Technical Information
- starts.exe
- %TEMP%\rarsfx0\starts.exe
- C:\users\public\desktop\download chest%20finder...lnk
- DNS ASK ba######ys82.coffey.com.ar
- DNS ASK e6#####84gns8ug.neyd.ru
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
- '%TEMP%\rarsfx0\starts.exe'