Technical Information
- %TEMP%\is-pa670.tmp\<File name>.tmp
- %TEMP%\is-khi2n.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-khi2n.tmp\voluptas.exe
- 'gi####undation.life':80
- http://gi####undation.life/v2/events
- DNS ASK gi####undation.life
- '%TEMP%\is-pa670.tmp\<File name>.tmp' /SL5="$5022A,5035940,114176,<Full path to file>"
- '%TEMP%\is-khi2n.tmp\voluptas.exe' 280accbc093bb5b5605388ae51dc2e2d