Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\Google Upgrade Assistant.exe
- %TEMP%\7zZUV81ZA3N\WmiPrvSE.exe
- %HOMEPATH%\Start Menu\Programs\Startup\Google Upgrade Assistant.exe
- 'us.####roocean.stream':80
- DNS ASK us.####roocean.stream
- '%TEMP%\7zZUV81ZA3N\WmiPrvSE.exe'
- '<SYSTEM32>\cmd.exe' /c "%TEMP%\7zZUV81ZA3N\WmiPrvSE.exe"