Technical Information
- %TEMP%\7j18cat33evsec
- http://ra####msgroup.com/0lcl25mc6
- http://ra####msgroup.com/cgi-sys/suspendedpage.cgi
- http://rn####hnology.com/2szwz3yrtq
- http://rn####hnology.com/1vgql
- http://sa##nox.ca/qyxjfhfvlt
- DNS ASK ra####msgroup.com
- DNS ASK rn####hnology.com
- DNS ASK ru###mobil.com
- DNS ASK sa##nox.ca