Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\Wsmcoo yykugoye] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\Wsmcoo yykugoye] 'ImagePath' = '%ProgramFiles%\Microsoft Ksguqm\Iqowsim.exe'
- %ProgramFiles%\Microsoft Ksguqm\Iqowsim.exe
- '11#.#30.169.91':10086
- '%ProgramFiles%\Microsoft Ksguqm\Iqowsim.exe'