Technical Information
- %TEMP%\nscfa37.tmp
- %TEMP%\nshfb90.tmp\inetc.dll
- %TEMP%\nsrfd65.tmp
- %TEMP%\nsh232a.tmp\inetc.dll
- %TEMP%\nshfb90.tmp\inetc.dll
- %TEMP%\nsh232a.tmp\inetc.dll
- 'li#####tscounter.com':80
- http://li#####tscounter.com/Generic/vos.php?ch#################################################################################
- DNS ASK ib###########53175.us-east-1.elb.amazonaws.com
- DNS ASK li#####tscounter.com
- '%TEMP%\nsrfd65.tmp' /idn