Technical Information
- %HOMEPATH%\6514D49585E42555\winlogon.exe
- <SYSTEM32>\svchost.exe
- %HOMEPATH%\6514D49585E42555\winlogon.exe
- 'wh##.amung.us':80
- wh##.amung.us/swidget/26n2qf7pnk0x
- DNS ASK 09##########321w3vu857y81vm0x2.ipgreat.com
- DNS ASK 7p##########35g1006435g3z0ul92.ipcheker.com
- DNS ASK wh##.amung.us