Technical Information
- %TEMP%\bouncycastle.crypto.dll
- %TEMP%\x86\sqlite.interop.dll
- %TEMP%\system.runtime.compilerservices.unsafe.xml
- %TEMP%\system.runtime.compilerservices.unsafe.dll
- %TEMP%\system.numerics.vectors.xml
- %TEMP%\system.numerics.vectors.dll
- %TEMP%\system.memory.xml
- %TEMP%\system.memory.dll
- %TEMP%\system.io.compression.dll
- %TEMP%\system.data.sqlite.xml
- %TEMP%\system.data.sqlite.dll
- %TEMP%\system.buffers.xml
- %TEMP%\system.buffers.dll
- %TEMP%\newtonsoft.json.xml
- %TEMP%\newtonsoft.json.dll
- %TEMP%\bouncycastle.crypto.xml
- %TEMP%\x64\sqlite.interop.dll
- %TEMP%\svc_host.exe
- %TEMP%\bouncycastle.crypto.dll
- %TEMP%\bouncycastle.crypto.xml
- %TEMP%\newtonsoft.json.dll
- '95.##1.155.150':80
- 'ch####p.dyndns.org':80
- 'ip##fo.io':80
- http://95.##1.155.150/crypt/Svc_host.exe
- http://ch####p.dyndns.org/
- http://ip##fo.io/95.211.190.199
- DNS ASK ch####p.dyndns.org
- DNS ASK ip##fo.io
- '%TEMP%\svc_host.exe'