Technical Information
- %WINDIR%\syswow64\wsmprovhost.exe
- C:\fkf1fkf.ini
- C:\fkf1fkf.ini
- <Full path to file>
- 'fi##.#f00001.com':1714
- 'fi##.#f00001.com':1219
- http://FI##.##00001.COM:1714/CFMMB/CFMMB.txt?11#####
- http://FI##.##00001.COM:1714/CFMMB/CFMMBpuppet.Txt?11#####
- DNS ASK fi##.#f00001.com
- '%WINDIR%\syswow64\wsmprovhost.exe'