Technical Information
- %APPDATA%\qqgwy.exe
- %TEMP%\pwquhpknb
- %APPDATA%\qqgwy.exe
- 'localhost':80
- 'za#####akes.hostei.com':21
- DNS ASK au######on.whatismyip.com
- DNS ASK za#####akes.hostei.com
- '%APPDATA%\qqgwy.exe' <Full path to file>
- '%APPDATA%\qqgwy.exe' <Full path to file>' (with hidden window)