Technical Information
- '<SYSTEM32>\rundll32.exe' ..\HGrt.foste,DllRegisterServer
- <Current directory>\3cf11000
- <PATH_SAMPLE>.xls
- 'ma####scagin.com':80
- DNS ASK ma####scagin.com
- '<SYSTEM32>\rundll32.exe' ..\HGrt.foste,DllRegisterServer' (with hidden window)