Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{71204E0A-C92D-AEDD-7D47-817EE122CE57}] 'stubpath' = ''
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\stupe\server.exe
- <SYSTEM32>\stupe\server.exe
- 'ma######eemooooo.myftp.biz':288
- DNS ASK ma######eemooooo.myftp.biz
- '<Private IP address>':1035