Technical Information
- %TEMP%\77fc.tmp
- %TEMP%\784b.tmp
- %TEMP%\786c.tmp
- <Current directory>\tem.vbs
- <Current directory>\tem.vbs
- %TEMP%\77fc.tmp
- %TEMP%\784b.tmp
- %TEMP%\786c.tmp
- <Current directory>\tem.vbs
- '11#.#59.189.137':8666
- '11#.#59.189.137':8666
- '%WINDIR%\syswow64\wscript.exe' "<Current directory>\tem.vbs"