Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SPKADST' = '"<Full path to file>" /s'
- <Current directory>\volhost.exe
- <Current directory>\volhost.exe
- <Full path to file>
- 'gr####aturesoft.com':80
- DNS ASK gr####aturesoft.com
- '<Current directory>\volhost.exe'