Technical Information
- '%CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE' -x -s 1824
- %TEMP%\file_mainpicture_pastepictures
- %HOMEPATH%\application data\microsoft\forms\excel.box
- %TEMP%\978173.cvr
- 'xn######kunbi5c.xn--p1ai':80
- http://xn######kunbi5c.xn--p1ai/ip.php
- DNS ASK ex##lvba.ru
- DNS ASK xn######kunbi5c.xn--p1ai