Technical Information
- <Current directory>\ryr7qcjpbrzhzgjro5s6.exe
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- DNS ASK cd#.##scordapp.com
- DNS ASK microsoft.com
- DNS ASK st####.rapidssl.com
- ClassName: 'Warz' WindowName: ''
- '<Current directory>\ryr7qcjpbrzhzgjro5s6.exe' "<Full path to file>"
- '%WINDIR%\syswow64\cmd.exe' /c C://Windows//WindowsShell.exe