Technical Information
- %APPDATA%\dxmhx.exe
- %TEMP%\rhorywf
- %APPDATA%\dxmhx.exe
- 'localhost':80
- '31.##0.166.176':21
- DNS ASK au######on.whatismyip.com
- '%APPDATA%\dxmhx.exe' <Full path to file>
- '%APPDATA%\dxmhx.exe' <Full path to file>' (with hidden window)