Technical Information
- [<HKLM>\System\CurrentControlSet\Services\Wsdwgc roxqgpqi] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\Wsdwgc roxqgpqi] 'ImagePath' = '%ProgramFiles%\Windows NT\Pvtcmih.exe'
- %ProgramFiles%\windows nt\pvtcmih.exe
- '45.##1.70.228':4433
- '%ProgramFiles%\windows nt\pvtcmih.exe'