Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\guzeriysff.js
- %APPDATA%\guzeriysff.js
- 'ss#####c.duckdns.org':7820
- 'ja####torun.duia.ro':5465
- DNS ASK ss#####c.duckdns.org
- DNS ASK ja####torun.duia.ro
- '<SYSTEM32>\wscript.exe' //B "%APPDATA%\GuZeriySFF.js"