Technical Information
- '%WINDIR%\syswow64\svchost.exe'
- '%CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE' -x -s 1960
- %WINDIR%\syswow64\svchost.exe
- %TEMP%\1085938.cvr
- 'ap#.#pify.org':80
- http://ap#.#pify.org/
- DNS ASK ap#.#pify.org
- DNS ASK ne###onma.com
- DNS ASK ge###owfi.ru
- DNS ASK re###dreslac.ru