Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11171ac4670577e67b92e9135c428411' = '"%HOMEPATH%\Crome.exe" ..'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '11171ac4670577e67b92e9135c428411' = '"%HOMEPATH%\Crome.exe" ..'
- %HOMEPATH%\Start Menu\Programs\Startup\11171ac4670577e67b92e9135c428411.exe
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%HOMEPATH%\Crome.exe' = '%HOMEPATH%\Crome.exe:*:Enabled:Crome.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%HOMEPATH%\Crome.exe" "Crome.exe" ENABLE
- %HOMEPATH%\Crome.exe
- 'an#####es.duckdns.org':1177
- DNS ASK an#####es.duckdns.org
- '%HOMEPATH%\Crome.exe'