Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'HawkLogger' = '%APPDATA%\HawkLogger\HawkLoggerClient.exe'
- %APPDATA%\mozilla\firefox\profiles.ini
- %APPDATA%\opera software\opera stable\login data
- %LOCALAPPDATA%\google\chrome\user data\default\login data
- %HOMEPATH%\documents\monitoringsoftwareinstallnotice.txt
- %APPDATA%\hawklogger\hawkloggerclient.exe
- 'to###.feron.it':80
- 'to###.feron.it':443
- 'to###.feron.it':443
- DNS ASK to###.feron.it