Technical Information
- [HKLM\SYSTEM\CurrentControlSet\Services\wmiview] 'Start' = '00000002'
- [HKLM\SYSTEM\CurrentControlSet\Services\wmiview] 'ImagePath' = '%WINDIR%\SysWOW64\wmiview.exe'
- 'wmiview' %WINDIR%\SysWOW64\wmiview.exe
- from <Full path to file> to %WINDIR%\syswow64\wmiview.exe
- '17#.#12.192.45':8080
- '19#.#8.246.242':443