Technical Information
- %WINDIR%\explorer.exe
- C:\24.exe
- C:\svhcost.exe
- C:\_dcm.bat
- 'go##lm.com':56
- DNS ASK go##lm.com
- DNS ASK ab###168.com
- ClassName: 'Progman' WindowName: 'Program Manager'
- 'C:\svhcost.exe'
- 'C:\24.exe'
- '%WINDIR%\syswow64\cmd.exe' /c c:\24.exe' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c c:\svhcost.exe' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c c:\_dcm.bat' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c c:\24.exe
- '%WINDIR%\syswow64\cmd.exe' /c c:\svhcost.exe
- '%WINDIR%\syswow64\cmd.exe' /c c:\_dcm.bat