Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{UO81QN75-G2CM-0P2P-AQ05-HD01U737C3W5}] 'StubPath' = '"<Full path to file>"'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'DeComuqua' = '<Full path to file>'
- <Current directory>\Settings.ini
- %TEMP%\~DF710C.tmp
- <Current directory>\Settings.ini
- 'ko####.punkdns.pw':7500
- DNS ASK ko####.punkdns.pw