Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\window defender.exe
- <Drive name for removable media>:\.lnk
- <Drive name for removable media>:\x.exe
- %TEMP%\Data.txt
- %APPDATA%\Windata\window defender.exe
- <Drive name for removable media>:\x.exe
- %TEMP%\Data.txt
- %TEMP%\Data.txt
- 'it#####ak21.duckdns.org':8991
- 'ip###ore.com':80
- http://ip###ore.com/checkip/
- DNS ASK it#####ak21.duckdns.org
- DNS ASK ip###ore.com