Technical Information
- [HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run] 'keylogger.exe' = '<Full path to file>'
- 'mo#####.map.fastly.net':443
- DNS ASK fi###.#00webhost.com
- DNS ASK mo#####.map.fastly.net
- '<Full path to file>' ' (with hidden window)