Technical Information
- %HOMEPATH%\__b\_ss.bmp
- %HOMEPATH%\__b\_inx.txt
- %HOMEPATH%\1microsoft.zip
- %TEMP%\kra02388
- %HOMEPATH%\1microsoft.zip~rf1353b1.tmp
- %HOMEPATH%\1microsoft.zip~rf1354ab.tmp
- %HOMEPATH%\__b\_ss.bmp
- %HOMEPATH%\__b\_inx.txt
- from %HOMEPATH%\1microsoft.zip to %HOMEPATH%\1microsoft.zip~rf1353b1.tmp
- from %HOMEPATH%\1microsoft.zip to %HOMEPATH%\1microsoft.zip~rf1354ab.tmp
- %HOMEPATH%\1microsoft.zip
- %TEMP%\kra02388
- 'wi###atic.top':80
- DNS ASK wi###atic.top
- '%WINDIR%\syswow64\cmd.exe' /c DelMe0.bat' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c DelMe0.bat