Technical Information
- %TEMP%\evbdfe3.tmp
- %TEMP%\evbe012.tmp
- %TEMP%\evbe052.tmp
- %TEMP%\evbe0b0.tmp
- %TEMP%\evbe10f.tmp
- %TEMP%\evbe17d.tmp
- %TEMP%\evbe1cc.tmp
- %TEMP%\evbe1fc.tmp
- %TEMP%\evbe24b.tmp
- %TEMP%\evbe2d8.tmp
- %TEMP%\evbe395.tmp
- %TEMP%\evbe4dd.tmp
- %TEMP%\evbe5f7.tmp
- %APPDATA%\ocam\config.ini
- %TEMP%\tmp5280.tmp.exe
- http://oh##ft.net/update/ohupdate.php?pr#######################################################################
- http://k.###aocdn.net/dn/bd8VJ0/btqD1OIMPEM/Ksn222qRs2konJ1uCW3eCK/oCam_v515.0_sign.exe?at####################
- DNS ASK oh##ft.net
- DNS ASK k.###aocdn.net