Steals bitcoins from these vallets : AppDataRoamingBitcoinwallet.dat AppDataRoamingLitecoinwallet.dat AppDataRoamingPPCoinwallet.dat AppDataRoamingTerracoinwallet.dat AppDataRoamingBitcoinwallet.dat AppDataRoamingLitecoinwallet.dat AppDataRoamingPPCoinwallet.dat AppDataRoamingTerracoinwallet.dat Uses email to transfer stealed wallets. Some strings from the executable : @600018e: ldarg.0 @600018f: ldc.i4.0 @6000190: callvirt 0A000052 @6000191: call 0A000053 @6000192: call 0A000054 @6000193: stloc.s V_4 @6000194: ldloc.s V_4 @6000195: ldstr ;FileSplit @6000196: callvirt 0A000055 @6000197: brtrue.s label_0Read more...