Technical Information
- <Current directory>\update.temp
- <Current directory>\tem.vbs
- <Current directory>\tem.vbs
- <Current directory>\tem.vbs
- from <Current directory>\update.temp to <Current directory>\hyzv2.exe
- http://11#.#88.241.228/one/hyz.exe
- ClassName: '<File name>.exe' WindowName: '<File name>.exe'
- ClassName: 'hyzV2.exe' WindowName: 'hyzV2.exe'
- ClassName: '' WindowName: ''
- '<Current directory>\hyzv2.exe'
- '%WINDIR%\syswow64\wscript.exe' "<Current directory>\tem.vbs"