Technical Information
- %TEMP%\d47f.tmp
- %APPDATA%\wiwrwrd
- %APPDATA%\wiwrwrd
- 'ms###csi.com':80
- http://www.ms###csi.com/ncsi.txt
- DNS ASK ma###tat55.club
- DNS ASK kx###v65.club
- DNS ASK ds###l95.xyz
- DNS ASK fd###l70.club
- DNS ASK se####estar75.club
- DNS ASK st####vert90.club
- ClassName: '' WindowName: ''