Technical Information
- %WINDIR%\syswow64\explorer.exe
- C:\q991302.exe
- C:\q991302.exe
- '82.##9.170.11':80
- DNS ASK dl.##-ware.cc
- DNS ASK do#####ds.adaware.cc
- 'C:\q991302.exe'
- '%WINDIR%\syswow64\explorer.exe' ' (with hidden window)
- '%WINDIR%\syswow64\explorer.exe'