Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Protz' = '%APPDATA%\Hearts\Leaon'
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Protz' = '\Hearts\Leaon'
- %APPDATA%\hearts\leaon
- C:\hearts\leaon
- %APPDATA%\imminent\logs\30-09-2022
- %APPDATA%\imminent\path.dat
- <Full path to file>
- DNS ASK sl#####ter2.zapto.org