Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\system_start.lnk
- C:\users\public\videos\vstelem\ufjfd\rrdnq
- C:\users\public\videos\vstelem\ufjfd\scrnshot.dll
- C:\users\public\videos\vstelem\ufjfd\update.log
- from C:\users\public\videos\vstelem\ufjfd\rrdnq to C:\users\public\videos\vstelem\ufjfd\rrdnq.exe
- '27.##4.3.145':8080
- 'ws#.i52.xyz':9266
- http://wj##v.net/navi/3616A14280E192CB
- '27.##4.3.145':8080
- 'ws#.i52.xyz':9266
- DNS ASK s.##2.xyz
- DNS ASK ws#.i52.xyz
- ClassName: 'SystemTray_Main' WindowName: ''
- ClassName: 'CTXOPConntion_Class' WindowName: ''
- 'C:\users\public\videos\vstelem\ufjfd\rrdnq'
- 'C:\users\public\videos\vstelem\ufjfd\rrdnq' ' (with hidden window)