Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\<File name>.exe
- 'pa##ex.pro':80
- 'ra#.####ubusercontent.com':443
- '18#.#57.160.147':61220
- 'ra#.####ubusercontent.com':443
- DNS ASK pa##ex.pro
- DNS ASK ra#.####ubusercontent.com