Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\til.exe.vbs
- til.exe
- %APPDATA%\til.exe\til.exe
- %APPDATA%\til.exe\til.exe:zoneidentifier
- %APPDATA%\logs\04-14-2020
- 'gr#####p.duckdns.org':53905
- 'localhost':53905
- http://ip##pi.com/json/
- DNS ASK ip##pi.com
- DNS ASK gr#####p.duckdns.org
- '%APPDATA%\til.exe\til.exe'