Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'AS2014' = '%PROGRAMDATA%\qWQfdWlo\qWQfdWlo.exe'
- %PROGRAMDATA%\qwqfdwlo\qwqfdwlo.exe
- %PROGRAMDATA%\qwqfdwlo\qwqfdwloyvsagggg.in
- %PROGRAMDATA%\qwqfdwlo\qwqfdwlo.exe.manifest
- %PROGRAMDATA%\qwqfdwlo\qwqfdwlo.ico
- '11#.#1.209.166':80