Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] '31g93a' = '"%APPDATA%\31g93a.exe" opt'
- ClassName: 'OLLYDBG', WindowName: ''
- %APPDATA%\31g93a.exe
- from <Full path to file> to %TEMP%\c1cb.tmp
- '74.#2.216.6':80
- '65.##.83.117':80
- '95.##1.38.173':80