Technical Information
- %APPDATA%\bitee25.tmp
- %APPDATA%\bitee25.tmp
- from %APPDATA%\bitee25.tmp to %APPDATA%\kalkulationskolonnernes.pla
- '14#.#8.103.250':80
- http://14#.#8.103.250/universalstrmforsyninger.snp
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' "<#Houve overlapningen Datalogidels Splining Torotoro Exoterics #>;<#Kaalhoved Complicitous Sdfyldte Boniterings Recessivt #>;New-Item -Path 'Cephalobranchiata:\Udnytters' -Name 'Rerecord114' -...' (with hidden window)
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' "<#Houve overlapningen Datalogidels Splining Torotoro Exoterics #>;<#Kaalhoved Complicitous Sdfyldte Boniterings Recessivt #>;New-Item -Path 'Cephalobranchiata:\Udnytters' -Name 'Rerecord114' -...
- '<SYSTEM32>\cmd.exe' /c "echo 1 && exit"
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' "<#Houve overlapningen Datalogidels Splining Torotoro Exoterics #>;<#Kaalhoved Complicitous Sdfyldte Boniterings Recessivt #>;New-Item -Path 'Cephalobranchiata:\Udnytters' -Name 'Rerecord114' -...
- '%WINDIR%\syswow64\cmd.exe' /c "echo 1 && exit"