Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Client.exe' = '"%TEMP%\Client.exe" ..'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Client.exe' = '"%TEMP%\Client.exe" ..'
- hidden files
- %TEMP%\Client.exe
- '94.##0.18.16':5552
- '%TEMP%\Client.exe'