Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\MicrosoftOficeUpdate.lnk
- %TEMP%\~wrrwzsm.bat
- %HOMEPATH%\Start Menu\Programs\Startup\MicrosoftOficeUpdate.lnk
- <Full path to file>
- '91.##7.16.122':21
- DNS ASK www.google.com
- '<SYSTEM32>\cmd.exe' /c %TEMP%\~wrrwzsm.bat