Technical Information
- %WINDIR%\syswow64\rasphone.exe
- C:\f0fef1fff1.ini
- <Current directory>\config.ini
- <Current directory>\post
- <Current directory>\int[1.9].exe
- C:\f0fef1fff1.ini
- <Current directory>\post
- <Current directory>\int[1.9].exe
- <Current directory>\post
- <Current directory>\int[1.9].exe
- http://lo###.#h1949.com:1214/File5/Tips.txt via lo###.ch1949.com
- http://lo###.#h1949.com:1214/5.exe via lo###.ch1949.com
- DNS ASK lo###.ch1949.com
- '%WINDIR%\syswow64\rasphone.exe'