Technical Information
- %APPDATA%\uqfzq.exe
- %TEMP%\hnhitfj
- %APPDATA%\uqfzq.exe
- 'localhost':80
- DNS ASK au######on.whatismyip.com
- DNS ASK ft#.####blick.si.ohost.de
- '%APPDATA%\uqfzq.exe' <Full path to file>
- '%APPDATA%\uqfzq.exe' <Full path to file>' (with hidden window)