Technical Information
- '%TEMP%\ddmw.exe'
- http://we####onewin.org/onlineshoppingmart.nj/fudmaster/ddmw.exe as %temp+%\ddmw.exe
- %TEMP%\ddmw.exe
- http://we####onewin.org/onlineshoppingmart.nj/fudmaster/ddmw.exe
- DNS ASK we####onewin.org
- '%WINDIR%\microsoft.net\framework\v4.0.30319\msbuild.exe'