Technical Information
- AVGCC32.EXE
- %ALLUSERSPROFILE%\xis\ogrbab.cwx
- %TEMP%\gfa.beb
- %ALLUSERSPROFILE%\xis\odt.mvh
- %TEMP%\jkv.ylz
- DNS ASK microsoft.com
- DNS ASK cn####qjuoqc.com
- DNS ASK eu##ma.net
- DNS ASK ie###hnr.net
- DNS ASK qa##ye.in
- DNS ASK sz###fgkwk.net
- DNS ASK hg##j.pw
- DNS ASK qw###npvo.pw
- DNS ASK nn##wi.in
- DNS ASK am###syb.net
- DNS ASK gb##nnm.net
- '%ProgramFiles%\Windows NT\hypertrm.exe'