Technical Information
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'RCGLSQK375' = '"%HOMEPATH%\<File name>.js"'
- %APPDATA%\microsoft\windows\start menu\programs\startup\<File name>.js
- %HOMEPATH%\<File name>.js
- 'co######omocm.duckdns.org':7971
- http://co#######mocm.duckdns.org:7971/Vre via co######omocm.duckdns.org
- DNS ASK co######omocm.duckdns.org