Technical Information
- '<SYSTEM32>\rundll32.exe' C:\esiou\copr.rsgs,DllRegisterServer
- <Current directory>\d2721000
- <PATH_SAMPLE>.xls
- http://li###fyapp.co/ds/1612.gif
- DNS ASK li###fyapp.co
- '<SYSTEM32>\rundll32.exe' C:\esiou\copr.rsgs,DllRegisterServer' (with hidden window)