Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\.url
- %WINDIR%\syswow64\dllhost.exe
- %HOMEPATH%\bdeui\wpnpinst.exe.exe
- %HOMEPATH%\bdeui\.vbs
- %APPDATA%\remcos\logs.dat
- 'mo#####t2020.ddns.net':6735
- DNS ASK mo#####t2020.ddns.net
- '%WINDIR%\syswow64\dllhost.exe'