Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\<File name>.exe.lnk
- <Current directory>\libeay32.dll
- <Current directory>\ssleay32.dll
- %PROGRAMDATA%\deland\10-29-2019-11-38-34_h.his
- %PROGRAMDATA%\deland\wddyrkzlp_user_searchlog.txt
- %PROGRAMDATA%\deland\smalllog.rar
- %PROGRAMDATA%\deland\10-29-2019-11-38-34_h.his
- %PROGRAMDATA%\deland\wddyrkzlp_user_searchlog.txt
- DNS ASK do####felton.club
- '%ProgramFiles%\winrar\rar.exe' a -r -ep1 -df -v2500k -hp89e76f499fd0d468ffc4d05f1607cbd8 "%PROGRAMDATA%\deland\SmallLog" "%PROGRAMDATA%\deland\wddyrkzlp_user_SearchLog.txt"