Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\Apachea] 'ImagePath' = '%CommonProgramFiles%\System\wab32.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Apachea] 'Start' = '00000002'
- %CommonProgramFiles%\System\wab32.exe
- 'ji#####ngyuefei.6655.la':9166
- DNS ASK ji#####ngyuefei.6655.la
- '%CommonProgramFiles%\System\wab32.exe'