Technical Information
- %WINDIR%\syswow64\svchost.exe
- %WINDIR%\syswow64\svchost.exe
- %TEMP%\aut539f.tmp
- %TEMP%\apostrophise
- %TEMP%\aut567e.tmp
- %TEMP%\ambiparous
- %TEMP%\aut5c69.tmp
- %TEMP%\aut5fd5.tmp
- conout$
- '10#.#72.132.32':6506
- '%WINDIR%\syswow64\svchost.exe'