Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\fef04712de08cf579c6168b61dd647ee.exe
- %TEMP%\dwm.exe
- %TEMP%\pic_1162.jpg
- %APPDATA%\igfxtrey.exe
- 'jo#####al.duckdns.org':6903
- DNS ASK jo#####al.duckdns.org
- '%TEMP%\dwm.exe'
- '%APPDATA%\igfxtrey.exe'