Technical Information
- %WINDIR%\explorer.exe
- whhcg.exe
- %TEMP%\nsacc73.tmp
- %TEMP%\pcdxsbdzy.w
- %TEMP%\sqsorv.z
- %TEMP%\whhcg.exe
- DNS ASK mi####salena.com
- DNS ASK jh###oups.com
- '%TEMP%\whhcg.exe' %TEMP%\sqsorv.z
- '%TEMP%\whhcg.exe'
- '%WINDIR%\syswow64\control.exe'