Technical Information
- '%TEMP%\flflEbExlffhICOA.exe' /SUPPRESSMSGBOXES /NORESTART /S /kr /VERYSILENT1]
- '' (downloaded from the Internet)
- %TEMP%\flflEbExlffhICOA.exe
- 'ra#####lestorage.com':80
- 'localhost':1037
- http://ra#####lestorage.com/updates/ts/ts_3/update_e.exe?nz##############################
- DNS ASK ra#####lestorage.com