Technical Information
- %WINDIR%\syswow64\wuapp.exe
- C:\fjf0ffgeflg1.ini
- C:\fjf0ffgeflg1.ini
- from <Full path to file> to %TEMP%\obs0g1ww29cfte\....\obs0g1ww29cfte
- <Full path to file>
- 'lo###.nb00001.com':1714
- http://lo###.#FD3D.com:1714/CFTIM/CFTIM.txt?11#####
- http://lo###.#fd3d.com:1714/CFTIM/CFTIMpuppet.Txt?11##### via lo###.cfd3d.com
- DNS ASK lo###.cfd3d.com
- DNS ASK lo###.nb00001.com
- '%WINDIR%\syswow64\wuapp.exe'