Technical Information
- '%CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE' -x -s 1528
- %TEMP%\772501.cvr
- 'wi#####imbers.com.au':80
- 'wi####timbers.com':80
- 'wi####timbers.com':443
- http://wi#####imbers.com.au/media/word.exe
- http://www.wi####timbers.com/media/word.exe
- 'wi####timbers.com':443
- DNS ASK wi#####imbers.com.au
- DNS ASK wi####timbers.com