Technical Information
- '%TEMP%\winlogin.exe'
- '%TEMP%\winlogin.exe' (downloaded from the Internet)
- %TEMP%\winlogin.exe
- 'www.my#####utionprovider.be':80
- '<Private IP address>':445
- www.my#####utionprovider.be/media/system/images/mootree.jpg
- DNS ASK www.my#####utionprovider.be