Technical Information
- %TEMP%\xycwpfcach1
- %TEMP%\xycwpfcach3
- http://re######claimsrecovery.com/08yhrf3?XY###################
- http://pa####eather.com/08yhrf3?XY###################
- DNS ASK re######claimsrecovery.com
- DNS ASK rd#y.cn
- DNS ASK pa####eather.com
- DNS ASK gy###nbar.com
- DNS ASK ha###lam.net