- ClassName: '' WindowName: 'crossfire.exe'
- ClassName: '' WindowName: ''
- 'C:\kyxocoboms.zzibr' askjdflj