Technical Information
- %TEMP%\rsagent\rsagentlog.txt
- http://jd###ental.nl/RSAgent/settings.txt
- http://cr#.#ectigo.com/SectigoRSADomainValidationSecureServerCA.crt
- DNS ASK jd###ental.nl
- DNS ASK cr#.#ectigo.com
- DNS ASK co#####.soeidental.com
- '%ProgramFiles%\mozilla firefox\firefox.exe' -osint -url "https://connect.soeidental.com/"