Technical Information
- '%CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE' -x -s 2132
- %TEMP%\1210489.cvr
- 'om###dezine.com':80
- 'om###dezine.com':443
- http://om###dezine.com/wp-content/plugins/hello123/word.exe
- 'om###dezine.com':443
- DNS ASK om###dezine.com