Technical Information
- %WINDIR%\syswow64\expand.exe
- C:\gegff6fk.ini
- C:\gegff6fk.ini
- <Full path to file>
- 'fi##.#f00001.com':1714
- http://FI##.##00001.COM:1714/CFBED/CFBED.txt?47####
- http://FI##.##00001.COM:1714/CFBED/CFBEDpuppet.Txt?48####
- DNS ASK fi##.#f00001.com
- '%WINDIR%\syswow64\expand.exe'