Technical Information
- <Current directory>\netsvr.exe
- from <Full path to file> to <Current directory>\netsvr.exe
- 'ph#.#atips.com':80
- http://34.##5.242.146/search%3Fgid%3Difsxspevgjgnwuaktdfjuisjumazpafc
- http://34.##5.242.146/search%3Fgid%3Dlquklqwgaxofjepyxmqwvtfeluhqqbqa
- http://34.##5.242.146/search%3Fgid%3Dfobscggofvxbcelnjdjgebsusoflflil
- DNS ASK ph#.#atips.com
- '<Full path to file>' ' (with hidden window)