Technical Information
- %ALLUSERSPROFILE%\1.txt
- %ALLUSERSPROFILE%\thunder\liveupdate.exe
- %ALLUSERSPROFILE%\thunder\liveupdate.dat
- %ALLUSERSPROFILE%\sqlversion.dll
- 'im######.cloudservicesdevc.tk':80
- http://im######.cloudservicesdevc.tk/picturess/2023/
- http://im######.cloudservicesdevc.tk/picturess/2023/history.txt
- http://im######.cloudservicesdevc.tk/picturess/2023/LiveUpdate.exe
- http://im######.cloudservicesdevc.tk/picturess/2023/LiveUpdate.dat
- http://im######.cloudservicesdevc.tk/picturess/2023/SqlVersion.dll
- DNS ASK im######.cloudservicesdevc.tk
- ClassName: 'ConsoleWindowClass' WindowName: ''