Technical Information
- '' (downloaded from the Internet)
- %APPDATA%\SteamService.exe
- %HOMEPATH%\My Documents\u32ofh32f4.exe
- %HOMEPATH%\My Documents\img09328789327.jpg
- 'wp#d':80
- 'kd#######d.000webhostapp.com':80
- http://11#.#11.111.1/wpad.dat via wp#d
- http://kd#######d.000webhostapp.com/SteamService.jpg
- http://kd#######d.000webhostapp.com/QJBDHWOIHDU.jpg
- http://kd#######d.000webhostapp.com/111111.jpg
- DNS ASK wp#d
- DNS ASK kd#######d.000webhostapp.com
- ClassName: 'ShImgVw:CPreviewWnd' WindowName: ''
- '%APPDATA%\SteamService.exe'
- '%HOMEPATH%\My Documents\u32ofh32f4.exe'
- '<SYSTEM32>\rundll32.exe' <SYSTEM32>\shimgvw.dll,ImageView_Fullscreen %HOMEPATH%\My Documents\img09328789327.jpg