Technical Information
- %HOMEPATH%\6514D49585E42555\winlogon.exe
- <SYSTEM32>\svchost.exe
- %HOMEPATH%\6514D49585E42555\winlogon.exe
- 'wh##.amung.us':80
- wh##.amung.us/swidget/26n2qf7pnk0x
- DNS ASK eo##########4xnfmu29i9hvm3581r.ipgreat.com
- DNS ASK 2e##########65f547hn0m20k38mej.ipcheker.com
- DNS ASK wh##.amung.us