Technical Information
- %TEMP%\gjgzwc0wj8krco3v
- http://ny###oyuan.com/sjnzszqk5e
- http://pk######lcontracting.com/ltiho2l
- http://ri##egu.net/jsrzldawwu
- http://pr##edu.com/tnbsb
- DNS ASK ny###oyuan.com
- DNS ASK pk######lcontracting.com
- DNS ASK ri##egu.net
- DNS ASK pr##edu.com
- DNS ASK pi##itm.com