Technical Information
- <SYSTEM32>\mstsc.exe
- <Current directory>\config.bin
- C:\softxlic.ini
- <Current directory>\config.bin
- from <Full path to file> to <Current directory>\xahouhiys9.exe
- 'bb##z.cn':90
- http://bb##z.cn:90/kss_io/io.php?v=################################################## via bb##z.cn
- DNS ASK bb##z.cn
- ClassName: '' WindowName: 'Ô¶³Ì×ÀÃæÁ¬½Ó'
- '<SYSTEM32>\mstsc.exe' ' (with hidden window)
- '<SYSTEM32>\mstsc.exe'