Technical Information
- <Current directory>\skinh_el.dll
- <Current directory>\del_tmp.cmd
- <Current directory>\del_tmp.cmd
- DNS ASK w.###ata.net
- DNS ASK no##.youdao.com
- ClassName: '' WindowName: ''
- '%WINDIR%\syswow64\cmd.exe' /c <Current directory>\del_tmp.cmd' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c <Current directory>\del_tmp.cmd
- '%WINDIR%\syswow64\timeout.exe' /T 1