Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\ВјГ ВІГў.lnk
- 'on##x.top':80
- 'lo##us.net':443
- 'microsoft.com':80
- 'sm##.163.com':25
- http://www.on##x.top/
- DNS ASK on##x.top
- DNS ASK lo##us.net
- DNS ASK microsoft.com
- DNS ASK sm##.163.com
- DNS ASK 12##.ip138.com