Technical Information
- '%TEMP%\nsh6.tmp'
- '%TEMP%\nsh6.tmp' (downloaded from the Internet)
- %TEMP%\nsk8.tmp
- %TEMP%\nsj7.tmp
- %TEMP%\nswA.tmp
- %TEMP%\nsa9.tmp
- %TEMP%\nsn4.tmp
- %TEMP%\nsk2.tmp
- %TEMP%\nsh6.tmp
- %TEMP%\nsb5.tmp
- %TEMP%\nswA.tmp
- %TEMP%\nsa9.tmp
- %TEMP%\nsq3.tmp\WmiInspector.dll
- %TEMP%\nsq3.tmp\inetc.dll
- %TEMP%\nsh6.tmp
- %TEMP%\nsb5.tmp
- %TEMP%\nsn4.tmp
- %TEMP%\nsk8.tmp
- %TEMP%\nsj7.tmp
- 'li#####tscounter.com':80
- 'cm#.##onbeast.io':80
- http://li#####tscounter.com/Generic/dlc.php?si######################################
- http://cm#.##onbeast.io/
- DNS ASK li#####tscounter.com
- DNS ASK cm#.##onbeast.io