Technical Information
- '<SYSTEM32>\rundll32.exe' ..\LOPS.NNIIKK,DllRegisterServer
- %HOMEPATH%\lops.nniikk
- <Current directory>\6a380000
- <PATH_SAMPLE>.xls
- 'ir#########einmd.smartwebsitedesign.com':80
- DNS ASK ir#########einmd.smartwebsitedesign.com
- '<SYSTEM32>\rundll32.exe' ..\LOPS.NNIIKK,DllRegisterServer' (with hidden window)