Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\5adc73d7-7567-4df1-a92c-b487c23ad6ec.lnk
- %APPDATA%\microsoft\windows\start menu\programs\startup\68935604-b302-4aa8-8297-633b7d97bbff.lnk
- %LOCALAPPDATA%\spoolsv.scr
- C:\users\secreto.pif
- %LOCALAPPDATA%\1nf0rm@t1on.txt
- %LOCALAPPDATA%\1nf0rm@t1on.txt
- '20########2020.com.preview.services':80
- http://20########2020.com.preview.services/prueba.php
- DNS ASK n2######.000webhostapp.com
- DNS ASK 20########2020.com.preview.services