Technical Information
- %WINDIR%\microsoft.net\framework\v4.0.30319\addinprocess32.exe
- 'ch#####.amazonaws.com':80
- http://45.##.231.213:27016/IRemotePanel via 45.##.231.213
- DNS ASK th##ink.ru
- DNS ASK ap#.ip.sb
- DNS ASK ch#####.amazonaws.com
- '%WINDIR%\microsoft.net\framework\v4.0.30319\addinprocess32.exe'