Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '<File name>' = 'cmd.exe /c start <Full path to file>'
- ClassName: 'PROCEXPL', WindowName: ''
- ClassName: 'TCPViewClass', WindowName: ''
- <PATH_SAMPLE>.ini
- <Current directory>\vorfnofg.dll
- <Current directory>\sqlite3.dll
- 'ip##fo.io':80
- http://ip##fo.io/json
- DNS ASK ma########vMDcvMjAyMg.ddnsking.com
- DNS ASK ip##fo.io
- ClassName: '' WindowName: ''