Technical Information
- '' (downloaded from the Internet)
- <SYSTEM32>\svchost.exe
- <Current directory>\tem.vbs
- <Current directory>\tem.vbs
- <Full path to file>
- '19#.#68.98.38':80
- http://19#.#68.98.38/Downer.exe
- '<SYSTEM32>\wscript.exe' "<Current directory>\tem.vbs"
- '<SYSTEM32>\svchost.exe'