Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Applayer.exe' = '"%HOMEPATH%\My Documents\My Music\Applayer.exe"'
- %HOMEPATH%\My Documents\My Music\Applayer.exe
- %TEMP%\index.dat
- %HOMEPATH%\My Documents\My Music\Applayer.exe
- <Current directory>\The Invitation of Military Space 2013 Conference.pdf
- %TEMP%\index.dat
- 'to###.#nyoffice.info':80
- to###.#nyoffice.info/files/pear1/index.asp?79######
- DNS ASK to###.#nyoffice.info
- ClassName: 'Indicator' WindowName: ''