Technical Information
- %WINDIR%\syswow64\systempropertiesremote.exe
- C:\ffflfjflf.ini
- C:\ffflfjflf.ini
- <Full path to file>
- 'lo###.nb00001.com':1714
- http://lo###.#FD3D.com:1714/CFTIM/CFTIM.txt?11#####
- http://lo###.#fd3d.com:1714/CFTIM/CFTIMpuppet.Txt?11##### via lo###.cfd3d.com
- DNS ASK lo###.cfd3d.com
- DNS ASK lo###.nb00001.com
- '%WINDIR%\syswow64\systempropertiesremote.exe'